Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/uikauVSx6Ro1CKSnb2YmZCSe2f8.roa
File: uikauVSx6Ro1CKSnb2YmZCSe2f8.roa (raw, json)
Hash identifier: 1mH1VmlZiqTtws6njy50Y026V+yBMgf0fgxIBo+skxE=
Subject key identifier: BA:29:1A:B9:54:B1:E9:1A:35:08:A4:A7:6F:66:26:64:24:9E:D9:FF
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 018CC5DC25DE9AAE5A0C7CEC7D1A30CF5414
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/uikauVSx6Ro1CKSnb2YmZCSe2f8.roa
Signing time: Mon 01 Jan 2024 16:29:48 +0000
ROA not before: Mon 01 Jan 2024 16:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20912
IP address blocks: 212.66.96.0/19 maxlen: 24
77.39.216.0/22 maxlen: 24
185.109.188.0/22 maxlen: 24
176.62.48.0/20 maxlen: 21
85.119.176.0/21 maxlen: 24
77.39.192.0/20 maxlen: 24
2001:40d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:25:de:9a:ae:5a:0c:7c:ec:7d:1a:30:cf:54:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba291ab954b1e91a3508a4a76f662664249ed9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:99:73:40:67:2e:32:c9:aa:b5:1b:2a:0d:d0:
33:95:f6:83:b8:54:53:3a:db:4f:7a:27:b1:0a:f4:
5d:b2:8f:83:5d:e3:0b:bd:e1:1d:c2:48:24:e1:55:
61:a0:d3:16:e2:66:09:df:6b:7d:76:fa:36:47:b2:
15:28:99:a8:2e:93:e2:29:37:5f:10:ae:50:a1:10:
b4:e3:41:d3:65:7b:e3:66:7f:57:a9:5f:54:04:cf:
ed:d2:5d:58:5e:5c:2a:ec:d1:5d:2c:83:52:8a:ed:
25:65:39:1b:85:99:7f:37:88:a0:c3:57:3c:49:96:
5b:ab:ea:40:45:18:72:2f:92:92:82:3b:73:0a:60:
9f:69:53:1f:19:07:c2:e9:6c:0a:32:cc:f5:44:9f:
71:be:99:35:19:ee:88:64:23:c5:4e:07:ed:ab:c0:
de:bf:8c:e4:df:05:d7:51:36:17:56:75:e9:d2:66:
49:02:f5:3d:20:dc:5d:ce:15:fd:ad:33:a2:ff:86:
ec:97:13:9e:7b:0d:88:91:5a:59:c8:6a:11:ec:9b:
ec:4b:ed:3c:2e:70:e1:f1:c9:eb:33:7f:e6:37:bc:
75:a3:2e:24:bc:89:6d:b3:fa:06:9c:96:a0:1d:2c:
a7:02:70:f9:da:8a:14:de:0f:f8:83:95:50:fb:92:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:1A:B9:54:B1:E9:1A:35:08:A4:A7:6F:66:26:64:24:9E:D9:FF
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/uikauVSx6Ro1CKSnb2YmZCSe2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.39.192.0/20
77.39.216.0/22
85.119.176.0/21
176.62.48.0/20
185.109.188.0/22
212.66.96.0/19
IPv6:
2001:40d0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:87:e0:2b:e3:7f:2e:46:5b:d4:3d:7a:f5:f0:fb:4f:c5:90:
49:9d:7e:8b:96:e5:42:8a:45:3a:f8:99:4a:65:50:b6:85:84:
4c:5b:10:b6:61:27:51:fd:02:0b:4a:1d:84:ed:16:1b:30:91:
f9:3b:ea:0d:d1:95:19:f5:06:4a:ab:6c:d6:a7:ab:42:c1:0d:
af:13:80:d2:4b:32:36:1c:7a:c8:fc:9c:2c:38:f2:21:a4:c3:
9d:d8:21:98:f7:84:ae:d6:86:f1:82:09:3c:17:14:f7:4e:dc:
22:61:4e:63:84:79:55:a8:a9:d6:3f:65:f7:1b:7c:4f:69:ce:
c9:03:ee:ef:83:3c:ab:f0:aa:4a:4c:53:8f:9f:f0:1e:88:8f:
86:72:a2:73:8e:10:2f:df:60:82:cf:69:e3:f0:80:51:f6:a5:
56:9d:1d:ca:2e:49:a3:b2:f3:79:2a:4c:c2:bc:96:e4:d8:c9:
3a:7a:d9:77:65:fe:53:24:97:54:4b:d1:02:11:51:3e:4b:39:
da:1a:00:73:d9:29:3b:57:bc:09:6e:63:e7:b4:20:ee:64:b6:
d2:99:b6:54:18:65:11:49:27:13:05:db:68:b4:0d:ff:e1:0b:
f6:15:6f:f9:b0:4a:f7:4f:34:7f:8e:19:b4:9f:d7:9d:fb:32:
95:23:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:01:08 2024 by rpki-client on console-fra.rpki-client.org