Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/ULGMI-RM3DR4z11z6YdLJKGKjZo.roa
File: ULGMI-RM3DR4z11z6YdLJKGKjZo.roa (raw, json)
Hash identifier: rd9bFxelX7/mKC8/P7cntaf2OS2WtZu6nmgQPtBEdeI=
Subject key identifier: 50:B1:8C:23:E4:4C:DC:34:78:CF:5D:73:E9:87:4B:24:A1:8A:8D:9A
Certificate issuer: /CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Certificate serial: 018CC26D40D859828D169055F8B587690697
Authority key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/ULGMI-RM3DR4z11z6YdLJKGKjZo.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42511
IP address blocks: 194.143.151.0/24 maxlen: 24
194.143.150.0/24 maxlen: 24
194.143.150.0/23 maxlen: 23
109.95.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:40:d8:59:82:8d:16:90:55:f8:b5:87:69:06:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50b18c23e44cdc3478cf5d73e9874b24a18a8d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:ce:e8:e5:04:06:38:8f:0e:48:e6:dc:0f:
83:d2:cb:63:05:3c:c1:b1:b8:55:a4:c6:f2:7d:ee:
25:25:3d:7e:fb:14:52:a8:25:b5:2b:a8:4d:22:48:
12:71:bd:79:2e:4a:fe:47:f9:a3:2a:88:df:52:4b:
9c:b3:07:dc:e6:49:c1:9a:2e:c2:24:fd:ce:5d:48:
b7:a3:43:9c:0e:57:55:ab:96:52:24:15:66:8d:91:
db:25:1c:3a:5d:b2:37:20:1f:20:1c:28:a8:2b:f1:
96:e2:f4:89:16:0f:de:a5:ed:02:1f:b8:3c:b3:68:
8c:ef:36:78:f0:bb:5d:f4:24:ee:ce:ae:6e:99:bf:
ac:0a:55:8a:2f:a1:04:e0:0c:0e:e3:f5:fb:eb:01:
6a:e3:0c:87:c8:8c:8f:cd:4b:ef:e5:18:ab:31:ac:
4a:29:18:e0:45:e8:d9:5d:0d:7c:5d:09:41:b0:8f:
7f:ab:2c:44:3d:96:0c:d7:2c:b4:be:7f:85:4c:0a:
bd:30:75:a3:3b:50:99:46:94:b4:65:41:87:6b:a6:
11:56:7f:70:cc:99:29:7e:ff:4b:b2:81:e6:39:91:
f0:f7:ce:b8:ab:43:d9:82:2a:d4:cc:b6:0e:ec:a0:
7a:9d:dd:30:11:c5:52:51:e2:27:f5:8f:0e:b5:eb:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B1:8C:23:E4:4C:DC:34:78:CF:5D:73:E9:87:4B:24:A1:8A:8D:9A
X509v3 Authority Key Identifier:
keyid:6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/ULGMI-RM3DR4z11z6YdLJKGKjZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.72.0/21
194.143.150.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:6d:8c:87:73:8a:1b:df:75:01:b1:2e:41:3d:a6:d6:fe:58:
27:dc:8d:8e:29:7d:2d:a0:f5:b5:67:cd:75:bb:9a:a5:39:15:
52:86:f6:7b:e5:ca:9e:e0:ca:44:6f:97:1e:a1:82:e7:9c:75:
f2:b4:69:67:ed:51:cc:bf:73:f0:2c:96:b5:93:66:80:70:62:
a1:e6:67:a7:12:fb:11:dd:f4:30:27:39:85:05:97:72:8b:2f:
9b:49:b9:b5:26:4d:f4:1e:bd:e0:cf:a8:92:9c:b3:cf:e2:83:
f4:44:c6:19:42:df:a0:3a:ad:79:ff:cb:62:55:58:cf:b0:9d:
00:bd:6a:93:07:04:78:d0:0d:cc:c6:05:a7:51:6c:9a:68:1e:
4f:d9:38:71:ce:6b:ce:44:5c:80:a8:48:e1:3d:24:fe:2f:20:
92:4c:10:d7:04:35:ab:9d:67:52:aa:52:10:f1:49:0b:10:66:
10:e1:6d:dd:5e:dd:9c:9b:29:d2:f6:ad:13:69:34:a0:b1:df:
3d:2f:10:2d:db:74:28:40:5c:18:32:45:8f:fd:51:9f:ad:02:
16:3f:4e:67:e2:df:4a:b2:d4:ed:68:65:b2:8c:c1:b6:96:ec:
bc:95:84:b1:95:eb:36:14:62:b4:e1:bc:a8:5f:e1:3e:ea:48:
18:4a:f4:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbUDYWYKNFpBV+LWHaQaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDhhMWY0YzM4NWYzYTdiNjI5ODRkNTNlODE2NjVhOTk1
NDEwZjMwHhcNMjQwMTAxMDAyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGIxOGMyM2U0NGNkYzM0NzhjZjVkNzNlOTg3NGIyNGExOGE4ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnrO6OUEBjiPDkjm3A+D0stjBTzB
sbhVpMbyfe4lJT1++xRSqCW1K6hNIkgScb15Lkr+R/mjKojfUkucswfc5knBmi7C
JP3OXUi3o0OcDldVq5ZSJBVmjZHbJRw6XbI3IB8gHCioK/GW4vSJFg/epe0CH7g8
s2iM7zZ48Ltd9CTuzq5umb+sClWKL6EE4AwO4/X76wFq4wyHyIyPzUvv5RirMaxK
KRjgRejZXQ18XQlBsI9/qyxEPZYM1yy0vn+FTAq9MHWjO1CZRpS0ZUGHa6YRVn9w
zJkpfv9LsoHmOZHw9864q0PZgirUzLYO7KB6nd0wEcVSUeIn9Y8OteuSwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFCxjCPkTNw0eM9dc+mHSyShio2aMB8GA1UdIwQY
MBaAFG0IofTDhfOntimE1T6BZlqZVBDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFpaDlNT0Y4NmUyS1lUVlBvRm1XcGxVRVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMDc0NjctNTZhMS00OGM1LWFkZDEt
NDNhODUyNmQ4MmJiLzEvVUxHTUktUk0zRFI0ejExejZZZExKS0dLalpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMDc0NjctNTZhMS00OGM1LWFkZDEtNDNhODUyNmQ4MmJi
LzEvYlFpaDlNT0Y4NmUyS1lUVlBvRm1XcGxVRVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbV9IAwQB
wo+WMA0GCSqGSIb3DQEBCwUAA4IBAQAvbYyHc4ob33UBsS5BPabW/lgn3I2OKX0t
oPW1Z811u5qlORVShvZ75cqe4MpEb5ceoYLnnHXytGln7VHMv3PwLJa1k2aAcGKh
5menEvsR3fQwJzmFBZdyiy+bSbm1Jk30Hr3gz6iSnLPP4oP0RMYZQt+gOq15/8ti
VVjPsJ0AvWqTBwR40A3MxgWnUWyaaB5P2ThxzmvORFyAqEjhPST+LyCSTBDXBDWr
nWdSqlIQ8UkLEGYQ4W3dXt2cmynS9q0TaTSgsd89LxAt23QoQFwYMkWP/VGfrQIW
P05n4t9KstTtaGWyjMG2luy8lYSxles2FGK04byoX+E+6kgYSvSg
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:05:27 2024 by rpki-client on console-ams.rpki-client.org