Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/uZstnaQUsCZZy1nfHkm3WZqbtKQ.roa
File: uZstnaQUsCZZy1nfHkm3WZqbtKQ.roa (raw, json)
Hash identifier: QfAnFd5MxXtSnlEb6oiugus3VBcD+gEDCvIQlnqWDNY=
Subject key identifier: B9:9B:2D:9D:A4:14:B0:26:59:CB:59:DF:1E:49:B7:59:9A:9B:B4:A4
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 018CC500548175450A889F3F4FCE8C779994
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/uZstnaQUsCZZy1nfHkm3WZqbtKQ.roa
Signing time: Mon 01 Jan 2024 12:29:42 +0000
ROA not before: Mon 01 Jan 2024 12:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49969
IP address blocks: 195.211.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 12:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:54:81:75:45:0a:88:9f:3f:4f:ce:8c:77:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 1 12:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b99b2d9da414b02659cb59df1e49b7599a9bb4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c7:58:88:ca:38:bc:b5:a1:29:d1:af:0a:83:
6a:54:8d:94:a9:47:ed:3e:98:e1:95:ef:19:43:59:
cf:5c:30:28:5a:99:ff:8d:97:88:a5:45:96:f1:02:
ef:45:a5:5f:e2:76:ee:cd:ae:59:6a:42:a9:67:10:
4f:f7:cc:46:21:82:e1:3d:15:06:65:7f:91:59:a4:
8f:04:1e:26:c2:37:92:1d:49:48:a6:1f:11:13:4a:
d2:d2:46:44:fb:72:ac:35:cb:11:77:23:66:46:bb:
f8:66:d5:b8:ca:f9:58:ba:04:80:cd:33:c0:5f:d7:
a0:d2:4c:a2:95:06:87:db:d9:79:2b:04:3b:4d:c9:
e6:69:36:4c:89:82:fb:d6:cb:ad:45:42:77:ea:46:
fe:df:9f:c2:7e:67:19:32:bc:60:63:6c:ae:ba:4e:
fd:56:f6:d6:e2:5f:f1:86:01:e1:7f:d7:1e:de:a5:
03:29:09:71:f6:38:45:80:5f:a3:bc:2d:d0:8d:c4:
48:9f:6e:5b:09:d6:a8:16:82:34:60:c6:3e:31:68:
a7:10:3a:d8:18:b1:75:be:27:83:b7:7a:88:7a:4d:
74:95:76:40:df:d8:03:39:de:09:c5:51:ba:32:81:
06:ac:89:73:42:54:c6:98:93:a5:ea:fc:9b:ff:81:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9B:2D:9D:A4:14:B0:26:59:CB:59:DF:1E:49:B7:59:9A:9B:B4:A4
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/uZstnaQUsCZZy1nfHkm3WZqbtKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.132.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:94:2a:37:a8:72:b5:52:8a:01:55:24:50:4d:f5:38:7d:c8:
a6:8b:be:7b:4c:cd:eb:e4:ea:f4:19:f8:3b:ec:9a:05:33:3a:
4a:c4:c9:70:4c:07:0d:25:e1:99:3c:56:20:d1:b6:55:ae:c3:
80:dc:64:75:f7:40:9d:1f:08:bb:d5:4e:f7:11:cf:ac:68:ee:
d4:25:be:f3:10:0f:98:f7:dd:be:90:78:fc:71:17:24:99:39:
bc:19:7a:6d:8a:67:3d:40:f7:b0:b8:2a:47:9b:36:31:dd:89:
bf:70:36:49:65:71:d7:f5:b3:24:73:8f:fc:cb:87:f8:bc:ef:
3f:69:56:b9:75:fb:cf:b6:8c:88:32:a6:10:7f:03:a0:f6:f8:
cb:d5:f8:18:58:b3:22:ea:89:34:b7:c9:f9:4d:82:72:7d:7f:
03:c7:64:0e:93:c9:ba:c7:8e:e4:b9:80:40:8b:08:f1:2c:e0:
a3:d4:21:e2:e7:4f:2b:05:b4:3d:7a:ba:de:2e:9c:85:00:09:
00:1b:0d:a8:68:ff:75:79:4c:c7:64:37:d1:bc:0e:75:70:8a:
a1:fd:70:74:57:a3:59:8f:6f:b5:17:75:51:18:2d:5b:1d:f3:
c2:a4:95:05:1d:ad:5e:1a:17:9f:8e:1d:92:b3:2e:a3:be:93:
4b:21:37:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAFSBdUUKiJ8/T86Md5mUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh
NWQ0ZjgwHhcNMjQwMTAxMTIyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTliMmQ5ZGE0MTRiMDI2NTljYjU5ZGYxZTQ5Yjc1OTlhOWJiNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cdYiMo4vLWhKdGvCoNqVI2UqUft
Ppjhle8ZQ1nPXDAoWpn/jZeIpUWW8QLvRaVf4nbuza5ZakKpZxBP98xGIYLhPRUG
ZX+RWaSPBB4mwjeSHUlIph8RE0rS0kZE+3KsNcsRdyNmRrv4ZtW4yvlYugSAzTPA
X9eg0kyilQaH29l5KwQ7TcnmaTZMiYL71sutRUJ36kb+35/CfmcZMrxgY2yuuk79
VvbW4l/xhgHhf9ce3qUDKQlx9jhFgF+jvC3QjcRIn25bCdaoFoI0YMY+MWinEDrY
GLF1vieDt3qIek10lXZA39gDOd4JxVG6MoEGrIlzQlTGmJOl6vyb/4GZRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmbLZ2kFLAmWctZ3x5Jt1mam7SkMB8GA1UdIwQY
MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt
MjFjZjU2Y2JjZTEyLzEvdVpzdG5hUVVzQ1paeTFuZkhrbTNXWnFidEtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy
LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9OEMA0G
CSqGSIb3DQEBCwUAA4IBAQDTlCo3qHK1UooBVSRQTfU4fcimi757TM3r5Or0Gfg7
7JoFMzpKxMlwTAcNJeGZPFYg0bZVrsOA3GR190CdHwi71U73Ec+saO7UJb7zEA+Y
992+kHj8cRckmTm8GXptimc9QPewuCpHmzYx3Ym/cDZJZXHX9bMkc4/8y4f4vO8/
aVa5dfvPtoyIMqYQfwOg9vjL1fgYWLMi6ok0t8n5TYJyfX8Dx2QOk8m6x47kuYBA
iwjxLOCj1CHi508rBbQ9erreLpyFAAkAGw2oaP91eUzHZDfRvA51cIqh/XB0V6NZ
j2+1F3VRGC1bHfPCpJUFHa1eGhefjh2Ssy6jvpNLITcw
-----END CERTIFICATE-----
Generated at Sun Jun 30 17:57:21 2024 by rpki-client on console-ams.rpki-client.org