Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/uBZhGaEapPBSHbC0GQUYq8Yd13A.roa
File: uBZhGaEapPBSHbC0GQUYq8Yd13A.roa (raw, json)
Hash identifier: TZY7LdaBCTZmxUEpnY5CD6bGQ24ExUbdE7SrdmrWM4g=
Subject key identifier: B8:16:61:19:A1:1A:A4:F0:52:1D:B0:B4:19:05:18:AB:C6:1D:D7:70
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 0191635B708ADD1FD6520CBB55D8A0FF1F85
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/uBZhGaEapPBSHbC0GQUYq8Yd13A.roa
Signing time: Sun 18 Aug 2024 02:40:22 +0000
ROA not before: Sun 18 Aug 2024 02:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205209
IP address blocks: 141.226.250.0/23 maxlen: 23
141.226.250.0/24 maxlen: 24
185.223.0.0/22 maxlen: 22
2a0d:2800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:63:5b:70:8a:dd:1f:d6:52:0c:bb:55:d8:a0:ff:1f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Aug 18 02:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8166119a11aa4f0521db0b4190518abc61dd770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:7b:d0:d6:04:30:d7:a5:d4:10:4a:f7:fe:
86:18:a7:07:e9:26:20:04:18:f1:ff:b1:da:5f:37:
55:91:2c:0e:aa:4f:b5:11:a3:39:98:f9:58:1c:7f:
0b:12:b4:53:6b:8e:a8:18:9f:e7:bb:02:22:70:c0:
7e:55:c9:cc:27:e6:b7:b0:d5:5a:1f:67:ee:d8:ae:
b7:1a:40:55:8e:e7:11:f6:5d:95:70:af:da:f1:9c:
14:f5:37:0e:4d:5d:1d:b9:74:86:ef:4c:70:f7:c1:
dd:de:cd:2a:71:59:e0:de:ef:e1:63:ea:9e:4f:f2:
c0:eb:e7:81:bd:b4:9e:4d:11:87:b1:a6:d3:6b:94:
22:af:4b:bb:63:41:06:fd:af:23:5b:fd:1b:8a:8c:
29:87:c7:9e:59:49:10:e3:7d:f1:a0:7a:f4:48:af:
b3:90:65:6b:a8:ff:d4:fc:f8:67:c3:c5:c1:00:be:
ee:a5:30:64:80:24:3c:2c:8c:4e:94:bb:4e:c8:9a:
74:36:5d:e0:34:3e:94:af:1e:d2:0a:d9:20:79:4d:
7c:51:ad:2b:b6:23:37:05:ed:c9:f8:fb:ba:d8:0e:
15:43:47:ad:93:db:b3:ec:c8:b1:21:d7:6a:5f:d2:
40:98:bf:a7:ee:64:b3:a5:73:fd:9c:cb:2c:ed:e3:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:61:19:A1:1A:A4:F0:52:1D:B0:B4:19:05:18:AB:C6:1D:D7:70
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/uBZhGaEapPBSHbC0GQUYq8Yd13A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.250.0/23
185.223.0.0/22
IPv6:
2a0d:2800::/29
Signature Algorithm: sha256WithRSAEncryption
50:ad:a9:fc:5c:c7:dc:16:29:d3:1a:e0:fc:c1:6b:6f:f6:68:
7a:75:bb:57:60:99:f4:66:8c:85:86:ad:93:51:d6:0e:9c:5a:
db:16:6d:02:3b:25:e5:23:dc:0c:46:d3:21:6c:bc:fd:c5:41:
52:6f:18:a3:05:90:b5:56:e8:52:9a:ae:63:04:2f:a4:b5:d4:
a5:63:9d:94:2b:eb:d4:c5:c2:72:fe:8f:95:a6:8d:eb:8b:53:
1f:16:05:ff:65:4b:ac:ca:c8:a1:be:5a:01:e6:47:13:0f:ca:
6d:58:cb:10:af:50:39:5e:83:69:ab:4f:71:31:b6:d7:0b:38:
fd:78:b6:1b:ff:92:4d:e4:38:12:eb:72:8d:7a:c5:38:21:cf:
90:22:71:93:4b:dc:a4:9c:2f:17:6a:bb:2f:4c:ee:02:ff:35:
fd:6f:ac:cc:08:e0:8e:c5:f7:0c:a0:55:fb:05:98:3a:90:58:
47:5e:a3:f7:ef:52:5c:9d:bb:9f:19:97:9f:e9:61:0e:0d:53:
6a:65:de:23:ea:98:c2:fe:67:d6:17:87:c3:fe:63:8e:e3:a9:
b5:16:10:44:96:90:94:1c:98:68:e8:97:db:3c:5d:f9:13:9a:
f8:c2:a0:e9:78:b6:7f:91:96:ba:6b:a4:91:fe:be:b5:2a:62:
ca:da:5c:1d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZFjW3CK3R/WUgy7Vdig/x+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTc1NTMyOTJhZjU5NTQyNmVlMWQ3ZGM5MTlhMjEwNDg5
NDc1MmIwHhcNMjQwODE4MDI0MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODE2NjExOWExMWFhNGYwNTIxZGIwYjQxOTA1MThhYmM2MWRkNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVR70NYEMNel1BBK9/6GGKcH6SYg
BBjx/7HaXzdVkSwOqk+1EaM5mPlYHH8LErRTa46oGJ/nuwIicMB+VcnMJ+a3sNVa
H2fu2K63GkBVjucR9l2VcK/a8ZwU9TcOTV0duXSG70xw98Hd3s0qcVng3u/hY+qe
T/LA6+eBvbSeTRGHsabTa5Qir0u7Y0EG/a8jW/0biowph8eeWUkQ433xoHr0SK+z
kGVrqP/U/Phnw8XBAL7upTBkgCQ8LIxOlLtOyJp0Nl3gND6Urx7SCtkgeU18Ua0r
tiM3Be3J+Pu62A4VQ0etk9uz7MixIddqX9JAmL+n7mSzpXP9nMss7eNVkwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLgWYRmhGqTwUh2wtBkFGKvGHddwMB8GA1UdIwQY
MBaAFGTnVTKSr1lUJu4dfckZohBIlHUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAt
YzE0ZmFmNDNiZTE0LzEvdUJaaEdhRWFwUEJTSGJDMEdRVVlxOFlkMTNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAtYzE0ZmFmNDNiZTE0
LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBjeL6AwQC
ud8AMA0EAgACMAcDBQMqDSgAMA0GCSqGSIb3DQEBCwUAA4IBAQBQran8XMfcFinT
GuD8wWtv9mh6dbtXYJn0ZoyFhq2TUdYOnFrbFm0COyXlI9wMRtMhbLz9xUFSbxij
BZC1VuhSmq5jBC+ktdSlY52UK+vUxcJy/o+Vpo3ri1MfFgX/ZUusysihvloB5kcT
D8ptWMsQr1A5XoNpq09xMbbXCzj9eLYb/5JN5DgS63KNesU4Ic+QInGTS9yknC8X
arsvTO4C/zX9b6zMCOCOxfcMoFX7BZg6kFhHXqP371JcnbufGZef6WEODVNqZd4j
6pjC/mfWF4fD/mOO46m1FhBElpCUHJho6JfbPF35E5r4wqDpeLZ/kZa6a6SR/r61
KmLK2lwd
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:13 2024 by rpki-client on console-ams.rpki-client.org