Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa
File: UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa (raw, json)
Hash identifier: Fp5gE9ini9ohmtOOSoiv1sAvwlKmXLR7OjVZ0JVySBI=
Subject key identifier: 50:77:59:FC:15:88:98:6E:02:F8:BC:AB:09:DA:5B:06:FD:EA:15:77
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 018CC56E24FCA4A93971183F5674591FEA8A
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa
Signing time: Mon 01 Jan 2024 14:29:39 +0000
ROA not before: Mon 01 Jan 2024 14:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39093
IP address blocks: 45.158.144.0/22 maxlen: 22
185.46.252.0/22 maxlen: 22
88.81.96.0/19 maxlen: 19
2a02:3d8::/32 maxlen: 32
2a0f:6380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:24:fc:a4:a9:39:71:18:3f:56:74:59:1f:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=507759fc1588986e02f8bcab09da5b06fdea1577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:df:7e:7b:db:ea:3e:ed:5a:3e:5c:09:01:01:
e6:e5:64:6b:cb:ce:80:ef:10:35:69:b3:b7:c7:ff:
57:15:53:11:ac:67:fe:85:b6:79:72:2b:8e:34:46:
ad:55:a2:81:77:02:2b:7c:71:b0:6f:da:71:a1:40:
b6:3a:44:77:6d:62:4d:38:e6:a6:5a:9c:45:e2:1e:
0a:3d:59:22:02:12:48:71:0b:c5:62:9f:8d:4a:41:
07:60:88:00:82:84:3e:0c:a0:e3:10:9e:6e:61:42:
1a:a1:02:84:38:fc:76:bd:61:6f:1c:5e:5c:be:ac:
5f:4a:18:71:1f:2b:8d:69:79:7f:a0:5a:81:0e:a1:
e1:c4:eb:79:6d:6e:8a:75:61:d7:fe:97:12:f2:8a:
d2:d4:89:ba:df:c2:94:62:e0:11:0a:3f:31:e0:d5:
62:26:74:6f:d2:44:fb:25:2f:7a:c2:c3:4b:46:e8:
76:9f:7c:92:c0:7f:7d:09:1c:a4:e2:71:3b:57:fb:
ca:2a:8a:53:aa:8b:eb:40:d3:b5:5b:13:c4:c5:b8:
18:41:33:b2:16:9a:02:32:7d:fc:bf:ac:d9:bb:4d:
7a:42:38:ed:f6:5e:1c:da:c3:cf:04:8f:c5:ec:6c:
d9:d8:a5:b3:db:fd:ad:89:e8:fc:fb:87:80:db:73:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:59:FC:15:88:98:6E:02:F8:BC:AB:09:DA:5B:06:FD:EA:15:77
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.144.0/22
88.81.96.0/19
185.46.252.0/22
IPv6:
2a02:3d8::/32
2a0f:6380::/29
Signature Algorithm: sha256WithRSAEncryption
71:87:08:e9:e0:75:bf:8a:c1:43:26:f9:97:53:36:df:ea:ed:
69:bb:c9:bf:ee:91:23:b3:70:a2:74:d5:79:1c:54:d1:ff:81:
d9:a1:fc:08:d1:bd:88:5f:3a:31:41:84:d0:d3:f2:fa:4a:d2:
4e:91:85:af:e5:d0:ab:5c:73:9e:20:f2:67:0f:bc:c4:a4:c4:
36:2c:a0:c2:6d:eb:58:ce:d2:2f:af:09:90:46:1d:e0:b7:b9:
56:f7:e9:48:d6:9c:cf:1d:5a:70:4e:58:a5:56:f8:94:a6:32:
06:2c:7b:c6:a4:30:b1:e8:12:72:eb:e8:14:06:72:44:fe:48:
28:27:51:a0:ed:31:50:92:52:5d:09:5f:8a:53:d9:df:f8:7c:
04:4c:86:8e:45:dd:18:01:2a:b9:32:19:b2:56:11:0c:d8:b1:
4d:8d:35:6f:ad:00:3d:99:4f:45:a2:29:07:b3:c6:7a:77:0f:
2f:d8:73:eb:3a:ce:b5:e9:96:af:84:11:5d:b2:27:38:29:6c:
ad:c9:b4:fc:0a:a5:f0:af:24:02:02:a4:d6:e3:5f:24:64:89:
a5:60:36:45:69:45:80:25:00:19:c7:20:fd:59:8e:14:f3:c9:
64:65:7a:a9:97:d0:b7:4c:09:1c:81:d9:4c:49:02:32:52:fd:
eb:ab:8e:f6
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYzFbiT8pKk5cRg/VnRZH+qKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZmI0NzZmY2YzMTNjZmYyOTVkZTBkMTcwOTE1NmFmMDI1
M2Q3Y2YwHhcNMjQwMTAxMTQyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDc3NTlmYzE1ODg5ODZlMDJmOGJjYWIwOWRhNWIwNmZkZWExNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN9+e9vqPu1aPlwJAQHm5WRry86A
7xA1abO3x/9XFVMRrGf+hbZ5ciuONEatVaKBdwIrfHGwb9pxoUC2OkR3bWJNOOam
WpxF4h4KPVkiAhJIcQvFYp+NSkEHYIgAgoQ+DKDjEJ5uYUIaoQKEOPx2vWFvHF5c
vqxfShhxHyuNaXl/oFqBDqHhxOt5bW6KdWHX/pcS8orS1Im638KUYuARCj8x4NVi
JnRv0kT7JS96wsNLRuh2n3ySwH99CRyk4nE7V/vKKopTqovrQNO1WxPExbgYQTOy
FpoCMn38v6zZu016Qjjt9l4c2sPPBI/F7GzZ2KWz2/2tiej8+4eA23M6gwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFFB3WfwViJhuAvi8qwnaWwb96hV3MB8GA1UdIwQY
MBaAFCz7R2/PMTz/KV3g0XCRVq8CU9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQt
ZmE0ZGQyMWFlM2RjLzEvVUhkWl9CV0ltRzRDLUx5ckNkcGJCdjNxRlhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQtZmE0ZGQyMWFlM2Rj
LzEvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCLZ6QAwQF
WFFgAwQCuS78MBQEAgACMA4DBQAqAgPYAwUDKg9jgDANBgkqhkiG9w0BAQsFAAOC
AQEAcYcI6eB1v4rBQyb5l1M23+rtabvJv+6RI7NwonTVeRxU0f+B2aH8CNG9iF86
MUGE0NPy+krSTpGFr+XQq1xzniDyZw+8xKTENiygwm3rWM7SL68JkEYd4Le5Vvfp
SNaczx1acE5YpVb4lKYyBix7xqQwsegScuvoFAZyRP5IKCdRoO0xUJJSXQlfilPZ
3/h8BEyGjkXdGAEquTIZslYRDNixTY01b60APZlPRaIpB7PGencPL9hz6zrOtemW
r4QRXbInOClsrcm0/Aql8K8kAgKk1uNfJGSJpWA2RWlFgCUAGccg/VmOFPPJZGV6
qZfQt0wJHIHZTEkCMlL966uO9g==
-----END CERTIFICATE-----
Generated at Sat Jun 22 08:36:42 2024 by rpki-client on console-ams.rpki-client.org