Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/UGyYGxQTmcW7rKUFHtW5i2VotGU.roa
File: UGyYGxQTmcW7rKUFHtW5i2VotGU.roa (raw, json)
Hash identifier: eb7OiCUOKsaBgNghb9GT9KC9MNuJwrfOuCOYHHKOgxs=
Subject key identifier: 50:6C:98:1B:14:13:99:C5:BB:AC:A5:05:1E:D5:B9:8B:65:68:B4:65
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E42B1F2D9F5DB586965855FC8C60
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/UGyYGxQTmcW7rKUFHtW5i2VotGU.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64460
IP address blocks: 5.160.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e4:2b:1f:2d:9f:5d:b5:86:96:58:55:fc:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=506c981b141399c5bbaca5051ed5b98b6568b465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:65:15:ed:70:47:ee:7e:f5:3b:a6:64:ac:
c4:64:c7:fa:88:89:0f:2f:ba:4e:d6:58:41:2d:7d:
71:6b:f5:7e:11:4e:48:c3:38:dd:a7:59:a3:3b:ca:
30:ad:b5:38:d4:4d:0d:73:4a:f7:3a:c0:bc:71:92:
bf:fc:f3:7b:02:a9:9a:29:f2:75:bb:24:a7:37:3e:
56:b8:38:33:a5:11:aa:f3:b1:49:6d:d4:60:e7:68:
3b:53:a9:d0:6c:64:51:42:2a:d2:22:b4:9e:15:b4:
20:49:30:ca:a4:ee:ab:4c:08:34:2e:c8:ef:95:d4:
46:59:dc:91:c1:3b:96:77:de:c0:23:d0:f2:00:40:
8a:d0:bc:89:9d:2b:a5:d0:89:82:91:62:88:2b:cb:
23:df:20:76:0c:04:04:b9:fb:0b:07:f1:1c:c9:ca:
2e:93:0e:fd:46:31:6b:c9:6b:c1:10:eb:b9:8c:76:
01:5e:62:cb:b9:01:17:b5:30:8c:c3:af:d4:6a:46:
e2:dc:05:fe:b4:09:8c:25:c7:3b:b1:a9:ec:0b:f1:
ba:23:7b:2a:e7:fd:f5:5e:40:36:c3:8e:33:fe:36:
ae:2a:27:82:00:c0:66:74:12:1d:c2:9b:d6:ed:f8:
1c:0e:5a:b7:7d:a6:ae:40:4a:9f:9f:d2:81:7f:76:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6C:98:1B:14:13:99:C5:BB:AC:A5:05:1E:D5:B9:8B:65:68:B4:65
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/UGyYGxQTmcW7rKUFHtW5i2VotGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.141.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6c:24:9f:70:bd:35:4b:e6:d9:64:86:92:03:ce:fe:03:01:
07:dc:46:e0:05:bb:85:30:bc:b5:6e:53:f7:61:e9:0a:5a:ba:
8e:8e:ad:6c:05:42:8a:73:71:e9:23:72:58:06:ae:b1:07:78:
11:7c:99:af:39:ad:82:7a:29:e1:e7:19:eb:80:78:4f:94:86:
63:65:3b:11:a9:05:67:85:ae:28:53:74:83:ee:20:e1:fc:44:
41:a3:6c:94:bd:36:0e:76:02:7f:c3:96:46:ed:b8:98:4f:5c:
8d:e6:8c:6f:f6:d1:58:15:4d:30:db:17:4d:ba:82:0c:1b:d3:
3a:42:f0:47:c7:6f:fa:69:6b:34:5d:0c:c9:c2:3d:56:06:55:
0e:1f:aa:15:ad:3c:ac:b9:fb:1a:88:06:21:e1:65:dd:b1:22:
72:0d:1c:9a:6e:14:c0:f8:ce:69:cf:d7:22:c1:e8:d0:4c:dc:
01:bf:a5:80:41:07:32:11:a1:be:bd:7d:2c:06:0c:99:ff:b5:
47:c6:98:9b:36:51:f3:4a:83:1c:72:07:85:ad:6c:c6:3b:63:
7a:65:30:38:6a:a6:1f:89:d7:bf:7b:11:48:32:65:60:a4:72:
bf:dd:72:fe:6a:ed:6c:85:9f:cb:5c:8c:d9:1c:54:64:6c:06:
ea:1b:86:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkuQrHy2fXbWGllhV/IxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjQwMTAxMTAzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZjOTgxYjE0MTM5OWM1YmJhY2E1MDUxZWQ1Yjk4YjY1NjhiNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLVlFe1wR+5+9TumZKzEZMf6iIkP
L7pO1lhBLX1xa/V+EU5Iwzjdp1mjO8owrbU41E0Nc0r3OsC8cZK//PN7AqmaKfJ1
uySnNz5WuDgzpRGq87FJbdRg52g7U6nQbGRRQirSIrSeFbQgSTDKpO6rTAg0Lsjv
ldRGWdyRwTuWd97AI9DyAECK0LyJnSul0ImCkWKIK8sj3yB2DAQEufsLB/Ecycou
kw79RjFryWvBEOu5jHYBXmLLuQEXtTCMw6/Uakbi3AX+tAmMJcc7sansC/G6I3sq
5/31XkA2w44z/jauKieCAMBmdBIdwpvW7fgcDlq3faauQEqfn9KBf3b/OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBsmBsUE5nFu6ylBR7VuYtlaLRlMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvVUd5WUd4UVRtY1c3cktVRkh0VzVpMlZvdEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaCNMA0G
CSqGSIb3DQEBCwUAA4IBAQAEbCSfcL01S+bZZIaSA87+AwEH3EbgBbuFMLy1blP3
YekKWrqOjq1sBUKKc3HpI3JYBq6xB3gRfJmvOa2Ceinh5xnrgHhPlIZjZTsRqQVn
ha4oU3SD7iDh/ERBo2yUvTYOdgJ/w5ZG7biYT1yN5oxv9tFYFU0w2xdNuoIMG9M6
QvBHx2/6aWs0XQzJwj1WBlUOH6oVrTysufsaiAYh4WXdsSJyDRyabhTA+M5pz9ci
wejQTNwBv6WAQQcyEaG+vX0sBgyZ/7VHxpibNlHzSoMccgeFrWzGO2N6ZTA4aqYf
ide/exFIMmVgpHK/3XL+au1shZ/LXIzZHFRkbAbqG4Yu
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:25 2024 by rpki-client on console-ams.rpki-client.org