Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/UUW5wr4yQCSoPbyI4IyrBATALlA.roa
File: UUW5wr4yQCSoPbyI4IyrBATALlA.roa (raw, json)
Hash identifier: J+WAkMATUrs7vTEIoGvY51qwaUeWS/LgpRbagWNfdyQ=
Subject key identifier: 51:45:B9:C2:BE:32:40:24:A8:3D:BC:88:E0:8C:AB:04:04:C0:2E:50
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F4FF30381011E9C6D190193CCFA5FD3CB
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/UUW5wr4yQCSoPbyI4IyrBATALlA.roa
Signing time: Mon 06 May 2024 22:07:57 +0000
ROA not before: Mon 06 May 2024 22:07:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41483
IP address blocks: 89.254.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:f3:03:81:01:1e:9c:6d:19:01:93:cc:fa:5f:d3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 6 22:07:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5145b9c2be324024a83dbc88e08cab0404c02e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:be:3d:d5:1a:a3:a8:1a:ef:9e:4d:9e:5b:
ec:80:ab:78:50:30:8c:1f:9b:f6:d2:59:2a:74:ec:
66:78:2b:f6:dd:98:6e:6a:c8:b5:21:fa:06:8e:0f:
b4:a5:db:1d:3b:5c:52:2e:23:37:58:7d:38:c6:e5:
fe:4d:2c:c7:06:bf:ef:b8:22:47:8b:e1:0e:91:bc:
a8:03:46:60:a2:79:1b:49:40:e0:12:98:0c:b0:af:
10:0d:e4:9b:87:a5:86:92:e3:12:4a:16:07:39:d1:
fe:4f:28:d4:ec:5a:bc:7c:e1:f0:ef:5a:51:81:cf:
8f:37:19:7d:29:73:af:4a:ca:c0:3b:99:8d:7c:eb:
ec:80:8c:2c:46:69:36:6f:05:b8:59:9f:61:9e:e0:
6f:1e:53:cf:d1:52:57:0a:c0:e0:94:c0:fa:49:35:
86:19:8e:21:0e:fe:60:b4:b1:d8:32:03:b8:84:52:
a3:85:3c:75:21:eb:67:a0:07:3b:3a:5f:ec:68:e0:
b8:15:6c:37:56:ea:79:8b:1d:de:7d:53:78:f3:2e:
85:c0:c0:3b:45:0d:11:4d:29:02:77:86:5c:fa:b7:
d1:0f:4b:f3:37:4e:a9:3e:e0:b2:ab:2d:b2:b1:ee:
b4:da:9a:64:ed:1a:f4:fb:c4:95:82:33:8b:80:a9:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:45:B9:C2:BE:32:40:24:A8:3D:BC:88:E0:8C:AB:04:04:C0:2E:50
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/UUW5wr4yQCSoPbyI4IyrBATALlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:b1:83:b0:e8:1e:e8:ce:a1:2f:a0:0c:77:9b:97:a6:5e:28:
8d:29:bf:b3:f9:c0:14:40:cd:a0:3c:5e:0c:84:85:3b:fb:8e:
df:bd:1e:15:95:8d:7e:3d:70:46:19:1d:23:d1:24:aa:a4:1f:
23:d4:13:6f:56:04:de:eb:d0:a0:37:26:3b:89:69:b1:3d:95:
c4:02:da:dc:3f:9c:b0:34:3a:72:ad:c8:92:59:fc:38:83:95:
74:97:68:d0:f1:f7:3a:33:ae:d2:8e:6c:71:44:02:d7:11:21:
26:1b:4c:f3:ee:4d:72:7d:d3:c3:a5:e3:96:a5:c4:8b:84:57:
02:5e:1b:68:bd:d0:bf:23:8c:71:a2:33:da:0f:07:6b:d8:39:
44:3b:a6:7c:55:e6:49:88:ec:43:14:ea:d0:07:2b:36:a9:2b:
2d:3b:73:95:91:92:61:f2:49:6f:2f:90:c6:7a:a1:d5:36:06:
94:ec:11:19:37:76:d0:9e:c3:b1:45:f8:9b:6c:29:4a:e4:b6:
d2:4e:d0:ec:e3:79:d4:00:b0:4b:23:cb:c8:f9:c6:c2:85:d7:
c6:53:13:2e:d4:cd:1a:34:af:ba:15:e3:eb:09:bd:3b:35:d1:
0c:4b:64:64:77:b9:81:bb:e2:a3:f6:08:5d:66:2b:60:ba:71:
2b:32:0a:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9P8wOBAR6cbRkBk8z6X9PLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0
Y2Y0NTYwHhcNMjQwNTA2MjIwNzU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTQ1YjljMmJlMzI0MDI0YTgzZGJjODhlMDhjYWIwNDA0YzAyZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPC+PdUao6ga755NnlvsgKt4UDCM
H5v20lkqdOxmeCv23Zhuasi1IfoGjg+0pdsdO1xSLiM3WH04xuX+TSzHBr/vuCJH
i+EOkbyoA0ZgonkbSUDgEpgMsK8QDeSbh6WGkuMSShYHOdH+TyjU7Fq8fOHw71pR
gc+PNxl9KXOvSsrAO5mNfOvsgIwsRmk2bwW4WZ9hnuBvHlPP0VJXCsDglMD6STWG
GY4hDv5gtLHYMgO4hFKjhTx1IetnoAc7Ol/saOC4FWw3Vup5ix3efVN48y6FwMA7
RQ0RTSkCd4Zc+rfRD0vzN06pPuCyqy2yse602ppk7Rr0+8SVgjOLgKnGJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFFFucK+MkAkqD28iOCMqwQEwC5QMB8GA1UdIwQY
MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt
YjlmMjk4YTc5OGU0LzEvVVVXNXdyNHlRQ1NvUGJ5STRJeXJCQVRBTGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0
LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGWf5AMA0G
CSqGSIb3DQEBCwUAA4IBAQB7sYOw6B7ozqEvoAx3m5emXiiNKb+z+cAUQM2gPF4M
hIU7+47fvR4VlY1+PXBGGR0j0SSqpB8j1BNvVgTe69CgNyY7iWmxPZXEAtrcP5yw
NDpyrciSWfw4g5V0l2jQ8fc6M67SjmxxRALXESEmG0zz7k1yfdPDpeOWpcSLhFcC
XhtovdC/I4xxojPaDwdr2DlEO6Z8VeZJiOxDFOrQBys2qSstO3OVkZJh8klvL5DG
eqHVNgaU7BEZN3bQnsOxRfibbClK5LbSTtDs43nUALBLI8vI+cbChdfGUxMu1M0a
NK+6FePrCb07NdEMS2Rkd7mBu+Kj9ghdZitgunErMgr/
-----END CERTIFICATE-----
Generated at Sat Jun 8 09:21:24 2024 by rpki-client on console-fra.rpki-client.org