Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/UZO-TdldA4yqzW8QY5517id3zEk.roa
File: UZO-TdldA4yqzW8QY5517id3zEk.roa (raw, json)
Hash identifier: XEjipbShP5e411Q/osgXs0IqkcVgDMli/fv9zVEsnsw=
Subject key identifier: 51:93:BE:4D:D9:5D:03:8C:AA:CD:6F:10:63:9E:75:EE:27:77:CC:49
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018CC56F0304E2808899F26D18C720DDF808
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/UZO-TdldA4yqzW8QY5517id3zEk.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 85.204.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:03:04:e2:80:88:99:f2:6d:18:c7:20:dd:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5193be4dd95d038caacd6f10639e75ee2777cc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1f:7b:d2:bc:97:f6:04:6e:86:48:42:62:96:
d1:32:2c:27:d8:2e:4f:4f:6b:db:c5:d8:c5:cc:a8:
5f:1e:7d:55:cb:f6:af:c9:f0:94:9b:ec:79:61:53:
1e:bc:1b:ed:fe:b3:a1:07:cd:c6:bd:b4:83:d7:c3:
4c:0d:8d:c0:6c:ca:d8:33:6b:2b:34:56:35:54:f7:
00:ab:6e:1f:d3:0b:6d:8c:73:c6:7b:f5:02:0e:72:
e3:28:08:75:8b:3d:b5:aa:55:2d:51:de:b1:64:0d:
2e:25:0b:f6:f8:14:60:0a:34:6b:b9:4a:c7:c7:43:
a3:3a:32:80:09:7d:dc:d4:21:43:5c:be:3c:59:3e:
6d:89:cf:5e:4e:d4:9b:87:25:a0:1d:10:f8:d2:9e:
eb:d5:02:1e:1d:79:34:61:00:1d:37:e6:3a:b0:12:
0f:f0:ca:de:66:51:f3:b0:e2:79:98:0d:71:a9:8e:
ac:fd:75:73:60:b8:fc:67:be:a6:a0:ba:fa:ad:45:
86:df:56:d0:73:5f:c1:06:6b:2d:f9:f2:95:51:37:
71:e1:fd:64:77:e8:25:ed:6b:94:58:ef:62:20:82:
04:13:b1:67:71:21:47:7e:ab:fe:4c:43:4b:8a:98:
ee:0c:0f:40:e8:ea:a6:34:10:4f:22:76:f9:0d:77:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:BE:4D:D9:5D:03:8C:AA:CD:6F:10:63:9E:75:EE:27:77:CC:49
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/UZO-TdldA4yqzW8QY5517id3zEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.160.0/22
Signature Algorithm: sha256WithRSAEncryption
03:0e:0c:d5:d4:a4:64:bb:03:d8:eb:b7:d0:26:2d:a5:97:da:
0c:35:ae:05:a5:80:a0:6d:bd:42:9b:83:0c:7e:fd:51:f7:78:
9b:be:f9:11:bf:75:e5:da:0b:1c:5f:b3:92:3d:1a:dc:c4:ba:
16:09:0d:8c:23:cd:13:f0:f7:8d:db:3b:03:4a:b6:e0:8b:41:
d3:7e:29:8d:1b:08:de:0a:63:f7:da:67:9b:3c:bf:82:06:a6:
37:3a:07:23:68:ce:89:b9:b2:a4:7f:46:22:8b:6c:6a:c7:a1:
0b:e3:71:90:f0:d8:01:f2:a5:f4:6e:09:6a:66:6e:75:8d:8f:
da:92:bb:97:c5:fc:9a:2c:f2:39:83:85:e0:cf:7f:85:3d:8a:
2a:1e:2e:f2:16:de:de:c1:45:5e:0d:d8:43:51:d0:6c:9e:af:
20:0f:4c:a0:e3:92:22:dd:3c:43:63:7f:d2:b8:eb:11:fd:17:
c5:83:79:c5:99:cf:4f:da:26:79:5a:ec:ea:75:c6:58:d9:5c:
b0:44:3f:20:a8:12:2e:6c:79:87:0e:99:f6:0b:19:0b:99:f4:
6b:a3:04:97:e8:06:cf:d1:3f:32:de:f8:f5:ca:ef:8d:cb:2d:
eb:27:8b:ed:dd:92:c5:51:23:f5:3f:c5:7a:d9:d6:6c:e1:1c:
29:e2:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 09:17:17 2024 by rpki-client on console-fra.rpki-client.org