Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ugaPUSVEZJul2I_jP_gn3rYNNNE.roa
File: ugaPUSVEZJul2I_jP_gn3rYNNNE.roa (raw, json)
Hash identifier: rJL3CU9a34mvpH4KpGsADiYi2k98TeN/iZLotbGdsss=
Subject key identifier: BA:06:8F:51:25:44:64:9B:A5:D8:8F:E3:3F:F8:27:DE:B6:0D:34:D1
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0193447665DC15FDEAB350F0BBFC6C4E9467
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ugaPUSVEZJul2I_jP_gn3rYNNNE.roa
Signing time: Tue 19 Nov 2024 12:47:10 +0000
ROA not before: Tue 19 Nov 2024 12:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43944
IP address blocks: 217.79.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:76:65:dc:15:fd:ea:b3:50:f0:bb:fc:6c:4e:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Nov 19 12:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba068f512544649ba5d88fe33ff827deb60d34d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2e:b6:d3:f3:c7:f9:36:e0:7e:a7:7d:e0:a9:
d7:62:94:ae:89:8f:20:7b:92:15:0a:94:48:67:eb:
f0:c3:b7:1b:b5:b1:99:6e:09:df:e3:7b:a5:f9:6e:
b8:6b:2a:8b:1c:18:d6:18:22:bb:29:d4:f6:c3:dd:
59:d3:d4:f6:73:f8:0c:72:b4:fa:4a:18:6a:82:55:
8a:35:a8:40:6a:df:1c:81:be:4a:8e:90:1b:5d:5a:
a8:30:e2:9b:2f:08:e9:af:24:99:ab:a3:fe:90:74:
f2:1b:9d:36:f5:5f:7c:fa:b0:f5:e0:81:83:90:c7:
68:ea:53:17:67:8b:10:30:ca:d7:82:dd:3f:c9:a5:
97:6f:14:b4:12:70:f2:29:95:67:88:5e:f9:8f:2e:
65:90:76:69:fb:00:49:12:88:a8:1c:21:01:2c:df:
76:ea:b8:f1:43:9b:80:ac:9e:af:3c:29:1a:14:90:
fd:16:22:c8:bd:9d:67:65:03:c3:ca:a2:75:1b:73:
91:fd:4c:eb:65:34:a4:ae:dd:a6:f7:55:02:17:46:
41:f6:bd:b2:e8:a2:65:59:10:f6:b5:86:85:ed:43:
d4:88:64:3c:24:80:6c:54:df:7b:d8:2a:f0:37:04:
52:ea:5f:dd:01:28:6f:15:60:52:d5:55:fb:48:ab:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:8F:51:25:44:64:9B:A5:D8:8F:E3:3F:F8:27:DE:B6:0D:34:D1
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ugaPUSVEZJul2I_jP_gn3rYNNNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.40.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bb:b1:22:a3:cb:78:01:d9:60:c7:6e:81:5d:36:e4:8d:8d:
d2:bd:99:87:62:75:c4:50:62:7f:6c:a6:32:30:a6:9c:50:f0:
d0:ba:07:83:26:46:52:4b:0e:4f:2f:8f:d1:41:87:37:fa:88:
6d:4d:46:c1:30:d1:e5:44:ab:63:98:db:3d:cc:1a:54:79:f2:
d7:82:fe:23:ab:6c:7a:6b:d5:14:95:45:a2:f1:f0:6c:c7:f5:
76:fe:6e:f6:7f:91:d2:8a:67:38:83:f2:3a:40:88:de:b9:30:
ff:74:77:95:e0:da:65:6f:e8:20:84:12:c7:1b:9b:0a:d8:76:
e9:11:f8:81:11:c0:04:c3:ed:28:60:66:04:41:4a:08:b8:f6:
84:1f:09:b0:94:d5:cd:11:29:ea:f1:7b:4b:a6:fb:d9:c1:0e:
10:98:6c:fb:18:fa:91:43:23:47:80:33:a2:b5:d7:af:d5:d6:
9b:92:07:af:7c:06:6c:1a:b0:f0:ae:7f:c5:e0:d8:6f:84:a8:
de:59:ad:ae:cc:04:52:57:5a:b1:97:05:e3:44:a2:d3:c2:e5:
05:c4:a1:cf:f4:5e:4e:65:cf:f6:63:d5:0f:1b:e9:a8:53:68:
51:3f:0a:15:bd:c2:1c:f8:80:13:a1:ef:16:95:ee:03:9d:8c:
27:65:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:05 2024 by rpki-client on console-fra.rpki-client.org