Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/UVLQSl5YZHjaOcxOg8Gupeqdx9A.roa
File: UVLQSl5YZHjaOcxOg8Gupeqdx9A.roa (raw, json)
Hash identifier: UzqWSiwlbu0dfwnf5hWOzCQwX1Levkg1wrn+M9PWy2Y=
Subject key identifier: 51:52:D0:4A:5E:58:64:78:DA:39:CC:4E:83:C1:AE:A5:EA:9D:C7:D0
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B9349381770586BB39ADC9D10AA0FC
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/UVLQSl5YZHjaOcxOg8Gupeqdx9A.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49887
IP address blocks: 84.44.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:34:93:81:77:05:86:bb:39:ad:c9:d1:0a:a0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5152d04a5e586478da39cc4e83c1aea5ea9dc7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:e1:3d:b4:44:de:5f:f4:bc:7d:89:0a:8c:
14:24:34:6e:51:e6:05:62:17:3c:09:e8:31:88:32:
e9:79:a3:6d:f9:93:0c:bd:37:b9:dc:c6:29:71:0d:
dd:30:11:ce:7a:2c:86:1d:0d:91:b1:f7:4c:9e:7f:
d2:e8:a9:12:19:6a:d7:0d:9d:b9:ce:fe:ee:9e:5e:
f9:98:40:ef:ad:4a:90:29:36:d4:ce:a4:9a:ad:2d:
44:ba:fb:13:9d:3e:0f:eb:4a:96:1a:74:49:a1:3a:
25:97:5b:9e:48:f1:36:67:f0:3b:40:a6:5b:d0:5b:
34:96:46:bf:55:65:38:3b:4c:69:30:8a:78:56:84:
bd:c3:37:67:8e:5e:1c:01:ab:30:a0:63:51:74:b8:
14:05:7e:30:6f:0a:bc:30:26:85:dd:f5:9b:58:f1:
7c:6b:ec:df:19:cb:6e:87:f4:3e:78:55:da:0e:c1:
f7:81:59:8d:b0:a2:7b:4e:95:d3:97:44:19:39:ef:
e2:fb:2a:4c:a7:f5:60:d2:72:72:0e:8d:d2:2f:69:
91:7a:55:dc:6c:45:24:a2:35:6f:eb:cc:8b:95:3b:
6f:2d:99:07:43:ad:3f:8c:17:e4:68:d1:c7:fc:ff:
f2:bb:82:82:1c:29:bf:59:dd:a1:d1:89:b4:91:9b:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:D0:4A:5E:58:64:78:DA:39:CC:4E:83:C1:AE:A5:EA:9D:C7:D0
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/UVLQSl5YZHjaOcxOg8Gupeqdx9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.16.0/24
Signature Algorithm: sha256WithRSAEncryption
02:97:c0:b7:7f:96:bf:7f:0d:f8:17:8e:a0:56:fb:dd:8d:a2:
33:49:96:32:18:02:76:ec:4b:36:02:47:d4:0a:38:40:ba:cc:
f9:b1:56:4a:93:53:36:ca:93:de:34:20:24:e9:ed:94:08:db:
99:d5:ad:ef:c5:66:fb:18:36:e8:f5:18:b8:21:f3:5a:a0:60:
43:a8:6c:7a:0e:bd:de:cc:50:9b:fa:a6:6f:cb:3c:ba:4e:1f:
2e:f8:8f:d4:88:bc:16:cd:94:b0:06:c9:ca:95:8d:08:ac:98:
e0:ef:86:77:3e:18:cb:4c:59:ec:f1:30:75:56:b7:da:9b:13:
f9:d5:22:66:be:9d:5d:a9:a2:7e:f3:68:6f:a7:93:35:02:c8:
ef:af:5c:77:67:9e:02:33:21:14:de:aa:27:77:47:65:95:59:
61:c8:8f:1c:8f:39:77:b3:8a:62:b7:46:6f:85:63:4f:e6:63:
95:74:ff:d7:66:d6:a0:ed:67:c6:f0:2d:e4:52:90:fe:20:38:
44:5f:f5:48:10:cb:35:a3:a1:a9:d2:47:b5:c5:1c:57:cc:2c:
5d:62:f7:28:91:c5:ed:07:51:26:92:cf:36:bc:9a:f9:71:20:
a3:94:10:36:e8:21:59:16:6f:ca:3d:99:ea:c9:a4:ad:c2:6f:
e3:40:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:24:51 2024 by rpki-client on console-fra.rpki-client.org