Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uqruk2FzjzPsaLERAFs3cLh6Ehs.roa
File: uqruk2FzjzPsaLERAFs3cLh6Ehs.roa (raw, json)
Hash identifier: 9aEbW32YKgVR7dTxnK1FLc3TH2pMXWfW0TUDUQ+FVzs=
Subject key identifier: BA:AA:EE:93:61:73:8F:33:EC:68:B1:11:00:5B:37:70:B8:7A:12:1B
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6AC57790AFD48955DAA6E16EBB5F0
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uqruk2FzjzPsaLERAFs3cLh6Ehs.roa
Signing time: Mon 01 Jan 2024 06:29:37 +0000
ROA not before: Mon 01 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 2a04:9a04::/32 maxlen: 48
2a07:3506:4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ac:57:79:0a:fd:48:95:5d:aa:6e:16:eb:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baaaee9361738f33ec68b111005b3770b87a121b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:49:83:d8:13:54:bb:c2:22:e8:40:e8:32:
f6:58:df:d8:91:e6:b9:49:54:5c:cf:41:7f:d1:f4:
6e:6c:b2:54:29:c3:18:d3:81:51:91:41:d5:dd:aa:
0a:c3:52:9d:55:2b:ed:d5:17:f1:e7:17:5c:e8:d7:
84:69:43:3d:26:b6:b6:14:ba:fe:a5:1d:7a:f2:b5:
e1:01:d4:6a:7d:0f:d7:15:f6:c1:8d:ad:6b:c4:59:
ec:8b:91:d8:c8:66:cc:bd:33:a8:1d:2f:f1:43:4f:
e3:ec:a5:e0:fe:66:bc:c8:63:f6:7f:9a:4f:b9:4b:
4c:dd:2c:77:50:6c:46:ea:f4:22:4e:e6:fc:6a:58:
17:96:bb:1d:5b:d0:d8:a2:9e:57:26:d2:ac:4a:84:
2e:6a:c4:a2:87:e4:ca:a9:fb:8c:f6:25:5c:92:7c:
2b:5a:67:00:d5:b5:91:6f:99:ae:1c:ab:d3:a5:66:
49:d0:e8:26:c9:4b:a5:95:b5:11:19:01:84:e2:ae:
1e:8e:f0:0b:b4:ef:bc:a3:38:e9:0a:52:19:46:78:
a8:db:2a:5b:ba:62:65:81:88:48:41:66:f5:0b:bb:
c6:35:9f:18:a8:3d:0a:61:2e:43:68:34:b2:ef:85:
8d:28:e9:61:fe:1b:b1:45:2c:8e:84:6d:a0:65:2c:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:EE:93:61:73:8F:33:EC:68:B1:11:00:5B:37:70:B8:7A:12:1B
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uqruk2FzjzPsaLERAFs3cLh6Ehs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a04::/32
2a07:3506:4c::/48
Signature Algorithm: sha256WithRSAEncryption
c1:58:8f:1a:8e:8a:16:f2:6e:ef:06:42:08:10:a3:fd:26:cd:
c2:7d:de:96:03:dc:76:46:41:42:72:19:34:83:db:46:61:24:
01:1c:e4:47:44:60:81:fe:bd:e9:e9:be:76:03:d7:0c:ec:30:
d2:24:b3:4b:5b:3e:97:1b:de:63:9d:59:6c:cb:f2:47:49:f2:
7d:75:ce:23:39:1b:9c:26:f6:84:fa:4b:33:0a:b2:35:cb:73:
81:18:d6:9d:89:58:4e:58:41:ca:45:53:2e:b7:28:03:5d:43:
3e:17:7c:60:85:b9:c7:76:8a:85:f9:56:11:16:97:d6:05:7d:
a6:fb:0e:b4:a4:bf:76:4a:35:8b:fa:42:e6:80:3e:71:73:75:
2b:8c:15:e2:6b:b1:bc:67:ee:0f:9b:b5:0c:93:0f:71:b9:1d:
4d:9f:e2:33:05:1b:ee:29:6e:46:1d:69:ef:e6:bc:f1:85:c7:
22:73:96:20:d1:24:ec:9f:82:81:7a:b3:f3:dd:57:5b:b7:57:
05:6a:10:3d:55:c3:7b:ab:2e:60:9c:b6:0f:4d:ae:26:2a:6c:
07:26:50:32:17:6b:44:c7:d6:50:d8:d1:db:91:61:2d:fd:e1:
b7:60:48:07:ef:d9:1e:05:ae:cb:64:ea:e6:85:6e:6f:f1:e6:
62:86:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:16:22 2024 by rpki-client on console-fra.rpki-client.org