Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/rgUisp-EAVY4KDS7HAHWjE59r3w.roa
File: rgUisp-EAVY4KDS7HAHWjE59r3w.roa (raw, json)
Hash identifier: /NrvTHeZqXztpfPt3ROWKiJ2vw9Qk/TEeL2FxOlAkYs=
Subject key identifier: AE:05:22:B2:9F:84:01:56:38:28:34:BB:1C:01:D6:8C:4E:7D:AF:7C
Certificate issuer: /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial: 018CC64B03A72D60106675418488EAAB730A
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/rgUisp-EAVY4KDS7HAHWjE59r3w.roa
Signing time: Mon 01 Jan 2024 18:30:54 +0000
ROA not before: Mon 01 Jan 2024 18:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207813
IP address blocks: 5.252.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:03:a7:2d:60:10:66:75:41:84:88:ea:ab:73:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Validity
Not Before: Jan 1 18:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae0522b29f840156382834bb1c01d68c4e7daf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:07:6a:2a:18:5f:a8:2c:da:86:7b:2a:88:
1e:9f:92:59:c4:fc:f8:fe:03:f9:4d:1c:4c:7f:4a:
e1:13:d0:cb:b3:a4:cc:63:3a:10:14:a5:5c:c8:12:
d7:48:c0:0a:86:5a:90:79:a1:c0:17:73:2a:69:c7:
c4:78:1f:b2:44:27:b9:89:b7:b6:15:c4:5a:b0:e9:
1f:3e:14:57:fa:4d:5a:a0:72:6d:d7:bf:06:4f:29:
ce:63:03:41:a4:c1:0d:2c:b4:16:6c:33:f6:be:b2:
f4:e1:06:72:ee:7c:05:9a:78:a0:02:e8:be:ec:a3:
02:9f:46:40:05:50:4a:d9:11:a6:05:6b:71:b3:ef:
99:11:39:a1:fd:89:75:20:f9:d5:d5:ec:b7:7f:e9:
15:d9:bc:ad:66:83:8c:e8:f4:8a:06:4a:d3:60:63:
11:ee:9b:84:c0:8b:20:65:bf:a6:b1:14:f5:4a:11:
b2:4c:bf:fb:d6:c7:74:a0:98:4c:97:52:7c:a6:78:
ec:52:6d:0e:0c:c6:13:10:1a:c3:fb:d0:cd:02:e1:
4e:81:9e:93:00:20:d9:c2:cf:b2:b8:f0:a5:fc:9b:
2e:a4:37:fd:ff:54:d5:a6:df:37:e5:01:01:74:5d:
1e:b3:73:eb:b9:1f:ff:fb:a1:bb:c9:79:a1:bd:72:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:22:B2:9F:84:01:56:38:28:34:BB:1C:01:D6:8C:4E:7D:AF:7C
X509v3 Authority Key Identifier:
keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/rgUisp-EAVY4KDS7HAHWjE59r3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.148.0/22
Signature Algorithm: sha256WithRSAEncryption
68:5e:a8:9a:bc:80:75:7e:aa:75:fc:3b:a7:fb:a8:6a:60:7a:
31:4c:5f:55:62:82:7b:07:27:a1:87:f1:d0:ee:f9:e5:a0:c0:
38:13:eb:2d:b9:cc:bd:95:cf:ff:87:41:10:e8:6b:49:9b:6d:
14:d3:7d:06:2c:f9:3e:50:1c:74:86:4b:16:43:62:63:d8:69:
1d:e6:01:61:bf:59:4c:25:cf:9e:0d:8b:11:d7:91:06:3c:a7:
42:3e:d7:f0:cd:41:b0:99:98:f9:e8:0a:8e:aa:59:14:55:53:
02:71:68:26:55:1e:96:b9:13:5a:7f:5d:5d:f6:d4:ad:90:df:
6a:d5:21:f3:9c:65:a0:56:25:e9:a6:b5:7c:c8:a6:c4:51:d0:
13:5f:10:f8:c7:1e:88:7e:cf:61:c5:d7:bc:f8:27:46:48:48:
73:0a:10:47:35:c1:bc:4f:78:72:65:b8:6a:ca:a5:ff:af:bb:
4b:9f:2f:ac:fe:fb:49:58:4d:0e:a3:e6:d4:af:a9:53:dc:59:
bc:64:f1:f2:54:f8:cd:ab:48:8d:d4:03:04:f4:aa:5e:45:9a:
9e:8b:d7:b7:1e:ab:a7:94:45:f0:7f:87:9f:b3:4b:40:bc:dd:
64:58:ae:50:08:52:0d:8b:bc:f9:71:78:5e:d3:25:95:f8:55:
61:4f:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:58 2024 by rpki-client on console-ams.rpki-client.org