Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ujKz18XBqxrTif43x41t9WeV-GY.roa
File: ujKz18XBqxrTif43x41t9WeV-GY.roa (raw, json)
Hash identifier: FJdrxUNOigHz6rsM0k+oa6m1svqB86CWkEaCvjgSuyo=
Subject key identifier: BA:32:B3:D7:C5:C1:AB:1A:D3:89:FE:37:C7:8D:6D:F5:67:95:F8:66
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE94C4DB4E8FD0DF248FCE58FC0153
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ujKz18XBqxrTif43x41t9WeV-GY.roa
Signing time: Tue 02 Jan 2024 06:31:19 +0000
ROA not before: Tue 02 Jan 2024 06:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216159
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:94:c4:db:4e:8f:d0:df:24:8f:ce:58:fc:01:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba32b3d7c5c1ab1ad389fe37c78d6df56795f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:82:88:93:aa:92:32:7e:bf:9b:ee:46:3c:
94:11:d3:53:d7:97:39:50:99:58:26:cc:15:97:ac:
a6:62:2d:21:e6:bc:7f:72:1a:a2:6f:06:c4:e0:48:
b9:58:0c:60:a8:d4:f9:17:86:8d:a5:16:32:9f:b7:
c7:33:48:02:9e:90:65:ac:d6:dc:95:13:ed:65:c1:
59:2a:da:5e:d4:2f:74:83:5f:14:54:f1:f1:c0:37:
d1:b1:e1:e4:4e:9d:2a:95:3b:07:e1:d7:bf:5a:de:
7b:43:ca:94:c8:26:26:dd:15:74:fa:34:29:83:28:
fc:b3:7f:98:ee:1e:a8:e1:82:47:33:c2:e6:b1:32:
c6:17:1b:66:0b:27:04:2d:3c:ae:84:e2:4c:af:64:
8a:a5:cd:6c:76:17:ae:ff:61:96:2a:4d:c1:49:70:
80:7e:68:37:31:43:2e:43:58:e9:e3:fb:03:d3:71:
ba:00:d5:7a:7f:96:61:ce:64:33:d6:af:af:be:db:
75:e7:6d:5e:91:d1:6e:da:12:db:97:d3:aa:29:f8:
3b:f9:fa:6f:91:f0:8f:07:f5:fd:c7:eb:92:cc:84:
7e:96:1f:e8:98:78:8a:f4:39:e4:40:a6:ea:b7:7b:
2a:0d:a1:1a:d8:6c:9d:3f:81:64:5a:42:a9:ce:bf:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:B3:D7:C5:C1:AB:1A:D3:89:FE:37:C7:8D:6D:F5:67:95:F8:66
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ujKz18XBqxrTif43x41t9WeV-GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ed:59:51:9a:6c:8f:8f:8f:1f:95:f9:46:dc:37:bf:b7:c6:
26:a5:fc:af:ac:de:e9:b1:10:d8:7d:f0:59:cf:9f:18:22:b8:
f4:88:8f:f9:95:ab:4e:07:47:fe:a3:e2:69:30:dd:f3:61:f2:
de:31:a7:d6:ab:79:0e:3e:e4:95:05:93:71:e3:65:8a:11:ed:
8c:bb:9d:e9:e2:de:c1:f9:83:83:33:09:d5:de:aa:14:ee:14:
9c:c3:10:36:d5:41:33:b9:95:37:5f:53:9d:e4:dc:68:10:ad:
f4:6c:b6:79:bd:f2:d6:e2:d5:23:25:4e:b0:93:b3:a0:6b:e9:
88:37:31:e8:15:4b:b4:30:62:b9:0d:cf:7c:9e:91:8d:4a:e3:
05:47:7a:0b:1f:6c:3a:4f:bc:56:29:fb:f0:7b:43:03:4c:7b:
b1:df:3d:6a:b2:9f:07:cb:07:7b:01:7d:9e:9c:df:9f:5f:5e:
20:b6:f4:ad:59:b6:ce:c7:f1:dd:f5:01:f7:fb:04:80:50:a1:
3c:55:d2:c3:b5:a2:95:e0:fe:b5:ba:11:bf:00:3a:97:2f:d6:
f9:eb:c0:c4:c1:e6:d3:4c:6e:db:ac:b7:d8:91:c0:56:ce:f7:
91:2a:5e:2d:eb:3c:51:26:bd:99:0f:77:93:a0:c0:cb:45:f2:
1d:33:cc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:34:22 2024 by rpki-client on console-ams.rpki-client.org