Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/UtbHbJ_LeS6-E_DVTfBMxsaBB4s.roa
File: UtbHbJ_LeS6-E_DVTfBMxsaBB4s.roa (raw, json)
Hash identifier: xKe2dzPux4214h/jkoQiDKNYRvStze+zde21mW4VgxY=
Subject key identifier: 52:D6:C7:6C:9F:CB:79:2E:BE:13:F0:D5:4D:F0:4C:C6:C6:81:07:8B
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 018CC7953AD2A7388CDCC9AFD0BB5794FABF
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/UtbHbJ_LeS6-E_DVTfBMxsaBB4s.roa
Signing time: Tue 02 Jan 2024 00:31:35 +0000
ROA not before: Tue 02 Jan 2024 00:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57664
IP address blocks: 37.16.96.0/20 maxlen: 23
178.213.232.0/21 maxlen: 21
178.213.239.0/24 maxlen: 24
37.16.112.0/20 maxlen: 20
2a00:4cc1:2501::/64 maxlen: 64
2a00:4cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3a:d2:a7:38:8c:dc:c9:af:d0:bb:57:94:fa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52d6c76c9fcb792ebe13f0d54df04cc6c681078b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:40:a5:47:f5:df:34:f6:ba:d5:58:b1:17:
ba:dd:8a:cc:32:e5:c2:43:50:2b:c9:11:d2:24:5b:
5c:4e:9a:0f:a5:99:d1:d5:2b:b6:77:6d:ea:b8:a4:
c8:69:e6:68:19:57:c4:c1:a0:7a:6f:90:ec:c5:b0:
62:1c:83:a0:de:e2:0a:e8:7a:eb:72:57:17:c0:ec:
2e:c8:50:50:e4:63:5e:c4:28:df:fc:a6:ce:06:20:
dc:69:af:48:2f:25:52:a8:1a:8d:18:b0:f0:9d:73:
19:26:19:1a:49:b9:62:58:1b:50:4f:7c:49:16:e2:
33:89:56:b9:8e:20:8b:5f:7d:11:da:79:6b:30:e7:
e9:fb:95:43:60:5f:24:fb:00:f6:66:ec:29:46:e1:
2d:da:cc:65:c8:76:cd:4d:85:37:90:12:7c:e3:c3:
91:91:5b:7d:4d:51:9b:00:fe:11:af:d5:38:aa:af:
55:5e:b5:72:c0:7e:38:7d:6a:6d:74:d9:51:db:39:
19:a2:de:86:45:65:ac:96:f1:5c:f0:aa:1a:cf:28:
d6:4b:da:96:bb:c6:96:91:e9:8e:42:9f:be:87:e9:
ee:71:86:e3:32:9f:73:6c:b6:b8:f6:db:43:7d:22:
15:b7:0f:de:d9:e9:78:f1:a0:94:ba:74:46:7c:13:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:C7:6C:9F:CB:79:2E:BE:13:F0:D5:4D:F0:4C:C6:C6:81:07:8B
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/UtbHbJ_LeS6-E_DVTfBMxsaBB4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.96.0/19
178.213.232.0/21
IPv6:
2a00:4cc0::/32
2a00:4cc1:2501::/64
Signature Algorithm: sha256WithRSAEncryption
4e:c4:bf:c4:95:19:aa:d1:ac:36:1b:2f:b5:94:f2:05:ce:ad:
df:7a:fe:41:bd:3d:1b:b4:60:93:b9:7c:04:49:33:4c:fa:41:
3a:a0:a6:8b:26:54:0b:7b:06:ce:d6:12:b1:ec:5b:9b:6c:55:
cb:e0:ed:88:95:ff:b4:e7:22:2b:81:a5:c2:d4:7e:c2:05:50:
d0:bd:20:4a:c4:9e:33:08:df:05:7b:48:3c:64:7a:c6:91:97:
61:7d:fb:61:a2:3e:1a:88:e2:e6:f4:eb:de:19:e3:ec:e9:1e:
f5:e1:a5:c4:67:d4:9c:50:c4:51:ce:18:87:f5:1a:10:4c:ce:
6e:8d:32:65:4d:77:10:ff:e6:b0:9b:4e:91:ca:74:fe:ad:20:
8e:e8:84:55:c3:0f:85:38:07:b6:e9:57:b5:dd:f4:8c:07:cf:
f1:f8:47:0c:b0:44:96:48:ae:7a:3d:48:21:23:9b:43:48:69:
c9:e5:c3:ba:6c:e3:e8:04:7d:10:83:94:e5:4e:68:bd:4f:e8:
79:1e:55:55:61:c4:de:b7:46:34:1e:7b:4b:e6:7d:46:55:0c:
38:e7:be:8c:5f:1e:af:4c:e1:e5:22:bf:0c:61:d1:10:55:95:
3b:b0:2b:05:a6:dd:24:46:99:71:a1:dd:5f:db:8c:e6:36:0a:
17:aa:82:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:07:18 2024 by rpki-client on console-ams.rpki-client.org