Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/Ukg9m5Byf1T5oJk2_0_APM40kA8.roa
File: Ukg9m5Byf1T5oJk2_0_APM40kA8.roa (raw, json)
Hash identifier: 8WQvGWIGQIhPoCZ91z+L2DKFaSc5q6lIs6W9IvjQgag=
Subject key identifier: 52:48:3D:9B:90:72:7F:54:F9:A0:99:36:FF:4F:C0:3C:CE:34:90:0F
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 018CC6B78845C6B8D05EDF52760B23C89C1D
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/Ukg9m5Byf1T5oJk2_0_APM40kA8.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35280
IP address blocks: 132.76.0.0/16 maxlen: 16
132.77.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:88:45:c6:b8:d0:5e:df:52:76:0b:23:c8:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52483d9b90727f54f9a09936ff4fc03cce34900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:cd:1a:03:01:11:ef:94:38:26:f6:78:24:
86:ce:23:70:0e:78:fc:ca:17:9b:03:f0:f6:8c:73:
63:7e:81:9d:ea:62:dc:d9:c0:7b:b2:6a:d7:d5:bb:
c8:0c:04:b7:3e:ad:13:7f:13:00:06:76:6e:d0:28:
f5:a9:04:8f:5d:2e:da:09:9c:6b:43:da:2e:d1:b4:
29:17:82:db:bb:31:db:c5:99:6f:4d:c1:3f:03:ba:
9b:ed:b2:5c:d2:9d:27:85:04:9a:92:79:ae:18:78:
5d:f2:61:d9:f4:f3:36:7d:d4:10:16:ea:6f:15:e9:
4d:33:e4:2a:3b:04:ad:19:a9:02:41:f7:92:02:2b:
f2:0e:ea:b1:13:cb:a9:4e:c1:1b:b1:fd:e8:32:3d:
08:93:27:f5:14:88:63:60:e2:a1:a1:c5:c9:9f:8e:
df:a0:a9:da:fc:8a:c4:d4:9a:c6:ff:4d:c2:2e:84:
c7:14:18:77:a1:cb:c4:67:6b:a2:8b:32:8e:26:c3:
8b:c7:ed:2b:b9:b7:3c:90:57:5a:0a:b0:55:8b:2c:
b7:47:62:fc:f9:5e:f2:8a:08:b8:ce:27:0b:46:8b:
65:df:73:84:71:0e:bf:9d:94:32:44:e0:0b:28:15:
74:27:ee:40:90:dc:75:bb:55:16:35:65:e1:85:8e:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:48:3D:9B:90:72:7F:54:F9:A0:99:36:FF:4F:C0:3C:CE:34:90:0F
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/Ukg9m5Byf1T5oJk2_0_APM40kA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3f:34:d0:86:d8:bd:25:24:0d:aa:c6:8f:81:5f:d3:fa:84:c8:
97:65:e5:4b:5b:fd:5d:06:76:75:db:34:5c:fc:7e:30:75:cb:
69:70:2e:bf:78:b6:0f:2d:10:f7:01:1e:1f:79:4a:27:a9:1a:
7b:18:7b:24:9a:ca:5a:d1:eb:04:93:22:fd:a2:cd:6a:c4:a2:
ac:49:ae:b9:d1:6e:fc:ff:da:c3:50:d5:44:51:03:aa:81:99:
50:84:b8:0d:7d:33:be:d8:dc:91:a1:6f:90:11:97:cd:b4:c4:
8a:f9:f7:68:e6:7d:8e:a8:ed:ee:37:c8:2f:40:43:06:ac:54:
98:c2:ee:fd:23:a9:74:d7:a9:68:46:23:d0:64:fd:62:79:5a:
61:d0:f1:8c:a0:26:e2:d2:ba:ee:34:8e:cf:19:95:12:3c:67:
d3:d9:1a:ec:cf:00:77:20:da:0c:6b:04:c1:78:86:93:c3:ba:
3c:33:c7:21:f3:3b:1b:8b:46:62:40:b2:ee:14:10:3f:7d:5b:
10:e3:f1:93:5a:15:d0:5a:de:6e:8f:18:64:69:ad:fc:71:9c:
d3:e4:f1:fa:09:83:4b:41:10:18:f4:96:8d:a3:0a:e2:1d:f3:
42:a2:c7:9d:66:90:2e:c3:93:88:a9:d3:2a:d2:8a:f3:b6:8a:
e6:e2:ea:21
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzGt4hFxrjQXt9SdgsjyJwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4
ZDM1ZmMwHhcNMjQwMTAxMjAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjQ4M2Q5YjkwNzI3ZjU0ZjlhMDk5MzZmZjRmYzAzY2NlMzQ5MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizfNGgMBEe+UOCb2eCSGziNwDnj8
yhebA/D2jHNjfoGd6mLc2cB7smrX1bvIDAS3Pq0TfxMABnZu0Cj1qQSPXS7aCZxr
Q9ou0bQpF4LbuzHbxZlvTcE/A7qb7bJc0p0nhQSaknmuGHhd8mHZ9PM2fdQQFupv
FelNM+QqOwStGakCQfeSAivyDuqxE8upTsEbsf3oMj0Ikyf1FIhjYOKhocXJn47f
oKna/IrE1JrG/03CLoTHFBh3ocvEZ2uiizKOJsOLx+0rubc8kFdaCrBViyy3R2L8
+V7yigi4zicLRotl33OEcQ6/nZQyROALKBV0J+5AkNx1u1UWNWXhhY5xaQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFJIPZuQcn9U+aCZNv9PwDzONJAPMB8GA1UdIwQY
MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt
YzQwNzNjMTNmZjdjLzEvVWtnOW01QnlmMVQ1b0prMl8wX0FQTTQwa0E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj
LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEwwDQYJ
KoZIhvcNAQELBQADggEBAD800IbYvSUkDarGj4Ff0/qEyJdl5Utb/V0GdnXbNFz8
fjB1y2lwLr94tg8tEPcBHh95SiepGnsYeySaylrR6wSTIv2izWrEoqxJrrnRbvz/
2sNQ1URRA6qBmVCEuA19M77Y3JGhb5ARl820xIr592jmfY6o7e43yC9AQwasVJjC
7v0jqXTXqWhGI9Bk/WJ5WmHQ8YygJuLSuu40js8ZlRI8Z9PZGuzPAHcg2gxrBMF4
hpPDujwzxyHzOxuLRmJAsu4UED99WxDj8ZNaFdBa3m6PGGRprfxxnNPk8foJg0tB
EBj0lo2jCuId80Kix51mkC7Dk4ip0yrSivO2iubi6iE=
-----END CERTIFICATE-----
Generated at Thu Jun 27 23:30:40 2024 by rpki-client on console-fra.rpki-client.org