Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uElq1AuBIw9VRgWWAs8w-Fzjhn4.roa
File: uElq1AuBIw9VRgWWAs8w-Fzjhn4.roa (raw, json)
Hash identifier: AWQ9bIRr0Jmz55L3RJX206e85nOICK+mQCxaqkPPbc8=
Subject key identifier: B8:49:6A:D4:0B:81:23:0F:55:46:05:96:02:CF:30:F8:5C:E3:86:7E
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC79458B59D6058E3A2517556DAD92B44
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uElq1AuBIw9VRgWWAs8w-Fzjhn4.roa
Signing time: Tue 02 Jan 2024 00:30:37 +0000
ROA not before: Tue 02 Jan 2024 00:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212161
IP address blocks: 2.188.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:58:b5:9d:60:58:e3:a2:51:75:56:da:d9:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8496ad40b81230f5546059602cf30f85ce3867e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:38:d1:fe:57:8f:ae:17:c1:b1:09:c7:64:
a1:a5:00:ed:2e:2b:4d:87:b0:23:58:12:b4:20:40:
d6:44:6c:9d:39:83:23:f3:20:09:83:f6:06:cb:45:
34:a2:4f:c1:29:3a:b0:e4:61:90:39:fc:51:0f:91:
4c:f1:d9:f3:e5:2e:65:d2:b6:de:af:c7:99:bb:00:
b4:fd:d8:00:ae:ba:5f:a2:ff:78:3d:9e:18:ca:48:
86:94:89:45:68:d2:71:1e:07:a3:8a:57:d0:5b:20:
eb:c5:a9:b6:cb:c3:e6:d3:a8:25:50:2d:1a:6a:d7:
78:06:9a:4b:00:42:b8:7b:7c:c3:cb:18:34:7d:71:
47:c0:7c:b9:5c:a5:eb:32:37:1b:b5:55:9d:05:dc:
ba:df:53:f6:39:91:b8:cd:28:3e:83:90:0d:90:0d:
bf:7a:ad:f8:60:e7:b4:bf:c6:40:d4:6d:5d:5a:0e:
6f:8e:54:d6:00:da:93:f2:f5:2f:2d:b8:ce:17:0c:
cb:b1:fa:61:f9:a5:dd:51:bc:5a:ba:2f:22:18:1f:
81:21:79:ec:dc:82:8c:13:0d:55:3d:d8:b6:04:88:
ca:ff:90:56:ae:67:4e:22:3b:a2:d1:c5:ef:14:7d:
56:9c:d4:09:e4:d2:46:55:81:2c:3e:ab:f2:e2:2e:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:6A:D4:0B:81:23:0F:55:46:05:96:02:CF:30:F8:5C:E3:86:7E
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uElq1AuBIw9VRgWWAs8w-Fzjhn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.229.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1f:bc:3c:34:3e:0a:e8:2a:b9:22:1e:64:be:fe:cc:8f:00:
49:f6:eb:90:d7:22:cb:6c:da:6a:8f:cc:b8:cb:46:16:a1:f7:
2b:60:c5:ec:90:fd:c8:4c:e1:3f:f8:11:5d:42:aa:8e:6d:87:
3a:63:8c:94:27:2d:0d:7b:78:5c:1a:d0:da:b4:4a:65:37:21:
5f:d7:c5:4c:59:aa:a6:fc:a9:60:ff:62:a0:16:3e:e3:3f:f8:
af:98:2a:87:db:5f:33:b0:2f:5d:ae:4e:6d:d9:cb:29:a2:eb:
c4:a1:95:86:fd:a9:12:40:34:75:1e:fd:07:42:4d:8c:dd:9c:
f9:2e:cc:3a:37:96:a1:45:a6:86:2f:fc:eb:23:f1:8e:ab:ab:
6f:fd:c8:b4:38:d7:5f:08:15:cd:7e:91:d3:28:38:ac:c6:e7:
de:56:ad:4f:07:d2:3e:93:d5:04:3c:d7:fe:40:b2:48:63:ee:
40:66:3a:5b:f3:16:13:a5:38:d0:22:80:3f:8a:a6:94:df:8e:
aa:90:51:fc:13:a1:31:f6:56:16:40:cb:35:f9:56:5d:09:08:
ca:ed:74:c3:00:94:2d:c0:5b:ee:dd:14:73:21:43:fd:e0:3e:
33:bd:fd:5d:8d:6a:80:7b:65:5d:7a:b6:1a:89:83:83:b4:42:
02:7a:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:30 2024 by rpki-client on console-fra.rpki-client.org