Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/UuzXP-dBN_lLq69DViXhb6ENtGQ.roa
File: UuzXP-dBN_lLq69DViXhb6ENtGQ.roa (raw, json)
Hash identifier: F+zTaa6Se3LGNMs5avZjEAxrDih6eyLF3SRR2u24qlA=
Subject key identifier: 52:EC:D7:3F:E7:41:37:F9:4B:AB:AF:43:56:25:E1:6F:A1:0D:B4:64
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 0190E4CAA767F00523E3D49622EAE1D65376
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/UuzXP-dBN_lLq69DViXhb6ENtGQ.roa
Signing time: Wed 24 Jul 2024 12:50:04 +0000
ROA not before: Wed 24 Jul 2024 12:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215730
IP address blocks: 77.91.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:ca:a7:67:f0:05:23:e3:d4:96:22:ea:e1:d6:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jul 24 12:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52ecd73fe74137f94babaf435625e16fa10db464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:37:b8:ce:36:8d:56:78:35:5f:ad:d5:6a:
2b:52:b1:82:6b:0e:06:13:a5:c9:e4:de:62:ad:89:
cd:8b:5d:64:fd:38:1c:0d:86:69:9d:1d:4c:5b:a3:
84:c9:b7:f1:d0:31:c4:77:57:9f:54:ef:7d:60:b6:
c2:3b:54:ef:dd:ff:fb:df:3a:67:39:33:f4:b4:c2:
f6:27:85:92:f3:0f:00:c1:62:d1:2a:5c:2c:77:b4:
1a:8e:0b:45:3b:58:7c:1d:25:52:cd:09:4f:c2:73:
f6:67:6c:cd:cd:78:ba:5f:b5:08:21:03:7f:26:04:
18:92:fc:e3:db:e8:46:c9:8f:67:31:f1:f0:dd:33:
68:09:56:d0:82:09:4a:34:11:7a:de:e2:03:c0:7f:
30:a3:79:18:10:a2:a7:37:07:bc:32:e3:48:77:fa:
81:53:ab:14:37:0f:4f:a7:c0:8a:7f:2d:78:b6:65:
a0:89:56:3c:f6:37:b9:35:39:e6:22:d1:1a:6e:19:
7f:66:4b:d3:ce:72:58:f8:5c:61:95:bd:55:20:c6:
e0:ef:43:ac:ae:79:32:75:4a:fe:63:89:c4:df:21:
c1:ae:5e:9c:a3:19:5e:92:dc:32:70:73:80:58:1e:
fa:f7:99:cf:33:13:04:c5:b8:99:5a:72:9c:e3:b2:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:D7:3F:E7:41:37:F9:4B:AB:AF:43:56:25:E1:6F:A1:0D:B4:64
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/UuzXP-dBN_lLq69DViXhb6ENtGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:49:e0:bf:15:fa:d0:a0:61:bd:45:ae:2d:fc:f2:fd:ff:55:
a8:96:66:f7:49:51:78:26:15:a6:2c:68:16:0e:64:0e:85:02:
48:60:2c:fd:6e:04:c5:70:dc:5b:f4:0c:12:9b:47:b0:85:3b:
50:17:9d:6d:0d:6e:73:ea:02:c2:92:e0:2b:d3:f8:9a:1e:ba:
fd:11:58:35:24:fe:8d:a9:9c:15:97:37:b4:5c:ae:d8:2d:41:
9e:9e:8a:af:33:0f:2e:8c:07:ca:de:16:f2:8c:89:02:a3:1d:
f9:1f:21:b4:97:f1:12:3b:db:86:18:36:ce:d6:2a:ca:5c:0e:
5c:ee:e3:f1:a8:0d:85:74:f0:76:d4:dd:c4:0e:70:91:0b:d7:
54:26:0f:07:48:10:c2:87:19:dc:cb:6b:e1:4b:09:8d:7c:b8:
a1:c8:c4:16:0a:bf:e9:c4:de:e1:e2:2d:ea:25:65:e2:b3:c6:
14:5c:a0:07:81:1c:78:30:a4:bc:51:e3:36:29:4b:ab:31:22:
76:a6:41:44:14:50:88:71:c7:7c:12:d2:67:a4:e6:52:ed:7a:
ea:38:d7:73:ce:f9:4b:9d:9c:76:8f:ee:ff:b1:72:85:06:39:
e7:a1:30:06:2d:b3:b5:e1:b1:55:62:5f:8a:9a:de:27:ee:a4:
81:55:91:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDkyqdn8AUj49SWIurh1lN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3
Y2ZmOWIwHhcNMjQwNzI0MTI1MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmVjZDczZmU3NDEzN2Y5NGJhYmFmNDM1NjI1ZTE2ZmExMGRiNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgA3uM42jVZ4NV+t1WorUrGCaw4G
E6XJ5N5irYnNi11k/TgcDYZpnR1MW6OEybfx0DHEd1efVO99YLbCO1Tv3f/73zpn
OTP0tML2J4WS8w8AwWLRKlwsd7QajgtFO1h8HSVSzQlPwnP2Z2zNzXi6X7UIIQN/
JgQYkvzj2+hGyY9nMfHw3TNoCVbQgglKNBF63uIDwH8wo3kYEKKnNwe8MuNId/qB
U6sUNw9Pp8CKfy14tmWgiVY89je5NTnmItEabhl/ZkvTznJY+Fxhlb1VIMbg70Os
rnkydUr+Y4nE3yHBrl6coxlektwycHOAWB7695nPMxMExbiZWnKc47JI5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFLs1z/nQTf5S6uvQ1Yl4W+hDbRkMB8GA1UdIwQY
MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt
YzlmNTdlOTU5ZWYxLzEvVXV6WFAtZEJOX2xMcTY5RFZpWGhiNkVOdEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx
LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVt8MA0G
CSqGSIb3DQEBCwUAA4IBAQArSeC/FfrQoGG9Ra4t/PL9/1Wolmb3SVF4JhWmLGgW
DmQOhQJIYCz9bgTFcNxb9AwSm0ewhTtQF51tDW5z6gLCkuAr0/iaHrr9EVg1JP6N
qZwVlze0XK7YLUGenoqvMw8ujAfK3hbyjIkCox35HyG0l/ESO9uGGDbO1irKXA5c
7uPxqA2FdPB21N3EDnCRC9dUJg8HSBDChxncy2vhSwmNfLihyMQWCr/pxN7h4i3q
JWXis8YUXKAHgRx4MKS8UeM2KUurMSJ2pkFEFFCIccd8EtJnpOZS7XrqONdzzvlL
nZx2j+7/sXKFBjnnoTAGLbO14bFVYl+Kmt4n7qSBVZH+
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:16 2024 by rpki-client on console-fra.rpki-client.org