Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uv-yJq8lX45t03QYp67rdqVRJhs.roa
File: uv-yJq8lX45t03QYp67rdqVRJhs.roa (raw, json)
Hash identifier: dUi1rBJKk6mouIoRIbjwZFoE0DSHk4eC0/5UNW3r2e4=
Subject key identifier: BA:FF:B2:26:AF:25:5F:8E:6D:D3:74:18:A7:AE:EB:76:A5:51:26:1B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018D8249DE83E9900B39A9125FD3764C742F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uv-yJq8lX45t03QYp67rdqVRJhs.roa
Signing time: Wed 07 Feb 2024 06:38:15 +0000
ROA not before: Wed 07 Feb 2024 06:38:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 84.32.10.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:82:49:de:83:e9:90:0b:39:a9:12:5f:d3:76:4c:74:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 7 06:38:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baffb226af255f8e6dd37418a7aeeb76a551261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:ba:ec:eb:70:1c:3b:fb:f6:c6:87:de:d6:
cc:69:8c:ef:2d:6b:62:7c:3a:e3:1b:6e:7c:e1:c9:
db:1d:22:13:65:f9:c6:21:4c:6a:73:6c:09:19:57:
0c:05:30:30:b4:94:89:58:ee:f9:2a:bf:44:7c:1f:
18:f2:23:70:8a:19:8b:63:b4:4a:c2:a3:23:dd:a8:
44:d1:95:81:5d:db:de:ac:db:dc:8c:b8:72:15:a0:
ec:12:a4:f4:5b:c2:f0:0f:db:45:24:5d:ac:a1:79:
d3:be:a8:65:13:2c:8d:b2:9b:a1:a7:87:be:c0:7b:
cd:ff:48:6c:c6:2c:13:03:fd:1e:e0:01:74:8c:6e:
d1:f0:17:92:dc:d6:ae:4f:e0:2e:94:e1:39:cc:8a:
f7:8c:16:f6:64:cd:66:06:c1:bd:5e:49:52:cb:c3:
16:e3:41:98:d2:e9:0d:7f:b1:bd:53:1e:9d:05:a6:
0e:fd:eb:86:da:3b:4d:0a:63:ad:e3:ef:76:88:92:
40:f0:95:9a:fb:31:f7:f2:0b:00:9d:b5:1c:bd:b8:
1a:97:f0:e0:65:01:cd:df:4f:9e:06:92:ff:bc:60:
52:55:dc:7c:c7:58:dc:a5:6b:b0:b9:25:9a:b8:be:
51:17:fd:f1:ca:6f:d3:b9:a2:ca:ff:00:c0:8f:77:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:B2:26:AF:25:5F:8E:6D:D3:74:18:A7:AE:EB:76:A5:51:26:1B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uv-yJq8lX45t03QYp67rdqVRJhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.10.0/24
84.32.83.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4c:74:24:9a:1a:67:69:fe:16:cd:41:26:cc:7d:b0:9a:8a:
66:95:08:87:f9:55:a7:5b:2a:53:e6:dd:50:56:73:29:c0:c1:
96:df:f5:78:70:0a:4f:47:a8:29:4e:91:a6:c8:98:20:e2:cc:
9e:1f:60:99:ba:60:96:30:0a:6a:0c:99:2c:7f:07:8a:12:3c:
4f:6a:31:89:84:d4:4f:9a:8b:2f:a4:1e:b8:f8:64:50:03:c3:
46:15:52:1a:f2:86:a3:12:16:9b:0d:c0:5d:18:bd:64:3a:dc:
b2:f4:ea:f2:8c:9a:68:20:02:4a:4b:ac:63:25:52:13:82:69:
cc:86:00:dd:8d:0c:1f:d6:59:97:31:da:50:b7:ad:47:d7:74:
c7:c3:0b:d0:96:d7:53:dd:c6:6b:e4:54:61:b2:6a:f0:2a:ef:
4b:1a:f8:58:e2:95:01:33:30:7f:c7:e7:6a:ed:50:2d:64:5b:
ce:4f:88:c0:45:cb:54:9f:5c:51:48:9e:ae:83:51:c4:39:07:
f7:d5:38:2c:1d:5b:15:a1:90:33:05:2b:08:ce:50:88:00:d8:
ce:3c:f2:92:87:37:1c:9d:5e:1d:07:31:81:9b:98:20:13:3e:
2b:44:85:10:2a:f7:7f:ba:5a:cf:83:b1:9d:24:04:3d:08:ba:
26:9a:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:14:35 2024 by rpki-client on console-ams.rpki-client.org