Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/UxcVzsqK-BjZ8iOU0Mt4uvzRDfw.roa
File: UxcVzsqK-BjZ8iOU0Mt4uvzRDfw.roa (raw, json)
Hash identifier: YrLbwfqBqClWS+4NPlXO6CLGhTkzjN9qvCtipbOHjNY=
Subject key identifier: 53:17:15:CE:CA:8A:F8:18:D9:F2:23:94:D0:CB:78:BA:FC:D1:0D:FC
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 018CC9BBC55FC1E504F96B5FE95F40FDB1A4
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/UxcVzsqK-BjZ8iOU0Mt4uvzRDfw.roa
Signing time: Tue 02 Jan 2024 10:32:55 +0000
ROA not before: Tue 02 Jan 2024 10:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206217
IP address blocks: 146.66.128.0/24 maxlen: 24
146.66.128.0/21 maxlen: 21
185.110.230.0/24 maxlen: 24
185.110.231.0/24 maxlen: 24
185.110.228.0/23 maxlen: 23
185.110.228.0/22 maxlen: 22
185.110.228.0/24 maxlen: 24
185.110.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c5:5f:c1:e5:04:f9:6b:5f:e9:5f:40:fd:b1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Jan 2 10:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=531715ceca8af818d9f22394d0cb78bafcd10dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:21:7c:25:04:ae:5c:c6:1a:fd:a7:b6:d6:
b0:70:16:94:21:7f:49:27:1c:f6:a9:c2:2c:ae:7f:
09:58:d7:bf:29:8a:10:65:f6:13:a4:21:67:65:e7:
5f:d6:f1:ae:23:a7:99:61:0b:49:f3:96:07:20:e1:
b1:6e:42:e9:e8:fb:30:15:aa:b7:a7:57:b9:f7:fb:
42:87:c5:42:6b:4f:03:47:6e:ea:e1:9f:bf:a0:3f:
a1:0b:5f:84:1f:6a:41:0d:5a:22:39:d1:fe:44:6c:
05:23:fa:d3:03:d7:44:ca:2a:c8:97:b8:78:87:74:
56:4e:58:a7:ac:d4:a0:2d:ef:1d:93:c8:62:41:72:
f1:b0:c8:4e:d0:ce:86:98:1b:9d:37:a4:d1:c0:0a:
a5:53:6b:e1:7f:b9:9a:fa:95:dd:72:61:69:59:bd:
9e:37:bb:c8:16:80:bf:1a:be:49:03:95:06:0b:f7:
f3:f9:52:a1:e5:21:68:4e:69:26:82:21:72:d9:d3:
1a:4b:7d:5a:b5:63:82:63:69:20:f3:21:d9:ec:5e:
3c:0c:45:61:26:f1:5d:39:6d:2e:08:80:65:38:75:
73:e8:4d:12:fd:cf:51:e4:20:89:3d:40:02:9b:ef:
7d:01:02:90:4a:e1:75:1b:01:35:d4:13:34:2a:b5:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:15:CE:CA:8A:F8:18:D9:F2:23:94:D0:CB:78:BA:FC:D1:0D:FC
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/UxcVzsqK-BjZ8iOU0Mt4uvzRDfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.128.0/21
185.110.228.0/22
Signature Algorithm: sha256WithRSAEncryption
42:01:3b:ca:da:e4:ad:0a:c6:59:d4:55:13:2b:38:3e:8e:07:
03:74:02:1d:a0:43:b5:ef:3c:61:76:ab:26:7f:f6:3c:eb:11:
c5:8a:01:e5:e9:2a:fd:71:fb:d6:69:93:65:85:0d:7d:d2:cc:
9d:80:32:9c:92:a4:3d:81:04:a5:75:ca:99:af:d2:59:03:38:
f6:85:de:13:09:17:07:33:2d:db:40:11:5f:ae:e2:97:1c:57:
3d:68:91:d1:21:53:bb:0a:43:35:de:b3:56:3d:8b:12:97:72:
f9:b4:6a:c6:2b:25:a0:1a:6f:71:dd:cf:74:27:4a:bc:74:63:
73:9c:86:d3:88:4e:d0:6a:bf:57:81:ca:dc:74:55:40:a7:b4:
01:d8:c7:7c:68:fd:82:82:0a:0d:39:b2:b1:84:53:73:a0:fa:
19:98:aa:eb:5e:f3:c7:c2:b2:01:e6:78:e8:19:53:8f:d8:c8:
46:a5:6c:58:b4:71:b2:aa:38:57:27:d7:08:be:93:92:67:87:
c1:ba:c5:a9:fb:09:07:11:f0:26:a2:71:9a:77:ad:e0:1e:91:
93:ce:49:ef:6f:40:e6:a0:8c:52:f9:3c:f0:d1:85:64:72:0b:
9c:c6:3f:90:72:53:8c:d5:86:93:6d:d7:b5:78:9e:9a:b8:7f:
68:a7:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:10:59 2024 by rpki-client on console.sobornost.net