Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UD1W6L2cx65EoV3sntollFbB49M.roa
File: UD1W6L2cx65EoV3sntollFbB49M.roa (raw, json)
Hash identifier: oyoIaMcEb3umJfhYi+36ZdBPXtEaAV3dyuKZHtAD4xQ=
Subject key identifier: 50:3D:56:E8:BD:9C:C7:AE:44:A1:5D:EC:9E:DA:25:94:56:C1:E3:D3
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B6337B183B6D8C65A6A625C2A58E7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UD1W6L2cx65EoV3sntollFbB49M.roa
Signing time: Tue 02 Jan 2024 12:34:50 +0000
ROA not before: Tue 02 Jan 2024 12:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207803
IP address blocks: 185.224.145.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:63:37:b1:83:b6:d8:c6:5a:6a:62:5c:2a:58:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=503d56e8bd9cc7ae44a15dec9eda259456c1e3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:de:6e:01:39:96:9a:a2:42:0d:74:22:9f:
9b:15:e6:35:ca:26:ec:eb:07:c0:89:5a:a4:e7:d9:
31:8c:15:40:b6:be:c4:b4:6c:75:58:02:25:8e:58:
98:1e:87:d9:e7:ad:4c:ee:7e:a8:b8:ee:aa:5f:5b:
ec:66:48:53:4a:28:38:2d:8b:f8:bf:2f:30:c1:32:
f2:c6:ac:12:ea:d4:f5:cd:2b:d7:50:a2:86:91:98:
f0:66:dd:98:08:1c:d8:d0:1c:bb:0a:3d:c7:91:e4:
86:c9:46:22:ee:51:8b:48:c5:d0:1c:46:17:af:a3:
48:5c:9a:5e:84:4f:20:f7:c0:c0:21:f5:85:e9:1d:
e8:b0:d8:e8:1b:f9:d8:5e:0e:f8:b4:e7:13:d3:c9:
64:46:c6:c2:e0:37:90:99:0c:85:44:39:65:86:fb:
57:ef:ea:19:c3:73:39:39:ba:ff:5d:52:73:41:86:
9d:cb:a4:4f:1f:6f:67:4d:f1:45:2c:9d:3b:27:b6:
be:27:c8:0f:58:04:14:e7:f4:39:e9:28:53:11:72:
60:3a:ce:96:e1:51:4f:df:8a:77:c2:ee:59:f1:5e:
d3:5c:bc:98:03:d2:29:3d:be:48:06:05:67:71:09:
10:9c:38:61:71:64:61:e2:1d:98:e4:d0:b0:aa:d1:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:56:E8:BD:9C:C7:AE:44:A1:5D:EC:9E:DA:25:94:56:C1:E3:D3
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UD1W6L2cx65EoV3sntollFbB49M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.145.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ad:73:cc:a6:41:87:e0:fa:98:85:57:da:21:bb:33:59:59:
81:7a:53:5f:7f:07:1b:55:90:2d:0f:d2:61:f9:13:7c:98:47:
55:34:e7:4e:d4:77:c4:fd:b6:e0:a8:5e:1d:0a:01:63:a1:26:
8c:79:4c:89:aa:a4:42:76:65:f0:9e:b5:a2:d4:1e:ff:14:19:
42:6c:34:5a:fd:be:7e:d4:b9:d5:49:04:e3:1a:fc:d0:1d:d1:
5f:fa:51:e6:ef:a6:eb:0b:b1:34:e9:e6:74:8c:73:4a:d3:75:
62:d6:57:81:9a:c7:4a:bd:ed:b4:3b:cb:94:a3:d4:4d:2a:24:
54:62:ea:57:9d:80:19:a9:58:bd:d9:0a:b4:aa:27:e0:ed:a6:
6e:b6:7d:26:96:39:03:6f:3d:c1:e1:de:2f:1f:6a:d9:28:ac:
c2:97:0f:7c:1d:0f:75:e8:95:2a:44:97:17:89:9a:59:f5:81:
27:49:0d:fb:c4:fc:4f:c9:06:50:c7:14:97:28:6c:df:cf:51:
b0:a8:61:f0:6a:f1:be:20:ae:9a:6d:27:eb:c9:0f:fb:3e:b5:
86:09:8b:97:f7:73:98:45:a1:f4:fb:71:a8:a9:d1:92:b0:d1:
34:bb:bb:89:b0:57:38:3a:6b:7f:7b:1b:12:b5:db:f8:78:c7:
13:30:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:10:49 2024 by rpki-client on console-ams.rpki-client.org