Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/umWcaqQh_ZUxL6mSaZYgOt9--wg.roa
File: umWcaqQh_ZUxL6mSaZYgOt9--wg.roa (raw, json)
Hash identifier: w3qUe+bJVQeln69cJRsMFOrvRrjc2/bgVuGfkaToCjQ=
Subject key identifier: BA:65:9C:6A:A4:21:FD:95:31:2F:A9:92:69:96:20:3A:DF:7E:FB:08
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 018F61C6E8781A44EBC5025882C628A4D455
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/umWcaqQh_ZUxL6mSaZYgOt9--wg.roa
Signing time: Fri 10 May 2024 09:12:56 +0000
ROA not before: Fri 10 May 2024 09:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62336
IP address blocks: 141.78.128.0/18 maxlen: 18
185.234.32.0/22 maxlen: 22
185.250.220.0/22 maxlen: 22
2a02:2761::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:c6:e8:78:1a:44:eb:c5:02:58:82:c6:28:a4:d4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: May 10 09:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba659c6aa421fd95312fa9926996203adf7efb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:a1:45:c2:bf:25:f7:f7:17:8d:29:e1:65:
d6:85:fa:dd:ea:b4:cf:84:56:e2:a6:f0:a4:33:b2:
16:4a:68:7f:80:14:67:73:fe:6d:40:74:45:47:77:
ac:d7:79:f3:a6:23:02:a7:a1:b3:ca:bf:7a:a1:be:
17:e0:e7:b4:a7:e1:34:ef:d1:29:46:4d:fb:c8:f6:
cb:6e:3f:6c:dc:1d:d2:4e:48:39:d6:64:5a:4a:06:
be:75:c9:1b:18:c9:ae:93:da:51:f3:7c:d0:13:a1:
97:8b:39:16:a1:25:32:ff:d0:8f:d6:67:d2:ab:56:
ba:2c:3a:73:3c:bb:09:74:09:a3:06:f3:c8:32:f5:
9b:17:63:ad:e9:e7:16:53:46:e3:49:ba:7f:85:64:
c4:be:02:1c:8a:b8:45:3a:26:7f:53:67:6f:a2:42:
21:f0:7e:c9:a5:fe:04:6c:79:04:a0:29:5e:7a:7f:
2e:e3:c0:c6:d0:a0:ca:c0:13:47:81:7c:9e:2b:da:
95:55:64:a5:63:00:bf:5c:0c:07:ca:d8:fb:9c:15:
33:93:58:81:21:61:88:c0:4f:aa:89:93:80:71:4f:
cf:61:ed:a3:d3:54:2e:68:ed:e7:61:d4:93:c7:c0:
8e:b6:af:65:bd:1e:1a:24:12:78:e3:d6:81:5c:32:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:65:9C:6A:A4:21:FD:95:31:2F:A9:92:69:96:20:3A:DF:7E:FB:08
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/umWcaqQh_ZUxL6mSaZYgOt9--wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.78.128.0/18
185.234.32.0/22
185.250.220.0/22
IPv6:
2a02:2761::/32
Signature Algorithm: sha256WithRSAEncryption
bf:70:e9:53:82:62:af:16:20:00:ec:88:c5:ef:e9:06:fb:8b:
1e:c8:20:87:b7:43:cb:e7:aa:dc:ee:ab:bb:5b:21:ae:10:6d:
9d:48:79:d0:09:4f:41:d3:80:33:47:54:e9:5a:3d:11:1e:db:
3c:f9:e3:eb:2c:84:03:a4:28:e8:e1:b0:36:c6:66:b4:47:fa:
e5:93:a3:9a:f2:e7:8f:4f:17:40:29:90:b7:79:19:94:fd:11:
15:41:7c:b1:b7:22:e8:e5:1f:ca:17:5b:2e:2e:ba:7e:ec:be:
65:c7:66:42:ca:ac:e9:7a:4b:15:cf:14:4a:f5:f8:4c:e9:d2:
83:dd:76:fa:b8:d1:b6:1f:84:e0:b7:9f:74:d5:1f:54:33:43:
e3:15:ff:e1:6d:98:14:0c:38:eb:db:f2:53:36:1a:3a:8d:25:
73:b4:c9:e4:55:0d:9b:91:45:c3:db:c4:f0:5d:01:18:7b:04:
56:f5:88:ca:c8:c1:04:82:72:52:d7:2e:92:6c:7b:c7:a5:c6:
b4:a2:67:71:82:5c:f7:ff:e3:94:c6:bf:19:62:3e:36:22:59:
7d:49:22:b4:72:60:03:91:81:4e:0d:9e:62:c7:60:a0:55:5e:
cb:e1:bb:04:68:dd:41:14:28:3f:b3:93:25:d0:63:f0:d8:e4:
48:d1:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:40:47 2024 by rpki-client on console-ams.rpki-client.org