Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/uAE3-yrNC6m5_svUnINPSI5DN2s.roa
File: uAE3-yrNC6m5_svUnINPSI5DN2s.roa (raw, json)
Hash identifier: QBSxCtUOgk1Y1t+H//Id4JVlRSRRhJf6Yg/WtSZys+w=
Subject key identifier: B8:01:37:FB:2A:CD:0B:A9:B9:FE:CB:D4:9C:83:4F:48:8E:43:37:6B
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 018CCA2A988997BABD368497032818970E9F
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/uAE3-yrNC6m5_svUnINPSI5DN2s.roa
Signing time: Tue 02 Jan 2024 12:33:58 +0000
ROA not before: Tue 02 Jan 2024 12:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29276
IP address blocks: 213.229.248.0/21 maxlen: 21
95.159.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:98:89:97:ba:bd:36:84:97:03:28:18:97:0e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 2 12:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b80137fb2acd0ba9b9fecbd49c834f488e43376b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:db:6f:42:8c:d0:54:71:a6:8f:15:e5:4f:
89:98:5b:bd:ca:e3:c1:01:31:76:29:12:82:95:f6:
2b:45:dc:5d:99:a1:34:c5:c6:4d:64:55:e5:28:66:
71:10:5f:87:c8:90:78:aa:2d:be:bd:7a:11:12:16:
05:30:1f:fa:71:7b:be:c3:89:d7:f9:b5:9d:0d:b8:
7d:7b:40:cc:44:0a:90:36:fd:f0:71:6d:0f:27:a4:
de:fd:43:05:d8:f6:90:86:56:df:f3:93:d0:72:02:
23:8d:7d:81:e6:de:76:a6:58:7d:f7:f2:09:12:d2:
5e:30:cb:e4:6a:b9:2e:55:68:2d:a5:58:a4:ba:b7:
54:50:1d:9e:a4:3f:9e:13:93:0f:3a:f2:ae:9c:e8:
4e:6d:fb:9c:72:16:28:3d:b9:49:23:49:7d:e9:49:
e7:0f:86:fb:12:63:38:a9:34:2b:30:37:06:7b:22:
69:1e:17:66:05:2e:ba:15:43:68:60:77:06:a8:2a:
d8:e1:57:ed:64:0b:03:f6:33:34:f0:c6:bd:86:54:
ff:f5:ec:7e:56:10:bb:5e:07:63:4d:8d:08:ee:1f:
82:c3:8a:c2:e8:26:bb:92:68:95:42:52:ba:34:61:
d6:89:b3:8a:bf:c2:b0:5c:75:f2:ab:58:84:4d:df:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:37:FB:2A:CD:0B:A9:B9:FE:CB:D4:9C:83:4F:48:8E:43:37:6B
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/uAE3-yrNC6m5_svUnINPSI5DN2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.159.192.0/24
213.229.248.0/21
Signature Algorithm: sha256WithRSAEncryption
20:42:46:97:dd:82:71:9c:15:21:f7:e1:e2:01:ea:9a:d3:a0:
7a:97:61:18:a1:89:5f:90:e3:69:2f:49:11:4a:87:9a:3b:ca:
3a:90:5e:ac:32:fb:a9:72:2f:5e:f6:7b:a9:60:93:52:93:2a:
d3:5b:c9:35:7b:e4:91:3b:96:fb:c7:0a:82:7b:75:2f:b4:c0:
30:93:43:74:88:1b:ef:fa:9a:22:af:4c:d5:f3:15:89:b3:32:
28:f9:3a:8a:8a:ff:75:21:31:4e:00:5e:8d:b7:3a:8b:c7:21:
8d:56:b8:e1:a6:e3:3d:5f:cc:d3:a5:d1:0a:67:06:b8:54:4c:
2b:90:cc:78:44:a9:ad:ee:a0:c5:1a:60:b8:37:f7:c3:45:ef:
01:cf:33:c5:ed:be:67:79:00:b4:ed:0e:81:df:8e:9a:2c:79:
02:5f:83:06:ef:29:28:54:60:e2:0b:e0:aa:69:93:98:ba:4b:
93:09:69:b3:1c:01:f8:33:bf:ae:89:a7:cf:4a:78:ed:34:9d:
62:0a:23:c5:ca:bc:b6:12:8e:1b:cc:91:d4:d4:06:a6:c1:35:
ee:64:40:e4:02:35:94:eb:61:b9:ff:d6:43:93:fd:7f:53:44:
1f:30:e9:be:c9:e0:22:44:d9:e8:48:a4:a4:9b:74:81:c7:a9:
cd:c1:22:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:31:58 2024 by rpki-client on console-ams.rpki-client.org