Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UYg4btLaCkvOv0lX5qx9j5ExATw.roa
File: UYg4btLaCkvOv0lX5qx9j5ExATw.roa (raw, json)
Hash identifier: jC5KNXTtXiwCYRqLAeGeMEfKNGDseUlws+eMU2tWjho=
Subject key identifier: 51:88:38:6E:D2:DA:0A:4B:CE:BF:49:57:E6:AC:7D:8F:91:31:01:3C
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E0BA876EEEBCD7A7133500BD3BE09
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UYg4btLaCkvOv0lX5qx9j5ExATw.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57494
IP address blocks: 37.139.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0b:a8:76:ee:eb:cd:7a:71:33:50:0b:d3:be:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5188386ed2da0a4bcebf4957e6ac7d8f9131013c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:d9:30:03:a7:0b:52:72:ec:14:0e:d9:8c:
7e:8c:b8:84:80:63:c6:81:14:73:d2:31:94:12:90:
4f:3d:9f:af:8f:ba:a2:bf:5b:89:ba:5c:eb:dc:5a:
1c:4b:2d:dd:96:55:ca:55:f6:75:cb:94:39:e4:ba:
d4:0d:d5:5e:d2:4d:9e:0b:a4:a4:8f:c0:f2:fb:d5:
1c:c1:18:3c:48:87:ef:f5:5d:de:88:7a:d3:17:18:
37:79:01:9d:ec:9a:21:29:b4:62:4c:54:b4:f0:6b:
dc:f8:3b:c4:0d:c3:c2:81:ef:fb:e1:ca:5b:c6:e0:
ff:de:6a:1d:ee:bd:d6:6c:d9:d7:41:4f:d8:0c:17:
1c:bb:10:f5:12:58:5e:97:52:b0:81:3c:31:fe:73:
01:3b:ba:c6:05:de:66:a7:01:a2:53:c5:28:4c:63:
a8:65:88:8e:6d:70:76:55:11:51:38:61:5e:40:45:
e7:e0:93:e5:e0:22:44:fd:47:c0:13:8c:37:d5:f1:
58:41:64:f5:5a:f2:c1:cd:14:e1:71:93:a6:03:97:
a0:a9:d3:3e:d4:c6:48:79:7a:50:ed:62:d1:b7:f5:
4b:b2:a5:27:95:f3:5f:69:5b:cc:37:0e:f1:58:5a:
15:1d:9b:0c:6e:ad:bf:98:32:72:38:a5:1d:7d:f1:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:38:6E:D2:DA:0A:4B:CE:BF:49:57:E6:AC:7D:8F:91:31:01:3C
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/UYg4btLaCkvOv0lX5qx9j5ExATw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c6:df:dd:50:0b:2e:2f:00:d9:1c:1a:49:3c:2b:52:1e:7e:
e5:b8:0c:2d:37:81:a4:5c:52:94:33:02:c5:87:91:e3:88:f2:
67:a6:b9:69:35:94:da:83:18:f7:9c:58:58:66:7c:b3:0b:07:
09:a7:86:3e:de:45:96:4a:9c:50:cb:56:1d:79:54:8e:89:4b:
f6:79:b7:e4:36:d5:c9:d8:22:89:03:a9:3a:34:e3:a5:68:ac:
14:ce:b2:00:27:c5:1a:65:47:5d:5f:f9:e1:d3:9b:9a:fb:96:
ea:8a:7d:c2:4d:4e:38:58:c9:0d:9a:c5:5b:18:da:c1:80:7d:
6a:a0:3b:52:7c:33:7d:d2:b1:4f:aa:d7:f2:06:24:f8:7f:43:
50:01:6a:59:24:69:ef:8d:7e:24:6d:cc:2a:8a:b9:54:2a:fb:
d3:15:ee:87:53:17:61:7b:2a:d2:fd:92:c4:ca:98:86:96:95:
4f:2a:fd:95:23:0b:f9:ba:58:85:47:f2:57:27:b0:e8:6f:e5:
87:f9:6d:85:24:81:ea:cc:04:5a:f7:c8:a4:f8:ac:ca:23:fc:
da:16:2b:6f:3f:99:55:d7:3d:74:89:36:0e:6f:88:15:20:bb:
b2:8d:a4:09:65:6e:51:a3:e7:bd:4c:d7:9b:28:0e:74:0e:f0:
dc:81:c7:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbguodu7rzXpxM1AL074JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjQwMTAxMTQyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg4Mzg2ZWQyZGEwYTRiY2ViZjQ5NTdlNmFjN2Q4ZjkxMzEwMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BnZMAOnC1Jy7BQO2Yx+jLiEgGPG
gRRz0jGUEpBPPZ+vj7qiv1uJulzr3FocSy3dllXKVfZ1y5Q55LrUDdVe0k2eC6Sk
j8Dy+9UcwRg8SIfv9V3eiHrTFxg3eQGd7JohKbRiTFS08Gvc+DvEDcPCge/74cpb
xuD/3mod7r3WbNnXQU/YDBccuxD1Elhel1KwgTwx/nMBO7rGBd5mpwGiU8UoTGOo
ZYiObXB2VRFROGFeQEXn4JPl4CJE/UfAE4w31fFYQWT1WvLBzRThcZOmA5egqdM+
1MZIeXpQ7WLRt/VLsqUnlfNfaVvMNw7xWFoVHZsMbq2/mDJyOKUdffGAGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGIOG7S2gpLzr9JV+asfY+RMQE8MB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvVVlnNGJ0TGFDa3ZPdjBsWDVxeDlqNUV4QVR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYszMA0G
CSqGSIb3DQEBCwUAA4IBAQDJxt/dUAsuLwDZHBpJPCtSHn7luAwtN4GkXFKUMwLF
h5HjiPJnprlpNZTagxj3nFhYZnyzCwcJp4Y+3kWWSpxQy1YdeVSOiUv2ebfkNtXJ
2CKJA6k6NOOlaKwUzrIAJ8UaZUddX/nh05ua+5bqin3CTU44WMkNmsVbGNrBgH1q
oDtSfDN90rFPqtfyBiT4f0NQAWpZJGnvjX4kbcwqirlUKvvTFe6HUxdheyrS/ZLE
ypiGlpVPKv2VIwv5uliFR/JXJ7Dob+WH+W2FJIHqzARa98ik+KzKI/zaFitvP5lV
1z10iTYOb4gVILuyjaQJZW5Ro+e9TNebKA50DvDcgcdY
-----END CERTIFICATE-----
Generated at Sun May 12 15:32:30 2024 by rpki-client on console-ams.rpki-client.org