Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UGulp00ZauxQus5_XCPj3xi-Wkk.roa
File: UGulp00ZauxQus5_XCPj3xi-Wkk.roa (raw, json)
Hash identifier: exnjBJxf6RzMETB+0AQBrckc91oJTFuLTIkzd6y/wmw=
Subject key identifier: 50:6B:A5:A7:4D:19:6A:EC:50:BA:CE:7F:5C:23:E3:DF:18:BE:5A:49
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206853D2345B5E51F945931FAD2EB5EC
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UGulp00ZauxQus5_XCPj3xi-Wkk.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207967
IP address blocks: 193.233.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:d2:34:5b:5e:51:f9:45:93:1f:ad:2e:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506ba5a74d196aec50bace7f5c23e3df18be5a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:a4:a5:2e:7b:96:2a:7d:50:15:26:b4:08:
04:ef:5d:95:1b:24:ca:29:26:0c:9d:6b:b2:da:26:
5d:61:f0:9d:7e:a7:b2:b2:fc:4b:fc:71:a2:8f:17:
21:b9:e7:10:cf:dc:0b:8a:df:d8:be:99:a1:87:f3:
ea:3c:9e:c0:08:36:b9:28:a5:4a:92:f9:f1:0f:90:
4a:7c:2d:e9:ec:c2:62:ca:76:f3:9a:b6:51:08:e8:
09:72:fe:0c:d7:e1:33:d0:0c:19:69:d2:b2:67:0c:
d8:46:d5:0d:c9:65:c5:90:11:4f:bb:e8:8d:f3:fa:
76:6b:fe:06:b4:80:fd:24:6c:17:51:fe:8c:a4:7f:
74:5e:c0:8d:72:5e:2d:14:36:df:27:48:06:de:47:
5e:fe:27:e8:4a:05:87:57:a1:ee:f7:6d:af:29:60:
81:83:13:b9:db:bb:1b:04:fa:db:d8:e1:93:6c:9e:
da:94:72:c2:3e:e2:05:17:ab:6a:03:9f:e8:17:37:
fd:d4:27:41:b3:e3:69:47:8f:3f:3b:13:e4:48:8f:
5d:8b:4c:28:69:14:02:8c:6b:35:5f:0d:9c:2b:f2:
8a:39:0a:21:61:4d:0b:e4:93:78:57:bc:1c:58:e2:
cd:2b:4e:12:e3:9d:a6:20:3b:96:e3:3a:1e:2b:3c:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:A5:A7:4D:19:6A:EC:50:BA:CE:7F:5C:23:E3:DF:18:BE:5A:49
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UGulp00ZauxQus5_XCPj3xi-Wkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
13:46:2a:46:07:a5:a4:51:b1:fe:51:1b:b4:63:4d:d7:0c:e6:
80:a1:d2:05:84:3d:2c:25:ce:77:ea:63:13:13:75:50:19:ed:
1f:02:8b:a2:af:2a:c2:82:01:7f:04:75:f8:df:00:1a:2e:07:
c5:b2:42:0b:87:0d:78:09:f5:63:c3:c4:d8:47:bd:1e:a9:73:
94:d5:84:0e:49:ba:c7:86:e6:ac:1b:3a:64:00:ce:4f:79:92:
0a:ba:89:c9:59:13:e7:03:54:f4:2d:a3:f3:19:52:30:0e:f6:
7d:6d:5f:e5:17:1e:ff:87:ed:6b:34:6f:61:24:8f:e6:40:cc:
a7:c8:fc:e2:ec:df:47:cd:1b:00:d2:6e:7c:f5:cb:2a:36:57:
bc:8a:ba:8e:6e:3b:0b:c6:9a:bf:21:32:9f:c8:c0:5e:67:55:
5e:57:29:2d:ae:b0:d8:ab:d5:fb:5a:53:68:97:af:b2:dd:c0:
93:ec:61:4a:7c:58:9d:57:d5:8e:81:23:2b:a6:16:e8:13:e7:
23:55:14:f1:45:7b:a5:3a:e5:b1:4d:69:e2:3d:2a:e5:60:2c:
86:6f:a6:04:37:f4:ba:fe:93:40:f7:aa:7b:7a:81:29:4d:7d:
00:78:22:24:98:66:2f:02:e8:f0:9a:a9:31:b8:58:57:17:5b:
7a:f3:64:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaFPSNFteUflFkx+tLrXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZiYTVhNzRkMTk2YWVjNTBiYWNlN2Y1YzIzZTNkZjE4YmU1YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoikpS57lip9UBUmtAgE712VGyTK
KSYMnWuy2iZdYfCdfqeysvxL/HGijxchuecQz9wLit/Yvpmhh/PqPJ7ACDa5KKVK
kvnxD5BKfC3p7MJiynbzmrZRCOgJcv4M1+Ez0AwZadKyZwzYRtUNyWXFkBFPu+iN
8/p2a/4GtID9JGwXUf6MpH90XsCNcl4tFDbfJ0gG3kde/ifoSgWHV6Hu922vKWCB
gxO527sbBPrb2OGTbJ7alHLCPuIFF6tqA5/oFzf91CdBs+NpR48/OxPkSI9di0wo
aRQCjGs1Xw2cK/KKOQohYU0L5JN4V7wcWOLNK04S452mIDuW4zoeKzzY/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBrpadNGWrsULrOf1wj498YvlpJMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvVUd1bHAwMFphdXhRdXM1X1hDUGozeGktV2trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwel0MA0G
CSqGSIb3DQEBCwUAA4IBAQATRipGB6WkUbH+URu0Y03XDOaAodIFhD0sJc536mMT
E3VQGe0fAouiryrCggF/BHX43wAaLgfFskILhw14CfVjw8TYR70eqXOU1YQOSbrH
huasGzpkAM5PeZIKuonJWRPnA1T0LaPzGVIwDvZ9bV/lFx7/h+1rNG9hJI/mQMyn
yPzi7N9HzRsA0m589csqNle8irqObjsLxpq/ITKfyMBeZ1VeVyktrrDYq9X7WlNo
l6+y3cCT7GFKfFidV9WOgSMrphboE+cjVRTxRXulOuWxTWniPSrlYCyGb6YEN/S6
/pNA96p7eoEpTX0AeCIkmGYvAujwmqkxuFhXF1t682TL
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:49 2025 by rpki-client