Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uwBVkx1EoA00wlmOdfvqyOydBFE.roa
File: uwBVkx1EoA00wlmOdfvqyOydBFE.roa (raw, json)
Hash identifier: 5vFtejoHU/Eqs0Xnfwq7BDK73sF/BUdXHMQo7Q9pREU=
Subject key identifier: BB:00:55:93:1D:44:A0:0D:34:C2:59:8E:75:FB:EA:C8:EC:9D:04:51
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018E233799D53BDDAE332CA4970CE0A16817
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uwBVkx1EoA00wlmOdfvqyOydBFE.roa
Signing time: Sat 09 Mar 2024 12:37:10 +0000
ROA not before: Sat 09 Mar 2024 12:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35685
IP address blocks: 159.148.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:23:37:99:d5:3b:dd:ae:33:2c:a4:97:0c:e0:a1:68:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 9 12:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb0055931d44a00d34c2598e75fbeac8ec9d0451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:5c:b2:9f:8d:34:87:ca:b1:ac:53:bf:d7:
e7:50:36:de:1e:f8:2a:67:d6:6d:8e:8b:82:48:23:
1b:03:0a:5d:ae:66:6f:02:70:7c:08:88:b1:6a:ae:
84:7f:42:2d:57:3d:e7:85:74:b9:25:0e:1e:f4:e0:
71:41:b8:d2:2f:5b:47:ca:b8:43:96:35:09:0b:e5:
8d:b1:9d:29:08:33:de:a2:81:ed:ea:36:05:94:d3:
be:34:22:8f:04:7f:b5:cf:fb:e5:8c:55:13:30:57:
af:8b:6c:c4:4a:48:f5:1a:56:d4:22:9b:bb:ed:fe:
e0:75:08:67:f1:a5:17:00:57:11:1a:af:7e:05:85:
6f:58:f7:cc:f9:8f:2b:7c:f9:9c:b7:b4:8e:07:87:
d7:e2:42:45:27:ec:ea:b2:bc:f1:76:0c:de:29:df:
6b:a4:91:97:1c:d1:6f:03:35:19:12:fe:05:aa:47:
af:7d:89:6a:d1:32:1d:08:8e:71:24:ba:fd:7f:8a:
81:09:24:0c:f1:67:05:1d:a3:08:22:67:5f:61:ab:
22:d5:de:aa:86:e4:49:37:04:a3:36:96:47:da:4b:
46:11:19:23:11:4a:4a:0f:2d:19:43:76:a9:09:c9:
df:8d:97:83:79:64:27:dd:cd:a2:c4:d9:d4:d8:f0:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:00:55:93:1D:44:A0:0D:34:C2:59:8E:75:FB:EA:C8:EC:9D:04:51
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/uwBVkx1EoA00wlmOdfvqyOydBFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.82.0/24
Signature Algorithm: sha256WithRSAEncryption
80:32:c7:3e:cf:d3:5f:51:a8:cb:a1:ce:db:f6:d8:83:af:8e:
cb:2e:7c:56:5e:0f:a8:03:e2:bb:dc:45:0b:c2:4a:b9:6d:ef:
a6:4d:d6:5b:1e:03:71:ec:04:dd:17:4c:34:46:c9:71:18:a2:
9d:5b:50:6e:2d:a2:e0:d9:84:de:ff:a2:75:02:7e:4d:45:df:
e3:fb:65:1b:a3:ca:fd:bc:3c:8b:19:a9:9f:f0:d3:a6:9d:e5:
88:9d:5e:cd:e1:ac:c1:10:3a:96:63:5f:89:3c:4a:27:9e:96:
25:b2:72:49:52:9a:1f:a1:d5:1e:31:56:59:63:54:6e:2d:99:
48:15:c9:c0:7f:81:6b:c3:a1:b4:63:d2:87:ba:f7:31:9e:df:
1a:6a:ac:2b:7c:64:c7:36:d6:8d:6a:c2:2a:7e:a8:5d:2c:d1:
4d:db:a2:24:55:d0:65:64:52:7b:d7:fb:00:55:be:fc:26:23:
11:a8:24:48:ee:ad:00:de:c2:12:19:f8:0d:ba:67:0a:10:f8:
b7:d5:7d:e3:26:13:78:f7:b5:be:a8:0a:64:22:0b:08:c5:81:
91:5b:94:c1:b6:f6:46:8a:9a:67:8b:99:9c:43:8c:db:ee:be:
cc:aa:fa:80:cc:21:c4:4e:e4:6d:90:1f:a4:88:aa:1f:fc:77:
a3:c7:e8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:39:26 2024 by rpki-client on console-fra.rpki-client.org