Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/UaIqyZBDjCR_4eTsSJnZIAkGYB8.roa
File: UaIqyZBDjCR_4eTsSJnZIAkGYB8.roa (raw, json)
Hash identifier: oI83x49xS2iFS64ExzsxwP/lTXAFE3oroToaxqF4odk=
Subject key identifier: 51:A2:2A:C9:90:43:8C:24:7F:E1:E4:EC:48:99:D9:20:09:06:60:1F
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018ECC61D387074A9C25F5894E22148FB370
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/UaIqyZBDjCR_4eTsSJnZIAkGYB8.roa
Signing time: Thu 11 Apr 2024 08:59:06 +0000
ROA not before: Thu 11 Apr 2024 08:59:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12683
IP address blocks: 46.45.192.0/18 maxlen: 18
46.63.128.0/17 maxlen: 17
77.39.0.0/17 maxlen: 17
82.119.128.0/19 maxlen: 19
84.54.192.0/18 maxlen: 18
85.159.32.0/21 maxlen: 21
88.215.128.0/18 maxlen: 18
94.255.0.0/17 maxlen: 17
109.168.128.0/17 maxlen: 17
212.96.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:61:d3:87:07:4a:9c:25:f5:89:4e:22:14:8f:b3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 11 08:59:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51a22ac990438c247fe1e4ec4899d9200906601f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:ec:f8:2f:66:d0:d2:2b:d6:d0:3c:f8:ea:
36:59:a9:4a:5a:ab:9b:3f:f1:8b:ed:b9:81:66:de:
6b:83:27:22:0f:56:71:2e:2c:93:54:1b:27:6e:a2:
bc:41:82:ec:94:eb:46:ce:79:62:ca:34:32:a4:1f:
ad:cc:94:43:f8:ad:bd:b5:4b:cf:7b:10:52:22:39:
78:72:4d:8a:bc:19:b3:fc:4a:55:60:8e:76:b1:88:
af:5c:bb:c5:af:86:f1:d8:f7:74:7b:ba:19:2b:ca:
fb:0c:e6:ed:18:81:1a:9a:fa:45:c2:ad:2b:a8:c1:
d4:07:8c:46:ab:47:f2:47:f1:54:c1:ef:ff:67:76:
64:1b:08:c7:47:f3:36:6b:3b:8f:88:8c:32:4c:11:
ab:47:61:ba:cc:7f:52:bb:b6:2e:1a:b6:fd:a6:98:
cf:fb:3e:77:b1:b1:f2:70:f5:ee:e4:9d:56:27:d6:
15:4e:ec:a0:b0:8c:cd:8d:63:3f:3f:33:a0:7a:2c:
be:02:13:d5:5e:8c:80:62:d3:5a:87:86:15:fa:fd:
22:b5:57:e2:54:e4:5d:36:54:34:e3:26:42:d9:2d:
da:df:63:c2:38:a4:7f:c7:99:2a:6d:79:1d:df:e3:
c2:60:ae:fc:58:89:df:fc:d2:8f:87:ab:f0:a5:b5:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A2:2A:C9:90:43:8C:24:7F:E1:E4:EC:48:99:D9:20:09:06:60:1F
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/UaIqyZBDjCR_4eTsSJnZIAkGYB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.192.0/18
46.63.128.0/17
77.39.0.0/17
82.119.128.0/19
84.54.192.0/18
85.159.32.0/21
88.215.128.0/18
94.255.0.0/17
109.168.128.0/17
212.96.96.0/19
Signature Algorithm: sha256WithRSAEncryption
88:77:d5:39:cc:74:d7:61:e3:a1:5d:b4:39:ac:d8:7c:56:3e:
c6:48:b2:8b:a4:60:1a:4c:89:0b:d6:88:56:f1:1b:dd:db:fb:
8a:36:57:ce:5f:67:d4:ba:9f:cc:7a:20:7a:f6:cc:ce:ba:89:
1d:2a:e8:d2:99:89:6e:1e:8e:93:ec:a6:76:ae:a2:e3:68:a6:
85:f6:02:ef:ea:84:82:62:da:27:10:48:c4:79:7a:f3:d2:fc:
e8:f8:8d:b7:d4:fa:6f:27:5c:f6:f2:cd:cf:0a:58:43:a7:b8:
75:a5:30:66:2e:8e:c6:3d:5a:f1:4f:92:29:f6:73:24:6b:7f:
e5:fc:fa:3c:53:c7:d4:28:d2:47:1e:cf:d7:14:35:0f:8d:74:
d8:30:30:28:7c:97:c3:d8:4b:8d:76:a0:f4:3e:81:33:08:18:
d9:73:f4:33:52:f1:85:2e:46:a5:b4:49:13:4f:eb:6f:07:f1:
0b:30:76:92:82:b7:a2:11:48:c2:b9:41:ba:92:75:8e:f8:8d:
56:72:f5:6c:2d:63:45:0a:e3:09:0e:d8:57:1a:e4:7e:4a:9d:
bc:ea:94:b4:12:2a:49:b0:2f:22:43:d5:e3:ea:d5:dc:1f:a7:
c9:c2:e9:cf:9d:1b:ee:67:3b:13:41:dd:e3:a6:2e:27:fd:71:
af:ad:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:56:01 2024 by rpki-client on console-fra.rpki-client.org