Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/UVNBga0p1m8plkBSZV-fZC1YO84.roa
File: UVNBga0p1m8plkBSZV-fZC1YO84.roa (raw, json)
Hash identifier: hALCxt89PTVzKtHaqB/10tjrIepRL8adYR8OUgvnBCY=
Subject key identifier: 51:53:41:81:AD:29:D6:6F:29:96:40:52:65:5F:9F:64:2D:58:3B:CE
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 018CC64B7F67EE1EFE240EE73010765FAFE5
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/UVNBga0p1m8plkBSZV-fZC1YO84.roa
Signing time: Mon 01 Jan 2024 18:31:25 +0000
ROA not before: Mon 01 Jan 2024 18:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.225.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7f:67:ee:1e:fe:24:0e:e7:30:10:76:5f:af:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51534181ad29d66f29964052655f9f642d583bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:d5:ed:ac:17:3a:a0:ec:e7:27:52:4f:cf:
11:b4:99:0b:74:fc:aa:09:10:67:60:5e:b5:0d:83:
4a:bd:85:ad:9c:25:cf:96:bf:4f:dc:27:0b:f5:bd:
fa:6b:36:d1:81:08:42:93:91:a2:ea:97:28:3f:f1:
2f:3d:33:33:f6:ac:36:fb:f8:76:00:27:18:31:6e:
80:84:14:8e:a2:aa:64:d0:07:da:9d:1d:88:ca:1e:
c7:95:3e:f9:bb:fb:1c:67:9c:82:bf:76:06:47:88:
01:a0:41:bc:55:6d:55:57:27:27:09:43:ae:d6:d1:
cb:c0:4c:ce:f1:25:aa:bd:f6:0a:86:9e:9a:b3:61:
72:cc:30:5e:09:e6:91:3b:53:fa:6a:6f:9e:51:90:
43:ae:ac:35:d8:89:ba:b4:b6:f0:d1:1d:c9:dd:f9:
7e:b2:c1:ed:da:90:cf:8d:29:08:84:b2:5c:c8:46:
e9:d8:0b:a0:84:18:e2:25:e2:d8:bd:b9:39:35:0a:
9d:36:8c:60:1c:5b:87:4f:8f:e6:98:c9:d4:69:06:
cf:0c:bd:4c:c5:22:ff:f8:79:c8:5b:bc:19:4c:9f:
0b:9b:49:b0:d8:20:e4:25:f5:22:2f:1e:22:5f:c3:
55:5c:f9:1d:40:a7:e9:2e:1a:f6:2f:a3:47:a1:b1:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:41:81:AD:29:D6:6F:29:96:40:52:65:5F:9F:64:2D:58:3B:CE
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/UVNBga0p1m8plkBSZV-fZC1YO84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.252.0/22
Signature Algorithm: sha256WithRSAEncryption
44:e2:26:6b:94:a6:d6:01:28:18:81:a7:06:83:4d:e5:bf:b8:
81:79:34:14:d8:de:81:14:fd:c0:fb:be:e9:65:ad:b7:5b:8f:
4f:8b:be:2a:0a:f8:64:fa:1a:b1:14:57:a1:68:e9:31:69:cf:
97:c0:8c:b8:4c:42:e1:cd:51:a7:f3:e3:85:3f:10:17:e4:2e:
c4:3b:3e:09:21:87:3a:6c:53:04:76:c1:66:54:3e:19:d6:db:
04:8d:0a:9b:b1:6d:37:6e:98:77:5f:dc:15:14:c2:6f:f6:ea:
0d:6e:fd:fd:41:44:24:7e:d1:8c:f9:e6:e1:8b:67:a0:ee:9f:
42:41:b1:8b:5c:c3:18:be:62:11:4f:23:9a:f1:a2:fc:bc:e4:
8d:1c:f5:cc:17:e5:4b:c6:e4:6a:98:9d:9d:27:61:c8:05:2b:
25:6f:c8:45:f6:d9:f1:24:37:d9:b6:81:4b:e0:d2:24:a8:2b:
5d:67:0d:f6:87:fd:12:ad:5d:8f:f0:ac:10:cc:c7:51:6a:83:
da:04:01:53:7b:ec:73:12:63:be:2e:96:06:62:09:e8:80:af:
3d:d5:8d:e4:22:f4:82:17:44:ce:87:0d:5a:37:4e:0b:80:8f:
53:51:2d:1e:79:ae:51:32:11:6f:a4:fc:c4:6c:1e:c9:7e:bf:
b3:4f:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:37:43 2024 by rpki-client on console-ams.rpki-client.org