Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/UZJc-sk_LADbipk5wBIE4ZH6uJ8.roa
File: UZJc-sk_LADbipk5wBIE4ZH6uJ8.roa (raw, json)
Hash identifier: cG2v4gaGM7rI0wW9oACUwXwN1vkYPejdT/MXfH5KUVU=
Subject key identifier: 51:92:5C:FA:C9:3F:2C:00:DB:8A:99:39:C0:12:04:E1:91:FA:B8:9F
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 018CC500DD05AD73E601F5B329B5EF5B8959
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/UZJc-sk_LADbipk5wBIE4ZH6uJ8.roa
Signing time: Mon 01 Jan 2024 12:30:17 +0000
ROA not before: Mon 01 Jan 2024 12:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 193.189.142.0/24 maxlen: 24
2001:67c:2ba0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 04:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:dd:05:ad:73:e6:01:f5:b3:29:b5:ef:5b:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jan 1 12:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51925cfac93f2c00db8a9939c01204e191fab89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:3c:25:af:45:ff:24:c1:e6:a7:1c:fa:52:
a4:4c:0b:a9:b3:52:2a:1d:e0:ca:eb:c2:5c:5a:67:
7a:e0:00:cb:61:2b:1b:f8:58:5e:1a:39:09:3a:4d:
80:46:99:bc:74:81:ba:f1:ee:3f:88:c5:d9:7a:9e:
45:d8:b2:a0:ae:51:03:2d:c3:11:ce:2e:4f:de:c1:
92:5d:13:5e:94:de:63:f6:cd:37:b3:11:f4:a1:a4:
e5:7d:91:cc:39:b5:4b:a4:44:f0:76:5c:ea:79:18:
e1:6a:ec:b1:9f:65:bd:b0:87:fe:22:e3:04:b7:0b:
b0:7c:d4:24:4b:de:4e:e0:fa:b1:1a:83:3a:da:f1:
a2:ce:53:de:1d:b5:07:24:aa:f2:8e:74:7f:a4:fa:
b1:d6:93:1b:af:92:6a:cf:44:47:92:44:82:5d:f4:
d6:8b:8b:f6:d2:7d:c0:b5:83:56:9e:17:e7:9e:26:
f0:d2:91:9d:95:2b:dd:b6:2d:c8:3f:dc:ad:05:34:
8a:1b:3f:17:9c:9f:ab:4d:6a:97:0e:ef:aa:2e:3a:
f5:fa:f4:09:78:3a:0e:b0:66:43:4c:20:f9:bb:1a:
ee:88:6b:58:20:34:1b:66:78:c1:f6:2a:47:b8:da:
62:39:18:f6:a2:5f:2c:1f:03:59:c7:e5:fa:e3:89:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:92:5C:FA:C9:3F:2C:00:DB:8A:99:39:C0:12:04:E1:91:FA:B8:9F
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/UZJc-sk_LADbipk5wBIE4ZH6uJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.142.0/24
IPv6:
2001:67c:2ba0::/48
Signature Algorithm: sha256WithRSAEncryption
be:fd:ca:0d:8f:89:23:7d:cf:b6:16:37:da:e4:f4:47:89:60:
34:53:81:83:9a:d1:d7:d1:35:43:cf:dd:ab:86:e2:b3:67:79:
02:0a:89:a6:d3:8b:fc:85:24:95:c3:2c:5e:b6:72:4a:84:84:
43:fe:8b:b3:4c:5a:3c:19:fe:dc:2e:7e:a6:70:0a:68:71:e0:
91:ba:5f:6e:49:43:ce:7e:15:f4:d7:8e:c4:2a:2b:fa:07:43:
86:be:a4:33:9d:fa:b8:03:77:7f:0e:32:7f:34:73:0e:95:d7:
ab:c5:b2:5a:fc:5f:2d:55:3b:a1:ee:0a:7f:4d:e1:c2:19:41:
3e:71:6f:a4:e6:40:0a:c0:53:4c:58:cb:2a:f1:94:e9:03:27:
4e:5f:9d:77:8b:f2:16:23:1f:1c:b8:99:16:1d:12:18:b5:6d:
a6:8e:a3:09:35:9a:92:f3:d1:9c:0b:cb:c4:d4:14:2e:df:d2:
84:ab:24:71:19:09:eb:61:87:17:c8:77:6a:ba:a5:4f:a1:b3:
f0:8c:76:56:49:71:94:58:a7:78:44:91:78:3f:79:0d:d5:69:
b3:92:98:86:31:df:d8:15:9e:a8:0e:8e:5e:cd:bd:bc:b5:33:
12:96:76:43:aa:4d:31:9f:ec:36:b5:65:1e:6e:35:a3:52:d7:
80:dc:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:46:12 2024 by rpki-client on console-ams.rpki-client.org