Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/uc4JS1wmKE4cp8hPVoKDoXkaS2I.roa
File: uc4JS1wmKE4cp8hPVoKDoXkaS2I.roa (raw, json)
Hash identifier: 341jIkZUhi87iNsqbYCtWYWmUuaKA0A5MlaJPvfphoc=
Subject key identifier: B9:CE:09:4B:5C:26:28:4E:1C:A7:C8:4F:56:82:83:A1:79:1A:4B:62
Certificate issuer: /CN=27a4e5aacb129ea507382b23db97ca4200704d69
Certificate serial: 018CC4251922D13E984329D18605C48D9EB6
Authority key identifier: 27:A4:E5:AA:CB:12:9E:A5:07:38:2B:23:DB:97:CA:42:00:70:4D:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/uc4JS1wmKE4cp8hPVoKDoXkaS2I.roa
Signing time: Mon 01 Jan 2024 08:30:14 +0000
ROA not before: Mon 01 Jan 2024 08:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59886
IP address blocks: 185.49.44.0/24 maxlen: 24
185.49.47.0/24 maxlen: 24
185.49.46.0/24 maxlen: 24
185.49.45.0/24 maxlen: 24
185.67.206.0/24 maxlen: 24
185.67.205.0/24 maxlen: 24
185.67.204.0/24 maxlen: 24
185.67.207.0/24 maxlen: 24
2a03:2620::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:19:22:d1:3e:98:43:29:d1:86:05:c4:8d:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a4e5aacb129ea507382b23db97ca4200704d69
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9ce094b5c26284e1ca7c84f568283a1791a4b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:fd:c3:e1:d1:ba:c4:e6:77:a5:06:1d:96:
ec:7a:54:7f:55:75:48:24:ec:36:f5:45:22:57:99:
f0:da:c1:30:41:36:0b:c9:fa:c9:c6:9d:f4:28:8f:
57:e3:20:ff:eb:4b:df:8c:2c:4a:91:29:79:7f:13:
49:2c:eb:02:1c:09:a8:fb:f0:78:04:f7:a5:7e:9d:
a5:19:fa:4b:7e:e1:9e:d6:4a:43:85:3e:74:88:3a:
38:3e:8d:02:c6:4b:31:eb:d4:3e:95:56:22:bc:47:
de:f7:fa:8d:3c:bb:11:2f:89:55:8d:db:55:db:97:
e9:73:c3:b7:0f:4d:6a:77:9f:b7:87:b4:52:45:dc:
c9:61:be:1f:f2:44:46:0b:8a:21:86:ba:86:44:77:
83:a5:1d:c6:c1:1f:86:fe:2e:dd:1b:9b:6b:0c:8a:
d4:1a:3a:d3:19:69:e1:0f:61:1b:46:9a:77:cc:13:
b7:fb:e1:35:18:45:3b:d5:29:08:ec:af:9b:f0:7f:
eb:7a:f4:c4:82:ce:46:80:68:e7:79:64:2c:f2:a6:
3a:d1:04:1f:ce:b7:5b:cc:82:30:90:0c:43:73:41:
ea:d0:75:da:9b:4b:e0:69:8c:2f:3a:f5:0b:76:99:
15:fa:d2:4c:a2:c2:c0:3d:7e:15:e4:d2:cf:68:23:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:09:4B:5C:26:28:4E:1C:A7:C8:4F:56:82:83:A1:79:1A:4B:62
X509v3 Authority Key Identifier:
keyid:27:A4:E5:AA:CB:12:9E:A5:07:38:2B:23:DB:97:CA:42:00:70:4D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/uc4JS1wmKE4cp8hPVoKDoXkaS2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.44.0/22
185.67.204.0/22
IPv6:
2a03:2620::/32
Signature Algorithm: sha256WithRSAEncryption
55:5c:75:71:3b:6e:4f:67:8e:9b:2c:4e:b4:bd:18:63:bf:96:
3f:54:63:e2:52:1a:42:8f:1d:9e:23:ae:4c:64:dd:64:4a:8a:
5c:49:2e:b5:20:53:9e:ab:78:81:e4:14:61:13:a1:f3:10:e6:
5b:b7:02:9b:1b:15:bb:09:de:a4:10:01:04:a2:16:75:7f:1f:
1b:ce:7d:4d:d8:2b:40:45:95:e4:05:90:a3:1b:a5:f0:24:c8:
97:a3:da:f7:7f:d7:8c:bb:6e:f2:a7:0c:91:73:37:c8:29:af:
4a:82:57:d2:29:ed:13:b9:80:d7:6c:b9:01:9b:57:82:c0:88:
83:ba:66:fa:93:3c:ed:a7:89:a0:ea:db:74:05:6e:98:ef:22:
19:b5:b6:41:e8:aa:75:5e:d9:c4:b4:68:b3:04:e3:b5:ab:ca:
8e:ac:05:84:50:a2:ba:d6:bc:ab:9d:92:b6:38:a2:8b:10:bd:
cf:e1:3c:ea:88:14:d7:fe:05:2e:37:d9:99:8b:9a:55:49:c8:
43:a2:26:69:6f:53:24:fa:b1:e5:cd:0f:9b:4e:d1:ca:02:b4:
5e:85:26:f9:0b:2f:a0:8f:21:a6:7c:56:ed:f0:1b:1f:ac:a0:
ff:46:7c:2c:b9:d0:51:c8:47:bd:04:af:78:18:9f:a1:ca:73:
54:be:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:25:36 2024 by rpki-client on console-ams.rpki-client.org