Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/_UP4BtBozGsDCqdro39wVMb96MU.roa
File: _UP4BtBozGsDCqdro39wVMb96MU.roa (raw, json)
Hash identifier: E4Cmu4iEtbz/GzOuLieAv2qnPhktiCcfffpNPOmRoUk=
Subject key identifier: FD:43:F8:06:D0:68:CC:6B:03:0A:A7:6B:A3:7F:70:54:C6:FD:E8:C5
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 018CCA2A046C15CECF02F0BF39DBBC87FD52
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/_UP4BtBozGsDCqdro39wVMb96MU.roa
Signing time: Tue 02 Jan 2024 12:33:20 +0000
ROA not before: Tue 02 Jan 2024 12:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8758
IP address blocks: 193.247.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:04:6c:15:ce:cf:02:f0:bf:39:db:bc:87:fd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Jan 2 12:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd43f806d068cc6b030aa76ba37f7054c6fde8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:ef:98:d4:f1:93:05:30:4f:bf:cf:0b:41:
eb:89:24:46:3f:5b:53:2e:52:45:0e:69:5d:13:c4:
aa:4e:fb:d2:90:1a:e3:44:95:e4:35:6e:7d:94:08:
db:0f:dd:f3:20:8d:19:81:c2:0e:63:ae:dd:47:7b:
8c:f8:5d:47:e9:b2:40:de:ff:e6:e5:61:39:cd:64:
cd:45:e4:fe:06:0b:b4:af:66:9a:d6:34:26:ba:d6:
5e:e6:73:22:c2:94:44:f8:65:ac:4d:9f:bc:aa:6f:
88:d8:61:7f:31:b1:78:d1:76:39:aa:31:01:7b:97:
eb:b3:e3:12:7b:37:e3:f9:90:6d:4f:fd:f2:56:0b:
e9:84:d3:7d:b3:6c:73:49:e4:92:9c:36:af:b6:30:
d3:e9:26:a1:b4:d5:bb:67:0f:be:6e:25:99:8b:7f:
92:1f:66:65:3e:8e:b3:9d:e9:5d:cd:e0:82:38:78:
65:51:76:33:40:2a:a3:e6:54:46:bb:81:0a:5f:76:
9f:95:b4:3c:51:10:5c:f2:29:5a:f8:19:7e:ca:d6:
05:47:da:78:b1:32:fd:d4:c8:ab:b6:a9:fd:12:de:
8e:f2:da:e7:43:d4:96:c0:e3:e9:ff:e7:fb:f1:25:
16:00:76:07:7a:25:8c:bf:36:38:24:f4:04:7b:39:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:43:F8:06:D0:68:CC:6B:03:0A:A7:6B:A3:7F:70:54:C6:FD:E8:C5
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/_UP4BtBozGsDCqdro39wVMb96MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.148.0/23
Signature Algorithm: sha256WithRSAEncryption
57:9b:84:36:af:02:cf:61:09:f7:31:4c:aa:a4:8b:19:b3:29:
10:25:90:27:eb:89:08:eb:a3:a2:6c:4d:57:38:37:40:27:b3:
c1:cd:4e:7f:04:20:a1:c5:05:bb:9f:a1:97:63:ae:95:93:c5:
a4:96:c6:8a:c1:5e:f8:f6:5e:a6:9c:89:a9:f4:b8:97:5d:f3:
89:f4:80:ff:87:d6:76:76:14:8c:36:a0:59:96:c5:18:a0:61:
d8:78:ce:e2:66:5a:13:a1:22:61:ee:8e:8d:08:c0:c9:b0:7f:
17:a0:c8:31:2b:f1:07:2a:9f:cd:56:8d:88:92:cd:4b:5d:fb:
5c:7d:3c:c1:f8:f1:af:3c:ac:ec:42:ba:c5:0b:25:dd:ed:8f:
93:ec:30:91:6c:a5:5f:cb:85:ec:95:6e:21:ea:64:3f:64:fb:
b0:21:e2:1c:a1:a6:21:7a:d9:c4:f5:45:a3:7b:6b:f0:5f:c7:
35:54:da:3e:ae:be:5a:11:ed:04:54:07:8d:e6:21:35:7f:aa:
a5:66:5a:db:08:d4:5f:c3:13:64:b7:a1:dd:b6:a0:a7:76:3b:
75:42:c0:a2:59:c9:36:e5:a5:b6:32:57:ff:69:3f:a9:be:43:
bb:fc:81:ff:28:b3:49:d1:11:7d:b6:15:7d:af:ad:8a:6b:55:
6b:70:88:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKgRsFc7PAvC/Odu8h/1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZlNzYzZjg5YzcyMGU4N2NlNGQ3OWY4YzA5ZDA3ZjJm
YTYzOTIwHhcNMjQwMTAyMTIzMzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDQzZjgwNmQwNjhjYzZiMDMwYWE3NmJhMzdmNzA1NGM2ZmRlOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIjvmNTxkwUwT7/PC0HriSRGP1tT
LlJFDmldE8SqTvvSkBrjRJXkNW59lAjbD93zII0ZgcIOY67dR3uM+F1H6bJA3v/m
5WE5zWTNReT+Bgu0r2aa1jQmutZe5nMiwpRE+GWsTZ+8qm+I2GF/MbF40XY5qjEB
e5frs+MSezfj+ZBtT/3yVgvphNN9s2xzSeSSnDavtjDT6SahtNW7Zw++biWZi3+S
H2ZlPo6zneldzeCCOHhlUXYzQCqj5lRGu4EKX3aflbQ8URBc8ila+Bl+ytYFR9p4
sTL91Mirtqn9Et6O8trnQ9SWwOPp/+f78SUWAHYHeiWMvzY4JPQEezlICwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1D+AbQaMxrAwqna6N/cFTG/ejFMB8GA1UdIwQY
MBaAFGiW52P4nHIOh85NefjAnQfy+mOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEt
Yzg4NDBmYTg1MTQxLzEvX1VQNEJ0Qm96R3NEQ3Fkcm8zOXdWTWI5Nk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEtYzg4NDBmYTg1MTQx
LzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwfeUMA0G
CSqGSIb3DQEBCwUAA4IBAQBXm4Q2rwLPYQn3MUyqpIsZsykQJZAn64kI66OibE1X
ODdAJ7PBzU5/BCChxQW7n6GXY66Vk8WklsaKwV749l6mnImp9LiXXfOJ9ID/h9Z2
dhSMNqBZlsUYoGHYeM7iZloToSJh7o6NCMDJsH8XoMgxK/EHKp/NVo2Iks1LXftc
fTzB+PGvPKzsQrrFCyXd7Y+T7DCRbKVfy4XslW4h6mQ/ZPuwIeIcoaYhetnE9UWj
e2vwX8c1VNo+rr5aEe0EVAeN5iE1f6qlZlrbCNRfwxNkt6HdtqCndjt1QsCiWck2
5aW2Mlf/aT+pvkO7/IH/KLNJ0RF9thV9r62Ka1VrcIg2
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:05 2024 by rpki-client on console-fra.rpki-client.org