Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UV8b6MEW4_SwapZ02Sl0-VvW1zI.roa
File: UV8b6MEW4_SwapZ02Sl0-VvW1zI.roa (raw, json)
Hash identifier: iK06blVwqloN6HhUOZecPMQLmPH5BId+8Th2aapzSDc=
Subject key identifier: 51:5F:1B:E8:C1:16:E3:F4:B0:6A:96:74:D9:29:74:F9:5B:D6:D7:32
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018E957EE61AA88FFA602C8721CB5D17F44D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UV8b6MEW4_SwapZ02Sl0-VvW1zI.roa
Signing time: Sun 31 Mar 2024 17:11:45 +0000
ROA not before: Sun 31 Mar 2024 17:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 84.32.39.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:7e:e6:1a:a8:8f:fa:60:2c:87:21:cb:5d:17:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 31 17:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=515f1be8c116e3f4b06a9674d92974f95bd6d732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:59:fe:fe:5c:14:fc:56:13:f2:a1:68:fe:
a7:b6:11:36:68:3c:74:91:c2:7f:cf:f9:c9:df:d0:
de:a3:02:60:4a:a2:c6:dd:41:95:67:bc:93:e8:cb:
97:d1:fe:a8:68:69:a7:90:da:bb:1d:e3:e1:f4:9d:
40:4e:9d:80:8c:c4:62:f9:0b:af:36:26:e7:e0:a2:
67:10:5f:b6:12:33:d5:0e:49:cb:e9:6c:89:c3:0d:
ae:0d:1d:72:9d:14:e7:73:b3:d1:13:37:d5:03:11:
df:f6:eb:f6:ee:a7:69:f1:84:08:54:0d:73:27:34:
dd:ee:35:92:a5:f6:ee:50:2c:c2:9b:c6:9f:72:8b:
aa:56:b8:99:01:9d:d8:99:01:6d:08:96:25:fe:0c:
c9:8a:d3:ac:27:11:8d:94:ed:29:b1:b0:e4:c2:24:
84:d0:27:5d:b3:c4:fa:f3:0b:bd:d3:cc:81:ed:61:
af:cf:12:ea:5a:e5:6d:b7:29:77:de:d4:d3:b3:48:
03:17:bb:ff:fe:1e:50:e8:6c:97:fa:ea:14:7b:96:
ae:35:ca:fb:df:22:b6:3a:d0:ea:da:21:af:ff:d5:
e9:c3:60:f8:4b:9b:84:78:df:0a:af:40:ba:ca:34:
df:06:4f:f3:e0:dc:c4:a7:21:7f:0d:9f:cf:4c:61:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:1B:E8:C1:16:E3:F4:B0:6A:96:74:D9:29:74:F9:5B:D6:D7:32
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UV8b6MEW4_SwapZ02Sl0-VvW1zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:5e:ab:da:07:71:88:b2:b6:c6:89:c7:8e:83:ab:ec:90:5d:
37:3e:f3:cc:d8:a7:4d:d9:46:05:0e:93:2b:61:d4:db:85:4b:
ec:a7:9d:e4:ce:2e:93:a3:3f:73:60:97:2c:ac:f0:d5:ec:d4:
b7:ab:06:8e:e1:36:cb:d8:51:71:65:5f:6d:ac:5f:8b:9a:56:
97:25:2f:78:5d:b8:40:87:34:d3:f7:52:2f:6a:de:7c:a6:b3:
16:ba:7e:85:3a:0e:98:69:81:10:03:f4:e9:47:1b:16:c8:75:
b4:59:77:cf:dd:a2:a1:6b:38:5a:b0:96:38:92:fe:7c:6c:65:
21:73:d0:6d:a3:05:b1:0f:65:7a:53:0d:70:e8:38:b2:c0:37:
44:87:29:ac:ff:db:0e:47:f1:af:05:ea:11:27:94:4e:6d:85:
0d:e9:81:bc:48:03:59:2a:ee:54:49:0c:fe:17:9f:bc:bb:4e:
a4:5a:f3:2e:2c:9a:61:b3:b5:a4:3b:4c:3b:06:20:48:96:ac:
73:1b:6d:f0:3c:f9:20:6d:2b:df:20:77:a1:61:7c:cb:b0:1f:
94:47:c7:d5:80:bc:56:eb:3e:f3:28:ea:6f:64:1d:52:4a:80:
18:b2:83:0e:84:18:35:2e:ee:8c:be:14:e2:20:62:f6:88:b0:
10:10:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:08:17 2024 by rpki-client on console-ams.rpki-client.org