Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/ufvSIzpYu4RXxJa0KTKDqS6WFN0.roa
File: ufvSIzpYu4RXxJa0KTKDqS6WFN0.roa (raw, json)
Hash identifier: PgfIBlacCimNH8jP4CzbtNpPpmPG8JkE0iSjwFeqDT0=
Subject key identifier: B9:FB:D2:23:3A:58:BB:84:57:C4:96:B4:29:32:83:A9:2E:96:14:DD
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 018DA75669F2776DAECDC2FE12E962FF9F23
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/ufvSIzpYu4RXxJa0KTKDqS6WFN0.roa
Signing time: Wed 14 Feb 2024 11:17:54 +0000
ROA not before: Wed 14 Feb 2024 11:17:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134450
IP address blocks: 45.82.40.0/23 maxlen: 23
45.130.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 19:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:56:69:f2:77:6d:ae:cd:c2:fe:12:e9:62:ff:9f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Feb 14 11:17:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9fbd2233a58bb8457c496b4293283a92e9614dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:1b:e8:15:d9:ef:a2:90:8b:93:5d:33:5a:
42:1a:c4:40:92:19:65:00:c8:21:9f:4b:ab:9f:b4:
03:a7:a0:0e:b3:a3:7d:6e:de:f0:81:c3:02:c3:af:
13:4d:11:4c:27:67:04:5d:44:cf:2e:2e:f9:ed:5f:
95:e7:8b:aa:46:73:46:48:cf:8c:f3:88:4d:05:25:
fa:fd:dc:a0:4b:a0:86:c0:f0:d6:ab:35:dc:a8:b6:
ac:49:f9:40:15:a8:19:ae:96:78:13:35:3f:b3:4f:
98:eb:0f:56:e8:da:58:62:66:1c:d4:d9:58:73:3e:
ce:c2:90:88:71:3b:7d:4d:5f:f6:af:7a:47:98:bb:
90:ec:fc:7d:e0:6d:0a:f3:c3:b9:ba:48:7e:7a:61:
1e:b5:60:4b:32:0e:44:c1:42:f0:54:74:9a:fd:a6:
89:53:f5:2c:13:b4:f4:c2:58:3f:cd:01:2a:18:cf:
24:75:9b:e5:56:76:a6:80:a1:9a:8c:02:72:b9:dd:
24:46:54:76:fa:76:5f:a2:37:25:12:06:e4:22:de:
79:d6:d5:f3:af:5e:9f:2b:74:55:3a:13:3e:c0:db:
69:96:dc:d9:27:99:c0:62:c7:88:6c:da:11:e8:97:
db:83:2e:41:90:12:75:90:93:12:3b:d7:42:8c:15:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:D2:23:3A:58:BB:84:57:C4:96:B4:29:32:83:A9:2E:96:14:DD
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/ufvSIzpYu4RXxJa0KTKDqS6WFN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.40.0/23
45.130.66.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:04:44:68:c5:60:2b:6e:84:26:df:a0:ae:95:50:a1:ae:98:
b8:e6:9a:b2:1a:e0:3a:74:f9:92:01:7f:75:2b:5a:e9:5c:74:
4b:20:76:f2:14:ac:76:f0:73:c4:ba:52:77:f3:ab:62:e6:4e:
a9:8b:18:78:17:37:3f:e8:53:59:af:8e:e8:36:70:7f:0a:89:
68:d2:97:b3:9d:c8:5b:85:0d:e5:82:5f:99:26:c8:c9:75:bb:
dc:a2:c1:3d:b6:d3:bb:9f:56:8e:21:50:ca:fa:00:a0:35:e0:
cb:6b:16:2d:f4:c8:d3:51:58:2d:cf:78:fd:1a:d3:fa:38:de:
d4:bc:c2:1d:07:e8:88:8d:a9:a5:7f:d6:f5:94:75:e6:db:74:
61:86:db:01:5f:c5:ff:c1:c7:6b:c3:09:29:d2:ad:0c:57:63:
df:5a:21:69:b5:56:d0:e5:a1:25:47:c5:23:c8:4a:ce:0a:e9:
a8:39:5d:5a:5f:92:dd:a1:0b:0a:76:8a:be:3c:47:ad:60:e9:
c4:f1:a2:67:ca:39:52:a1:25:9f:76:1c:18:4f:51:58:28:05:
35:f0:5c:23:82:11:51:05:9f:db:74:3e:6d:d2:c8:5f:78:ab:
03:95:12:35:58:47:b0:b8:ab:5d:43:ea:0f:9d:9a:ed:37:05:
d7:ff:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 00:18:42 2024 by rpki-client on console-ams.rpki-client.org