Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/UVvzMsAW5Cz-gJuiKw_bCzwZ_uw.roa
File: UVvzMsAW5Cz-gJuiKw_bCzwZ_uw.roa (raw, json)
Hash identifier: lD4lXvd/aSQs7j1RCTvl9WAb0URBUaZBcxVrLBZe6XA=
Subject key identifier: 51:5B:F3:32:C0:16:E4:2C:FE:80:9B:A2:2B:0F:DB:0B:3C:19:FE:EC
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 018CC7935E3F5BC47E5A0584A1CC779610F9
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/UVvzMsAW5Cz-gJuiKw_bCzwZ_uw.roa
Signing time: Tue 02 Jan 2024 00:29:32 +0000
ROA not before: Tue 02 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205595
IP address blocks: 37.228.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:5e:3f:5b:c4:7e:5a:05:84:a1:cc:77:96:10:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jan 2 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=515bf332c016e42cfe809ba22b0fdb0b3c19feec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:8b:62:8f:97:bc:5e:61:fa:24:b7:47:c2:
a4:b1:ce:7d:66:a2:a0:14:05:d9:b3:51:fd:76:ef:
fa:56:b1:b9:c9:8c:86:01:54:75:85:fa:b3:df:c6:
73:cc:8b:f6:d0:31:09:fb:c2:96:00:b7:8c:24:fd:
ea:f5:a5:e5:e7:a8:f6:ac:e6:fe:33:1a:e8:3f:3c:
9c:73:4a:3a:d6:03:90:4c:94:52:6e:86:e5:b8:73:
aa:67:b0:59:a7:2a:b5:64:d7:5a:40:58:6e:c6:58:
ca:95:2c:22:83:83:ec:bc:b0:55:c7:5c:24:af:1a:
17:e5:02:54:77:02:0f:2c:7a:50:c4:68:20:5c:52:
c3:25:29:f1:c1:7d:5c:7e:fb:1c:05:c4:9b:9e:4f:
fa:99:0b:59:e2:9c:09:5a:48:7f:97:bc:bc:36:8d:
d2:59:04:b8:c7:e6:f2:f9:9c:ff:d8:2f:46:61:0b:
5b:f2:ce:b8:b0:65:df:a0:b3:ed:65:d2:f7:6f:91:
ba:d3:42:75:d7:f9:8b:ff:fb:19:64:88:85:8f:24:
64:67:36:9c:2f:cd:ef:ee:d6:ec:b3:f7:2a:44:df:
bd:45:f0:4d:cc:04:d0:48:0f:63:10:e8:77:ce:1b:
70:68:9a:b1:8c:20:67:8c:5b:5e:98:03:d3:13:3c:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5B:F3:32:C0:16:E4:2C:FE:80:9B:A2:2B:0F:DB:0B:3C:19:FE:EC
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/UVvzMsAW5Cz-gJuiKw_bCzwZ_uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:74:f4:98:68:e8:02:51:dc:06:d5:66:a0:d9:cd:8b:41:a9:
b6:8d:67:b0:c2:06:80:9d:5c:79:c5:98:ad:38:42:37:e3:a6:
12:e0:f1:b9:9f:50:6d:b1:e7:c6:96:ae:98:c3:1d:06:cb:9e:
3c:e5:96:14:b4:55:e4:e5:04:de:af:24:41:e6:93:c0:0d:c7:
20:96:25:4e:52:ee:70:2e:fa:90:de:2d:3b:dd:55:a9:ed:cd:
87:12:79:59:94:e2:52:66:71:c2:f5:ef:3a:1a:fc:26:f1:1a:
d9:48:4d:05:ad:2f:75:93:9b:ca:3e:1d:7f:ed:09:19:e0:d9:
dd:48:b1:de:88:f5:06:6f:b3:48:7a:80:b0:f3:17:e0:7d:f8:
95:9f:92:ac:1a:b9:86:05:9c:8a:e5:9b:82:6c:85:35:3d:07:
a0:95:a0:14:24:9c:d0:1c:45:c6:91:1e:5a:5b:dd:32:3a:83:
11:03:20:fc:31:d4:a7:b1:04:fd:c5:ea:cf:97:0e:e5:47:5f:
b9:06:9b:41:a5:c7:67:04:8e:08:46:cd:86:a3:df:97:33:dd:
94:bc:08:bd:2c:38:55:90:1e:79:b4:27:ea:8d:f7:5e:be:2a:
79:aa:45:3a:9e:46:2d:7b:f6:b7:c8:0b:c9:a8:cf:c7:50:7a:
13:f3:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:34 2024 by rpki-client on console-ams.rpki-client.org