Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uWs-R2jIloTPwyDv3f4ijga3NMw.roa
File: uWs-R2jIloTPwyDv3f4ijga3NMw.roa (raw, json)
Hash identifier: AKfOQPHVHrKgsKkXgAyRibQrIAV0VK8QHXmPtntntLk=
Subject key identifier: B9:6B:3E:47:68:C8:96:84:CF:C3:20:EF:DD:FE:22:8E:06:B7:34:CC
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E1543EFE6FA88042681DCA5DB33F7
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uWs-R2jIloTPwyDv3f4ijga3NMw.roa
Signing time: Tue 02 Jan 2024 08:33:06 +0000
ROA not before: Tue 02 Jan 2024 08:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 37.114.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:15:43:ef:e6:fa:88:04:26:81:dc:a5:db:33:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b96b3e4768c89684cfc320efddfe228e06b734cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:d5:7e:89:48:e8:7d:f9:d6:98:ac:2f:5c:
dc:dd:30:20:83:86:eb:ec:57:9f:a3:61:1d:f1:b3:
81:74:a5:ff:d0:26:a5:1b:60:33:97:8d:c1:72:a0:
2e:8a:b5:b5:e5:2b:62:2c:5e:9e:ed:26:1b:14:66:
1d:18:7f:14:ef:91:f9:9f:25:ac:93:da:de:83:b0:
6f:8d:44:e8:4c:0f:f5:f9:30:f2:f9:5b:fd:93:78:
06:9e:8e:58:73:e9:70:c7:de:34:b2:aa:39:50:9a:
b7:d6:ee:2d:81:a4:4b:f7:a0:59:88:a8:3a:e3:75:
ee:bb:92:4b:62:7e:bb:06:b7:0b:77:6c:66:8f:12:
ca:27:0f:75:db:09:6c:0a:99:b2:ed:ae:9f:bb:72:
db:72:9b:37:c6:78:a0:be:7a:d6:a1:4e:c9:54:12:
39:af:25:35:62:ca:41:dc:a0:d7:93:44:48:4e:eb:
89:ff:9c:87:33:18:b5:18:3a:72:53:6b:53:87:38:
c3:89:77:a8:a3:00:2b:a2:5d:45:e9:6f:88:3a:c5:
17:e9:5f:cc:80:f4:41:1d:04:2a:55:bb:22:51:7f:
51:1b:c6:e5:7c:76:7b:e7:28:06:37:07:0f:9a:d6:
13:a5:43:e8:32:a6:a3:39:2f:f6:7e:8a:11:4c:09:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:3E:47:68:C8:96:84:CF:C3:20:EF:DD:FE:22:8E:06:B7:34:CC
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uWs-R2jIloTPwyDv3f4ijga3NMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:84:8e:76:33:7f:2d:7b:b0:b0:10:d2:85:0e:a1:de:6a:f7:
19:6f:92:35:73:39:06:08:3e:71:ab:83:9b:88:bc:c7:41:e3:
b7:1a:c7:bd:bb:71:1a:55:fe:6d:f0:00:15:33:c0:37:50:f9:
a5:d0:28:6c:62:2e:97:fb:87:17:53:6a:7b:f1:b0:67:8f:ec:
18:2a:48:b1:52:12:8f:14:d3:0b:21:f8:ae:d6:94:e7:28:c3:
7f:d9:68:06:a7:55:7f:c3:7c:3c:bf:2f:a9:34:e0:79:0f:82:
72:84:f4:31:65:13:51:54:65:26:b1:5d:fd:97:8a:61:0b:0a:
14:8e:05:0b:4d:f7:cc:0f:13:29:c5:fb:52:69:37:ac:60:ce:
11:32:12:29:cb:0d:4a:b7:9f:db:1e:06:78:0e:8d:20:34:86:
de:ab:b7:ab:95:14:2d:62:cd:9a:54:13:67:91:21:7f:1b:b0:
5f:eb:28:a4:5d:99:b2:60:0a:74:27:d7:3e:36:50:99:9b:1b:
8e:66:9d:ce:e6:08:f8:8b:dd:44:17:a5:08:63:b7:9a:9b:d6:
10:d1:5e:ac:b0:79:ac:ca:e0:c2:8d:52:c9:10:70:80:54:e7:
15:ab:b0:d8:f6:0b:5c:9d:18:1a:04:a9:ed:41:41:19:ca:74:
82:7a:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:53:09 2024 by rpki-client on console-fra.rpki-client.org