Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ui3dG6otXk8MC1VaCnq94fQwaDo.roa
File: ui3dG6otXk8MC1VaCnq94fQwaDo.roa (raw, json)
Hash identifier: +gRduPGkoq3GsLGeeDiLkAY73igqp3ZlRnXZQgl7QAA=
Subject key identifier: BA:2D:DD:1B:AA:2D:5E:4F:0C:0B:55:5A:0A:7A:BD:E1:F4:30:68:3A
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F90630598BB2B2AD35FD65C9027D0
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ui3dG6otXk8MC1VaCnq94fQwaDo.roa
Signing time: Tue 02 Jan 2024 04:30:03 +0000
ROA not before: Tue 02 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42663
IP address blocks: 213.175.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 15:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:90:63:05:98:bb:2b:2a:d3:5f:d6:5c:90:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba2ddd1baa2d5e4f0c0b555a0a7abde1f430683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:1d:10:16:8a:9e:d9:ec:be:ef:56:da:6a:
e6:40:27:50:e9:ce:d0:82:17:37:37:08:e4:a5:5b:
6a:bc:8d:15:b6:cc:c2:e0:0f:a2:6b:85:40:1e:45:
c9:32:70:20:cc:17:f2:7f:e7:81:80:75:4c:a8:68:
8f:cd:b0:b9:a2:e3:c9:52:b0:ac:22:0f:93:e6:03:
e3:56:68:41:7a:61:ab:ca:be:f0:55:8b:f5:a8:27:
11:5e:e5:02:84:d3:3e:61:ca:3c:0e:bc:56:31:9a:
a9:87:e6:09:66:87:b2:85:b5:47:05:cf:56:6e:b7:
2f:e5:81:5a:01:1a:3c:a5:9f:d2:f0:94:c5:6e:ed:
e9:f8:bc:d3:b1:4a:96:6c:6f:bc:70:82:5e:c0:af:
a7:07:6b:10:bb:08:7f:3d:7d:81:f7:43:e1:37:2d:
a8:3d:3f:6f:4a:33:cd:99:53:1e:5c:c1:3d:5f:1d:
27:81:0d:61:d0:02:d2:8f:c9:79:29:7d:ee:a0:44:
97:4c:40:11:12:ce:7c:95:5c:1b:21:75:a9:14:13:
00:5b:23:5b:b1:b5:4c:c0:33:0f:05:d7:e3:22:98:
37:a7:cf:2e:00:76:3a:42:4f:b2:56:c2:a4:c5:d0:
ad:25:51:93:00:44:af:79:2f:c0:9e:cf:8b:b5:84:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:DD:1B:AA:2D:5E:4F:0C:0B:55:5A:0A:7A:BD:E1:F4:30:68:3A
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ui3dG6otXk8MC1VaCnq94fQwaDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:54:de:59:b6:d2:53:a3:84:16:dc:49:39:c5:8b:16:7d:2f:
c9:59:3d:a2:8b:52:c4:c2:ee:b5:d8:75:0c:c7:bd:2d:66:e9:
fc:a9:7e:04:34:24:62:8c:5d:18:13:42:3c:11:08:d2:f4:f7:
47:00:99:5c:7d:cd:3d:a4:56:2f:f6:77:da:47:12:30:80:83:
38:72:f3:c0:68:61:a3:e8:68:ee:49:5e:84:90:8e:d5:47:64:
33:e6:db:d0:7d:fb:1f:d1:4c:e1:e6:a3:55:3d:77:71:f8:ff:
ae:7a:b4:04:ed:b1:ce:62:a2:ca:8e:9e:27:47:ce:38:eb:fa:
c7:55:09:75:35:3f:10:f5:a5:3d:c5:cf:d4:d6:d6:72:61:a9:
d8:5c:85:a6:c4:7b:8e:ac:c1:19:59:5d:69:9c:00:fd:d0:e8:
3d:5a:b2:7b:9b:c1:ed:fc:c6:83:38:f9:e3:71:e0:df:51:12:
8a:b4:98:9e:3d:95:0f:14:47:94:35:f3:e0:6d:65:b5:46:d6:
fe:d0:07:1c:3b:df:1b:1f:d7:c4:d7:91:cf:95:47:fa:03:f1:
5a:59:1e:37:50:ec:de:54:52:f3:ae:e7:97:af:00:6c:d2:97:
68:57:93:b0:50:71:78:69:0c:cc:40:44:e4:2c:09:34:ad:db:
9e:37:f4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 22:12:44 2024 by rpki-client on console-ams.rpki-client.org