Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/uvuc6isgqtTbax3Cp0gzHSV8H9k.roa
File: uvuc6isgqtTbax3Cp0gzHSV8H9k.roa (raw, json)
Hash identifier: o2HFq/buXlL6Ex+YDIW596X3LJhS+fdNeGKYfKaLeqI=
Subject key identifier: BA:FB:9C:EA:2B:20:AA:D4:DB:6B:1D:C2:A7:48:33:1D:25:7C:1F:D9
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018CC2DB60C39276B296338E1A35CE908B3D
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/uvuc6isgqtTbax3Cp0gzHSV8H9k.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 87.248.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:60:c3:92:76:b2:96:33:8e:1a:35:ce:90:8b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bafb9cea2b20aad4db6b1dc2a748331d257c1fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:3a:ad:7f:83:f7:4e:9e:7c:0d:7e:9b:e6:
4b:a2:ae:8b:23:6e:f8:91:a6:17:c7:4a:7d:0b:40:
ca:69:78:25:e6:be:c4:b4:5b:83:50:7a:26:02:9e:
e4:25:a5:67:3b:db:f8:d9:71:29:0c:66:66:66:9d:
c8:ba:14:06:fc:b0:5f:12:1e:68:e0:91:9c:c9:df:
1f:78:38:a2:b6:19:a3:47:53:4f:74:a0:f4:78:eb:
3a:0d:59:81:4a:ff:b6:ce:71:e6:5c:d0:c5:38:a9:
b7:5d:eb:e2:c0:6f:d9:19:1c:37:4c:4a:c4:d0:d5:
81:e7:2d:92:76:56:47:cd:4e:98:89:87:42:37:d9:
fb:ce:aa:86:ee:e7:0d:c6:fe:62:e5:90:c0:f5:6e:
85:7f:a8:d0:91:9d:10:60:87:59:89:f1:01:d9:0e:
f1:3f:78:f3:de:d4:53:9b:a7:de:0b:ed:92:05:8d:
b1:9e:af:fd:91:3b:f5:e7:6d:ac:3b:e5:6f:ce:30:
c1:bc:e2:6b:92:b4:c7:ca:85:72:27:f8:b4:14:40:
93:2b:79:74:44:73:f2:28:c7:9f:80:e9:90:77:cc:
8f:35:50:85:56:e6:d6:ed:f3:57:6c:37:d1:9b:70:
14:1b:38:60:9f:d8:f3:d5:8b:8d:88:48:27:21:82:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FB:9C:EA:2B:20:AA:D4:DB:6B:1D:C2:A7:48:33:1D:25:7C:1F:D9
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/uvuc6isgqtTbax3Cp0gzHSV8H9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.148.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d2:76:37:fa:ef:e1:34:b3:cf:d5:52:d1:c6:f3:1c:22:d4:
13:5e:60:66:cc:8c:4f:6e:e5:8e:bf:6b:0b:ee:d7:4f:20:b5:
09:4c:3d:33:3f:06:6b:5d:25:18:2c:3d:56:ea:a2:20:6f:2b:
01:b0:e7:2c:2a:ea:27:e8:a2:42:35:7c:18:23:da:aa:7d:fe:
ae:14:fa:da:d4:18:55:25:6a:9d:a0:3e:7f:2e:2b:2f:d1:7b:
f8:87:34:85:dc:b2:7f:56:35:b6:16:ea:07:d0:bc:8a:2f:b2:
a7:78:a2:7a:df:e8:9c:00:f4:b2:f1:0d:b2:19:b7:8d:7a:b1:
a4:5d:0d:8c:c8:f6:2b:d1:f4:80:0d:cf:8a:84:79:e2:bf:02:
5b:fc:cd:12:fa:43:5e:c2:bc:63:26:32:84:7d:58:8d:5d:f1:
1b:8e:ae:ad:da:b0:d5:42:88:0e:25:09:57:3d:4b:80:9c:95:
43:30:bf:49:c0:12:d4:3f:04:b7:1f:d1:f1:f4:d7:1e:a7:ee:
cc:7d:91:59:4c:87:33:cc:8c:99:ee:f6:41:e1:ed:ab:11:88:
f2:bc:cc:b2:e1:1c:be:41:ad:1c:df:72:ca:d5:bc:70:d2:73:
fe:a5:05:30:2c:e5:77:bd:26:a7:27:05:4f:65:90:54:17:4e:
33:ba:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:34:53 2024 by rpki-client on console-ams.rpki-client.org