Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/e-U8ugCVD8sFYYJIORcC_9BMRVM.roa
File: e-U8ugCVD8sFYYJIORcC_9BMRVM.roa (raw, json)
Hash identifier: QqepOJG7iQ9bvBAioAxVCodZ/zSdK3JCgt9YzeUWWBs=
Subject key identifier: 7B:E5:3C:BA:00:95:0F:CB:05:61:82:48:39:17:02:FF:D0:4C:45:53
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 018FC9DDCF7FD4E49BB4F499FBF205C31FBC
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/e-U8ugCVD8sFYYJIORcC_9BMRVM.roa
Signing time: Thu 30 May 2024 14:18:28 +0000
ROA not before: Thu 30 May 2024 14:18:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35393
IP address blocks: 46.255.160.0/21 maxlen: 24
91.207.254.0/23 maxlen: 24
185.100.4.0/22 maxlen: 24
194.110.192.0/24 maxlen: 24
195.144.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:dd:cf:7f:d4:e4:9b:b4:f4:99:fb:f2:05:c3:1f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: May 30 14:18:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7be53cba00950fcb05618248391702ffd04c4553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:09:13:3e:a1:a9:2e:23:b8:ce:11:65:30:
e8:24:ff:d7:51:fc:b6:de:c9:87:f3:84:2b:0c:1e:
40:f9:5f:4f:7c:de:60:88:38:a1:86:cf:e4:2f:0d:
7e:db:23:50:97:88:02:84:51:12:f0:99:f0:73:4f:
4e:9c:04:8d:87:18:6a:69:d5:81:af:1d:68:0a:0f:
ca:d3:b5:1b:ef:61:2f:7b:70:d5:07:f2:24:9b:a8:
eb:3a:d3:da:c2:4c:0f:b0:da:41:c3:0f:e0:0c:cc:
5a:13:41:f2:08:fb:4b:12:ad:f6:b7:99:1e:73:f3:
74:0b:0e:b5:e3:ac:b7:1a:c0:61:18:48:41:28:ed:
ea:d4:88:c1:27:e7:a8:3a:03:c0:9c:da:90:4c:1d:
00:c4:14:11:2a:55:98:d7:e3:ce:1b:85:e0:6e:e0:
e5:ba:b4:1d:12:39:eb:19:44:ba:7e:38:53:03:39:
67:9b:d7:40:77:f4:41:2b:7d:18:30:66:99:4b:2f:
fa:df:c8:15:8e:fe:0f:59:c6:0e:67:ae:e6:67:55:
6f:16:a0:84:6d:5b:ad:95:85:d5:ff:22:61:01:a0:
a1:5c:8c:a2:cf:1a:c3:64:6f:cb:ea:a1:93:ab:dc:
74:43:e7:0b:b9:a7:8d:0d:a0:f0:7e:ef:2f:55:e2:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:3C:BA:00:95:0F:CB:05:61:82:48:39:17:02:FF:D0:4C:45:53
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/e-U8ugCVD8sFYYJIORcC_9BMRVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.160.0/21
91.207.254.0/23
185.100.4.0/22
194.110.192.0/24
195.144.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:13:1d:f3:08:78:c2:2e:c7:7d:1b:80:da:92:2e:f8:9e:2c:
ce:be:c7:9a:89:a3:03:7b:3b:d5:e7:e7:cf:cf:19:ef:e5:f4:
63:60:48:69:8b:e6:56:5e:65:c0:90:9d:f7:46:f8:9d:6b:e8:
67:d1:36:80:ed:22:1f:b2:08:94:f4:27:69:3e:86:b5:53:66:
e3:1d:45:01:9b:a8:60:8b:d0:33:4c:d7:e0:4a:c9:4b:03:4a:
ff:84:1c:34:2e:d5:e7:d8:78:32:e6:34:da:a0:5b:4e:87:9b:
a8:1a:7b:bc:e2:2d:f9:80:72:6b:84:16:79:d7:bd:fb:48:6a:
a0:e4:5d:5f:5a:33:60:4b:9f:b3:ff:ad:62:5d:66:2b:26:8b:
97:f8:35:1b:32:4b:fe:d2:30:59:1e:bd:d3:57:a0:80:6e:f6:
c2:36:ec:69:c4:c7:5c:c2:6e:60:68:f2:e5:4b:f8:93:8a:6a:
b1:d4:04:15:e3:05:b7:6d:1c:4f:a3:5f:ad:f0:34:61:5c:96:
ab:ce:14:6b:aa:06:8c:77:c0:71:5e:42:17:37:67:86:4f:18:
44:3a:96:e7:3f:00:11:c2:df:fb:b1:dd:e4:64:4c:a0:73:9a:
fa:96:68:0e:fb:9b:5a:e7:0a:c7:2f:a6:98:30:0e:a7:c7:83:
29:b3:f0:bd
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY/J3c9/1OSbtPSZ+/IFwx+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDk2MjAzNWM1ZTk1MTAxM2NhMDY3MGNhNTY5ZTc5Zjhk
NjNjMTUwHhcNMjQwNTMwMTQxODI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmU1M2NiYTAwOTUwZmNiMDU2MTgyNDgzOTE3MDJmZmQwNGM0NTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaYJEz6hqS4juM4RZTDoJP/XUfy2
3smH84QrDB5A+V9PfN5giDihhs/kLw1+2yNQl4gChFES8Jnwc09OnASNhxhqadWB
rx1oCg/K07Ub72Eve3DVB/Ikm6jrOtPawkwPsNpBww/gDMxaE0HyCPtLEq32t5ke
c/N0Cw6146y3GsBhGEhBKO3q1IjBJ+eoOgPAnNqQTB0AxBQRKlWY1+POG4XgbuDl
urQdEjnrGUS6fjhTAzlnm9dAd/RBK30YMGaZSy/638gVjv4PWcYOZ67mZ1VvFqCE
bVutlYXV/yJhAaChXIyizxrDZG/L6qGTq9x0Q+cLuaeNDaDwfu8vVeI8YQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHvlPLoAlQ/LBWGCSDkXAv/QTEVTMB8GA1UdIwQY
MBaAFNUJYgNcXpUQE8oGcMpWnnn41jwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTIt
MDU0YTM2MzExNWY1LzEvZS1VOHVnQ1ZEOHNGWVlKSU9SY0NfOUJNUlZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTItMDU0YTM2MzExNWY1
LzEvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDLv+gAwQB
W8/+AwQCuWQEAwQAwm7AAwQAw5ALMA0GCSqGSIb3DQEBCwUAA4IBAQAcEx3zCHjC
Lsd9G4Daki74nizOvseaiaMDezvV5+fPzxnv5fRjYEhpi+ZWXmXAkJ33Rvida+hn
0TaA7SIfsgiU9CdpPoa1U2bjHUUBm6hgi9AzTNfgSslLA0r/hBw0LtXn2Hgy5jTa
oFtOh5uoGnu84i35gHJrhBZ51737SGqg5F1fWjNgS5+z/61iXWYrJouX+DUbMkv+
0jBZHr3TV6CAbvbCNuxpxMdcwm5gaPLlS/iTimqx1AQV4wW3bRxPo1+t8DRhXJar
zhRrqgaMd8BxXkIXN2eGTxhEOpbnPwARwt/7sd3kZEygc5r6lmgO+5ta5wrHL6aY
MA6nx4Mps/C9
-----END CERTIFICATE-----
Generated at Sun Jun 23 02:18:00 2024 by rpki-client on console-ams.rpki-client.org