Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/uzdr_UjddPxFW6srrKQNVVMI2D4.roa
File: uzdr_UjddPxFW6srrKQNVVMI2D4.roa (raw, json)
Hash identifier: Nwm3PuHsFnop7LyuOvx+P/EmKAoUR1WKi/JZf5ZFhOc=
Subject key identifier: BB:37:6B:FD:48:DD:74:FC:45:5B:AB:2B:AC:A4:0D:55:53:08:D8:3E
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 018CC6B91EA6EF50F8227930E282161458D9
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/uzdr_UjddPxFW6srrKQNVVMI2D4.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 185.162.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1e:a6:ef:50:f8:22:79:30:e2:82:16:14:58:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb376bfd48dd74fc455bab2baca40d555308d83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:21:b7:2c:40:9c:bb:4c:44:ca:56:29:dd:
97:ee:11:d9:d1:e3:15:de:be:07:67:69:8d:bc:d2:
eb:2d:ac:1e:2f:73:8a:64:dc:44:22:a2:a9:aa:be:
63:27:dd:ce:9a:a7:bc:b5:0a:c5:2f:7f:e5:2e:ab:
75:42:41:f7:29:af:a1:2a:b0:ed:38:88:7d:27:a1:
98:44:ec:69:66:60:89:7f:55:fd:7d:e7:5b:da:a4:
e3:f9:c7:9b:08:e4:3f:23:fd:27:09:b6:b8:35:4a:
a1:fa:43:f7:68:9e:7a:0d:4d:50:50:f7:20:57:f9:
5f:dd:ff:ce:5b:8e:d7:93:d0:54:60:2f:37:b2:c8:
c6:83:6d:f8:0c:1a:fc:85:f3:b8:1c:20:cb:23:cd:
4b:75:e1:57:79:6a:0d:84:12:2e:c0:4f:35:ad:a1:
24:8a:a9:b3:0c:59:01:0e:9c:68:ac:35:ab:94:77:
3c:65:8b:48:4b:b4:29:0b:65:dd:60:22:51:dd:c3:
3d:97:4c:85:7e:3b:01:c1:ad:94:b6:b8:26:cb:05:
e0:bb:d5:e7:89:72:07:78:4c:34:8c:c8:e4:6d:66:
81:17:86:21:d9:a1:f4:2f:12:5b:e8:2c:10:a1:e3:
22:15:84:00:34:8d:65:c1:24:e6:ba:4d:2e:eb:65:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:37:6B:FD:48:DD:74:FC:45:5B:AB:2B:AC:A4:0D:55:53:08:D8:3E
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/uzdr_UjddPxFW6srrKQNVVMI2D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:24:eb:83:1a:6e:9d:de:db:3e:26:3f:fd:da:48:b7:63:dc:
69:75:76:f2:e6:3b:5f:ee:71:1e:20:5f:68:ea:a1:7e:f3:d6:
38:d0:23:25:bb:5e:ce:4b:a8:3c:cf:37:37:e7:d8:f1:46:d2:
58:de:cd:30:92:30:e8:c4:75:0a:1c:53:d9:71:be:b0:66:74:
82:7b:c8:82:a2:7a:17:fe:20:35:ba:37:23:6f:53:9f:1c:ec:
71:34:66:6b:1a:cf:29:35:30:6b:51:4f:fe:bb:a2:07:e2:28:
d1:93:06:88:be:e0:6e:11:7b:54:58:18:33:24:f2:11:2a:92:
f7:86:a5:4a:50:e6:5e:ba:d3:29:03:88:5e:5d:d9:d3:c1:9d:
25:1d:e2:3d:b5:44:ce:ac:93:ce:2e:9c:a1:05:dc:86:1e:c0:
41:ba:95:5b:d5:e1:bc:ad:97:04:ef:6a:1d:4c:f1:a2:4d:04:
5a:df:4d:58:ac:e1:20:ef:46:0b:67:40:f4:d3:eb:63:82:07:
33:3c:85:05:42:46:22:0d:de:0b:ff:58:9b:6d:6e:f3:60:11:
48:eb:bc:27:ad:bd:3c:13:22:fb:8a:fc:38:30:e7:3c:db:11:
78:c2:e9:99:0e:da:e7:0d:12:e1:57:23:48:6d:57:86:ec:cc:
29:e1:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:08:31 2024 by rpki-client on console-ams.rpki-client.org