Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/uw-jxLe1V5MKCJo7Y9yWyRdds-w.roa
File: uw-jxLe1V5MKCJo7Y9yWyRdds-w.roa (raw, json)
Hash identifier: Ufc4NlWWOMNL6kyEOHTwB2+h1img9xSok+JKbCLIvuk=
Subject key identifier: BB:0F:A3:C4:B7:B5:57:93:0A:08:9A:3B:63:DC:96:C9:17:5D:B3:EC
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0192B39FA543185716253F822EC7CA6F9BD0
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/uw-jxLe1V5MKCJo7Y9yWyRdds-w.roa
Signing time: Tue 22 Oct 2024 09:47:17 +0000
ROA not before: Tue 22 Oct 2024 09:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 145.61.196.0/24 maxlen: 24
145.61.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:9f:a5:43:18:57:16:25:3f:82:2e:c7:ca:6f:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 22 09:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb0fa3c4b7b557930a089a3b63dc96c9175db3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:9f:1e:8b:86:74:4b:08:02:46:b3:d6:95:
61:0e:5c:41:c4:5b:df:f9:f0:32:f9:ae:59:6d:53:
95:7c:dc:69:f5:62:20:8a:45:9c:e6:19:d3:bf:6d:
c0:d2:28:1d:2c:59:ba:b6:3c:56:69:14:ee:2c:57:
1f:75:01:05:ad:94:8a:f1:c1:a3:38:ca:4c:a4:2e:
6d:a3:4e:4e:9a:ab:9f:dd:bf:37:bb:cf:58:57:ab:
79:85:18:78:53:c8:3c:71:a3:a0:ad:6d:f7:b6:9d:
e6:23:2a:a1:b3:65:5e:84:d8:c8:4d:1f:cf:c3:99:
84:76:2b:bd:19:40:92:d4:be:a7:05:e7:00:2c:16:
70:19:0b:35:a1:f7:86:d8:c9:45:84:03:a5:f2:eb:
8a:ea:a8:5f:f7:48:b9:ca:be:49:e9:b9:84:3a:d7:
e7:b2:0d:f6:23:e2:5d:ce:62:4e:38:f8:66:75:7b:
41:ed:16:c0:d7:42:43:87:67:91:32:1d:fc:2b:e5:
ec:31:15:90:13:c4:59:48:44:6c:0a:e7:79:d0:30:
2c:7e:16:2c:9f:34:25:17:00:f5:87:e8:9e:6b:a7:
00:00:e8:d9:2b:7d:fb:f6:62:56:81:6a:17:f8:f5:
af:69:27:01:63:ee:53:ed:42:8d:9b:0a:8d:3a:c1:
78:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:A3:C4:B7:B5:57:93:0A:08:9A:3B:63:DC:96:C9:17:5D:B3:EC
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/uw-jxLe1V5MKCJo7Y9yWyRdds-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.61.196.0/24
145.61.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c4:88:09:ef:02:ad:73:3b:f4:33:ee:ad:70:6c:1c:9d:40:
67:d5:77:03:c8:31:88:e8:ea:5a:6d:82:81:b3:6b:43:9b:6a:
c8:6b:7a:af:53:f2:46:c0:dd:65:f3:f2:8f:5d:c2:08:fe:e2:
a4:82:01:a7:e6:f3:c9:9c:ca:42:bf:fe:c8:f8:c8:b2:34:68:
39:74:67:f0:1a:4d:e7:34:fe:b2:35:74:86:37:cc:90:d2:b3:
7d:68:32:a9:7d:f3:17:65:2f:4a:27:5d:5f:b1:88:5c:6b:dd:
1e:44:43:57:15:11:da:9b:0d:44:77:41:e9:97:b8:94:4e:be:
65:06:ea:7d:5f:ad:a3:10:2d:f1:4c:b2:3b:58:e0:e4:bb:e1:
44:89:ad:e4:62:e1:de:db:75:da:61:4b:e6:55:ed:13:8a:c4:
40:67:02:a8:9d:ff:13:52:fd:02:56:6a:87:5a:a4:32:07:54:
31:99:88:2a:5a:4a:8d:5e:e5:74:10:35:d2:87:ce:30:16:3b:
47:5a:8c:2b:55:78:4d:93:34:d0:87:b3:d6:53:ec:29:5f:df:
78:f7:7f:d8:42:73:7f:17:a0:17:6b:dc:ae:8a:3d:55:eb:c1:
c1:1d:e5:2f:13:20:d9:13:c1:31:57:7c:ee:1c:ae:f0:b5:e9:
fe:ef:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:54:59 2024 by rpki-client on console-ams.rpki-client.org