Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/uk-jmssaMo9CY9Aw5qlRAXIhOz4.roa
File: uk-jmssaMo9CY9Aw5qlRAXIhOz4.roa (raw, json)
Hash identifier: vluWeRp6P2FiRzEPSMQ/Qje6lOaEyC+5aV0U0lVu/pg=
Subject key identifier: BA:4F:A3:9A:CB:1A:32:8F:42:63:D0:30:E6:A9:51:01:72:21:3B:3E
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 018CC2DAF1FFE1BAD11840E26E3443138185
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/uk-jmssaMo9CY9Aw5qlRAXIhOz4.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210118
IP address blocks: 45.154.61.0/24 maxlen: 24
2a0f:b100:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f1:ff:e1:ba:d1:18:40:e2:6e:34:43:13:81:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba4fa39acb1a328f4263d030e6a9510172213b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:43:f9:d2:83:87:3e:72:5f:58:fe:d0:70:
cf:c2:23:aa:69:db:52:c6:01:23:a1:bc:9e:20:60:
f1:ff:f2:7b:16:0d:18:82:4a:b0:83:78:a1:4b:b4:
87:d1:84:22:de:68:af:19:b7:2b:f6:fe:7e:2f:ed:
24:c9:88:2b:d2:99:73:79:59:8e:8f:95:06:45:03:
12:68:d0:54:44:7a:d0:54:4d:c3:bd:49:45:17:81:
f9:9e:fb:25:10:2e:4d:05:dd:00:83:a4:ab:dd:ba:
e1:20:7b:0b:65:80:1b:5e:e7:62:e4:82:5e:e0:9f:
b6:0c:aa:6c:b2:32:e7:10:07:ec:f7:18:f7:70:9a:
d8:f2:a7:38:14:8d:83:fb:17:90:2a:8a:c4:2a:15:
95:e6:87:56:15:9b:64:34:c9:46:b1:21:51:36:73:
1d:df:56:6d:41:53:f1:f0:23:8e:0d:aa:5c:72:00:
05:01:e4:6f:2a:33:c3:aa:0a:5b:d3:d1:2b:4e:47:
34:39:59:3d:b1:43:58:2f:7d:a0:63:31:5f:8f:49:
82:e6:c8:37:94:81:8f:b9:cb:9d:5d:ff:a7:1f:09:
9b:a6:53:f9:01:e6:05:22:1a:51:56:c1:21:a2:39:
ea:84:a4:df:11:06:b0:44:50:cf:9e:b4:c1:e1:02:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:A3:9A:CB:1A:32:8F:42:63:D0:30:E6:A9:51:01:72:21:3B:3E
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/uk-jmssaMo9CY9Aw5qlRAXIhOz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.61.0/24
IPv6:
2a0f:b100:100::/40
Signature Algorithm: sha256WithRSAEncryption
a3:e7:83:0b:81:d1:f4:1e:67:1f:7a:75:de:4d:9e:c4:c6:4a:
45:ae:54:a1:c1:a9:e9:a7:8c:66:40:01:8f:90:dc:88:f1:b0:
f1:9d:1c:28:06:68:a5:54:7d:68:09:8a:3e:19:a5:85:46:b9:
24:f7:c8:e5:4b:46:ec:ac:98:f6:8f:5e:59:f7:43:61:85:f5:
a7:11:6a:01:f1:7c:6a:33:d5:72:e3:8d:ae:f8:56:76:e9:f9:
f0:4c:a3:b4:8c:cf:9d:28:13:37:48:a4:f1:2c:58:9c:42:25:
36:58:aa:cd:09:be:41:a2:cc:45:47:43:1c:99:6f:b0:50:f8:
53:f7:4a:f7:c5:58:26:a3:66:28:da:e7:51:ef:0a:d5:fa:8d:
62:df:bb:ce:8f:13:41:a7:98:76:35:1d:2c:54:28:34:28:37:
81:58:49:82:12:b6:0a:00:bc:bf:dc:c4:34:95:15:ec:57:41:
0b:98:0a:fa:48:b2:25:5a:26:70:7d:fb:80:7f:54:62:0e:68:
e2:02:73:fe:87:46:73:23:64:22:90:37:3b:95:b6:b2:86:24:
cc:77:83:94:36:ff:48:f0:f0:ce:55:89:0d:68:29:bf:6a:46:
59:36:72:d1:8a:cc:25:71:df:85:ef:53:f0:bc:9d:5f:f4:0f:
d6:fb:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:24:13 2024 by rpki-client on console-ams.rpki-client.org