Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/uxqUqPFRjqzm4l3CMXVJisUPdyg.roa
File: uxqUqPFRjqzm4l3CMXVJisUPdyg.roa (raw, json)
Hash identifier: 8StEH3Q+589UX7djYqjOldqq9c1inF0+iiZDNz5CSrk=
Subject key identifier: BB:1A:94:A8:F1:51:8E:AC:E6:E2:5D:C2:31:75:49:8A:C5:0F:77:28
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649EA24A73397CA8D62696B5E607B56
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/uxqUqPFRjqzm4l3CMXVJisUPdyg.roa
Signing time: Mon 01 Jan 2024 18:29:41 +0000
ROA not before: Mon 01 Jan 2024 18:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201326
IP address blocks: 78.83.212.0/24 maxlen: 24
78.83.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ea:24:a7:33:97:ca:8d:62:69:6b:5e:60:7b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb1a94a8f1518eace6e25dc23175498ac50f7728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:2a:34:f1:63:e2:07:9f:c3:f7:e0:2a:f6:
49:60:1b:c8:22:f6:9e:7a:02:c9:fd:49:61:70:48:
d7:d5:df:7a:92:c1:32:23:14:f9:fe:ed:a2:41:d5:
a3:5d:c5:43:14:3f:ec:12:3c:29:a8:11:79:ad:d2:
ba:4f:17:57:be:dc:1e:76:6a:26:b1:2d:e2:10:d9:
8c:9d:e4:d6:21:cf:e3:55:65:9e:01:99:49:de:a3:
5c:83:69:d8:5e:6a:19:f8:05:fd:95:3b:97:64:04:
82:8e:39:e5:30:6c:22:79:a9:e4:2f:6a:6a:ab:41:
bc:ac:f5:bb:2f:d3:0c:5a:51:02:46:23:3d:ca:84:
ec:73:4d:31:8a:fd:a6:48:33:2a:ad:1a:b3:e0:d1:
c2:4a:0c:5f:c6:6b:c0:06:f5:93:3f:30:b8:ba:e2:
18:94:6e:c1:b2:c2:51:54:99:46:00:41:29:26:87:
87:e4:9a:09:e7:de:2c:ff:bf:18:f4:1d:bc:34:1d:
31:1f:87:6e:e2:89:26:2b:03:4d:42:9b:70:11:1b:
ea:ff:66:9e:2f:a9:4f:11:b8:9b:3d:4d:e4:30:97:
1e:48:d3:9e:17:39:aa:3e:e9:02:e9:ca:45:41:f1:
bf:42:d4:21:6c:64:e6:f3:6a:5f:1d:e9:4d:bd:36:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:94:A8:F1:51:8E:AC:E6:E2:5D:C2:31:75:49:8A:C5:0F:77:28
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/uxqUqPFRjqzm4l3CMXVJisUPdyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.212.0/23
Signature Algorithm: sha256WithRSAEncryption
06:2c:a4:f1:a7:f2:6b:61:a8:4b:4f:b7:78:d4:21:20:11:97:
d9:a6:e3:90:4a:c9:fb:47:0f:3d:eb:d4:9f:64:71:23:0f:65:
76:9b:a0:d3:58:5f:cc:3c:ef:57:02:30:1d:d9:3a:4c:15:9e:
80:a2:f5:ef:c8:6f:65:93:2e:99:51:53:db:43:96:50:09:23:
72:be:de:c6:8d:ec:28:41:e2:34:0b:e6:a0:a5:57:98:fb:c6:
bf:66:b7:64:b5:4f:b6:c2:e3:fa:58:11:b7:65:6b:51:37:0a:
64:09:1e:d8:56:cb:20:db:9d:34:56:39:0f:00:17:6a:e0:22:
d3:4b:42:84:7c:e8:75:9e:86:db:21:0a:0f:3f:46:03:9e:62:
6a:36:f4:76:c9:f8:a2:61:29:ed:e4:16:90:47:a5:3e:dc:9a:
2a:ab:47:0b:da:77:2d:bb:d4:78:fc:2a:0c:75:c4:b0:16:31:
c1:f8:1e:dd:09:3d:f8:ea:4d:43:42:8a:d8:3b:2a:2e:11:33:
66:12:51:d3:08:d8:a4:39:c6:a6:b6:10:ba:cf:57:ff:9d:56:
71:8e:d1:ff:3a:34:ba:2b:4b:e3:fb:bb:e5:22:9a:52:73:f9:
b3:57:a9:a5:5c:90:cd:a6:e8:73:38:ce:68:4d:ac:05:8b:bd:
d8:cb:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:49 2024 by rpki-client on console-ams.rpki-client.org