Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/UZiLr7H53mMjs2PwKXBE39XoiW8.roa
File: UZiLr7H53mMjs2PwKXBE39XoiW8.roa (raw, json)
Hash identifier: BsX3+/j/CzumO+tY/TEb3cPqrh0MFom51c8T2/MEpok=
Subject key identifier: 51:98:8B:AF:B1:F9:DE:63:23:B3:63:F0:29:70:44:DF:D5:E8:89:6F
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 018CC7270D7E1198EB3C9A316B166BAB4581
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/UZiLr7H53mMjs2PwKXBE39XoiW8.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198785
IP address blocks: 185.155.217.0/24 maxlen: 24
185.155.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0d:7e:11:98:eb:3c:9a:31:6b:16:6b:ab:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51988bafb1f9de6323b363f0297044dfd5e8896f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:1f:e7:ce:db:40:1a:41:d3:0a:63:53:dc:
2e:f7:52:cf:60:98:af:b7:fd:38:80:5d:f8:85:0e:
59:9b:91:31:4c:39:5d:e6:63:5c:9d:38:61:f7:31:
04:c1:f5:0f:34:04:1d:2a:76:cb:c8:49:43:0e:d1:
bf:7a:a9:e8:c7:16:50:14:09:ac:8d:73:3c:93:fe:
e5:96:6c:0b:7c:fa:49:5b:52:50:82:de:23:84:52:
c9:a5:38:7f:4e:a0:a7:62:f6:9a:a0:3b:a0:7c:5c:
c3:73:5f:ec:67:ff:e5:25:b8:f4:42:8a:7e:49:4e:
10:99:a8:00:39:e5:11:56:cb:2a:37:3d:22:ee:1d:
e3:dd:10:6f:65:8b:60:bf:42:86:18:fa:80:48:7d:
4b:8e:b7:43:5d:a2:d2:86:6e:ce:05:2e:b0:fb:e9:
8d:e2:52:06:cf:34:58:7a:e1:b9:72:4a:8c:a4:59:
91:88:e4:02:21:e7:33:46:79:12:27:56:2b:ba:2d:
5b:1d:94:60:07:99:e5:a5:41:40:ab:92:a0:4b:40:
d2:b6:96:86:f6:ae:35:47:b6:a5:2c:e1:c0:b5:1c:
85:00:2b:97:b1:0f:2f:cb:ac:25:c3:10:a9:4b:7b:
e7:ad:2f:1a:eb:e8:83:31:31:d1:00:a1:35:ee:f0:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:8B:AF:B1:F9:DE:63:23:B3:63:F0:29:70:44:DF:D5:E8:89:6F
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/UZiLr7H53mMjs2PwKXBE39XoiW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.216.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:fd:87:9c:cf:24:e4:6a:dd:8b:cc:23:31:85:a4:0d:10:51:
8a:ea:9b:5c:6d:0a:60:93:79:82:17:cb:42:91:c4:cd:ed:90:
7e:71:43:99:5d:0e:9e:3b:2d:6e:69:ab:d5:ce:35:fa:96:57:
d2:e8:21:77:d5:19:9e:c9:aa:e6:4f:ea:24:71:e3:b5:e9:da:
0b:a6:06:8f:9d:84:12:30:8b:08:8a:78:97:c3:fa:69:73:e6:
19:ec:2c:cf:ac:8f:ef:b3:47:e0:57:f3:b2:6b:eb:65:d8:b2:
0b:46:ec:b2:04:c2:51:43:42:d4:62:e4:27:99:24:49:3c:e3:
44:36:b8:c9:4a:36:87:6e:ee:c4:99:05:e7:75:7d:d0:c5:63:
c0:0f:07:2d:98:7e:00:75:ad:8b:80:35:3b:6d:8b:3b:11:84:
33:fa:60:67:cf:67:ee:8f:37:8c:69:5e:11:8d:bb:f4:2b:50:
26:64:0f:ee:15:af:73:53:ca:48:38:4a:9b:42:25:6b:dc:0c:
ef:6d:0c:e8:1b:cf:49:c1:fa:41:c3:e7:04:bf:95:3c:ad:11:
1a:d6:dd:71:ec:d0:5a:71:af:b8:1a:0b:75:84:e3:6b:10:ff:
a4:65:b6:86:04:df:1a:5b:df:97:da:ed:27:62:fa:5f:8b:00:
b1:ab:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:59:52 2024 by rpki-client on console-fra.rpki-client.org