Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UVpqnprpjsiEuAtLtvNiu0_b4Zo.roa
File: UVpqnprpjsiEuAtLtvNiu0_b4Zo.roa (raw, json)
Hash identifier: T3bePyqoCLburd8u1wfcD2DeUIU6GjpZta9N5MOMqvA=
Subject key identifier: 51:5A:6A:9E:9A:E9:8E:C8:84:B8:0B:4B:B6:F3:62:BB:4F:DB:E1:9A
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BAA1AA3EDFF0B3CA8273DE942C9BDF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UVpqnprpjsiEuAtLtvNiu0_b4Zo.roa
Signing time: Tue 02 Jan 2024 10:31:40 +0000
ROA not before: Tue 02 Jan 2024 10:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207326
IP address blocks: 178.253.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:a1:aa:3e:df:f0:b3:ca:82:73:de:94:2c:9b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=515a6a9e9ae98ec884b80b4bb6f362bb4fdbe19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:16:d8:30:4d:da:d2:2e:08:e0:37:32:cc:
d4:19:a1:9d:16:4f:7b:77:7a:ba:99:74:56:16:95:
f3:1c:88:51:f4:83:5b:da:b7:56:5c:8f:3d:b4:c4:
cd:4c:fc:66:87:0c:5e:76:d4:1a:1a:95:6f:7f:60:
71:5a:50:a6:4a:8e:7b:f4:e2:13:8e:1e:a0:9b:8d:
f1:06:51:f1:65:87:07:74:17:ed:4e:0c:94:04:2d:
15:14:e3:af:a9:88:2a:2d:6e:72:1a:42:66:ab:7c:
0e:e7:ab:ac:2c:8d:aa:43:07:02:99:4b:92:3d:71:
e5:be:ec:e3:4f:8c:dd:64:aa:cf:ed:75:cc:9c:58:
f8:0a:54:9d:c0:1a:dd:cc:b9:e0:f9:14:e7:84:2a:
52:fc:e6:9a:7f:20:93:b1:59:07:a7:8e:be:6d:0c:
76:62:6b:6e:4f:0e:e3:62:83:03:55:e3:1e:af:41:
9a:11:4b:ce:85:74:f3:22:28:c7:c8:2d:a9:7c:c7:
69:55:ab:63:16:28:fe:79:d5:cf:56:06:dc:94:a0:
b1:a6:2d:da:8b:0e:fd:06:93:f7:60:85:58:1c:f8:
76:97:c0:4e:fb:23:c5:94:d0:48:c2:c2:48:1e:30:
8f:ae:33:24:1d:f1:e4:68:d5:d0:a1:ca:1f:84:cb:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5A:6A:9E:9A:E9:8E:C8:84:B8:0B:4B:B6:F3:62:BB:4F:DB:E1:9A
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UVpqnprpjsiEuAtLtvNiu0_b4Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.53.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6f:25:24:e9:1a:62:79:cb:2f:4b:00:ea:64:47:be:1b:23:
99:68:7d:f3:e1:64:1d:71:ca:3f:8b:42:4d:31:02:01:d6:06:
77:b8:64:d6:92:ff:5e:8c:5b:6d:28:15:9c:42:2d:a6:35:9d:
43:06:65:72:e6:42:cc:5e:36:5f:b5:7a:39:d2:cf:75:6b:8a:
6e:70:5a:84:66:16:41:59:66:d6:3e:98:9a:78:75:a1:ed:88:
cb:0d:0b:fc:2f:36:cb:63:52:f8:1e:2a:c9:1a:59:c8:b2:f7:
87:91:bb:08:19:dd:d5:1b:7b:78:15:60:3c:6d:77:5f:5f:14:
76:0c:33:e6:55:d8:fc:32:a8:cb:22:3e:43:ed:62:35:d1:ad:
fd:ab:42:8a:24:5e:ca:46:37:5a:39:ad:50:fd:75:74:ae:c0:
de:93:c3:41:6a:fa:bd:e0:91:a4:1e:96:9a:58:3a:ca:e3:e6:
fe:98:54:e7:f7:d3:64:bc:6d:1d:ff:8b:fb:f6:92:5f:fa:51:
84:7c:26:f2:99:37:6c:97:f3:5b:51:f4:ab:70:cb:37:a2:3b:
8c:b0:53:bc:18:e0:3d:98:a9:f4:bd:ee:b4:49:f8:73:c9:da:
0f:39:e7:5f:76:5e:43:fd:eb:d0:d9:62:89:ec:e5:54:ac:2c:
2f:7f:61:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:37:53 2024 by rpki-client on console-ams.rpki-client.org