Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/UyfBAoTJY_x35m1OHFtwxeXvqBE.roa
File: UyfBAoTJY_x35m1OHFtwxeXvqBE.roa (raw, json)
Hash identifier: 4MuajWo7NdcFmL1/DJmXdpzt1KNu1aIWn4zeJvtwHSE=
Subject key identifier: 53:27:C1:02:84:C9:63:FC:77:E6:6D:4E:1C:5B:70:C5:E5:EF:A8:11
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 018CC9BC01AD77386F3D9F00092550BBAACE
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/UyfBAoTJY_x35m1OHFtwxeXvqBE.roa
Signing time: Tue 02 Jan 2024 10:33:10 +0000
ROA not before: Tue 02 Jan 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 185.124.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:01:ad:77:38:6f:3d:9f:00:09:25:50:bb:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 2 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5327c10284c963fc77e66d4e1c5b70c5e5efa811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:1e:65:63:6a:93:ce:e2:cf:bf:7f:f9:db:
c7:fe:a2:0d:50:47:ca:54:85:ad:a8:9f:c0:66:26:
28:98:91:a3:1a:bd:0b:c1:64:24:eb:04:b8:f9:97:
4a:3e:32:f7:ce:73:28:7c:1e:f5:59:74:2a:57:80:
ad:a5:45:58:95:05:ce:45:04:6c:20:31:58:19:84:
7c:b8:64:1a:14:65:57:fc:75:6a:0e:64:9a:a3:df:
9a:1f:9b:a9:77:ef:c7:2b:7a:e5:0e:cf:54:4b:17:
9b:75:b3:24:7c:c3:d9:07:3d:ea:80:ce:c8:5b:0c:
ab:f4:83:fb:37:7f:e0:17:24:fa:2f:3f:30:4d:13:
6c:fd:1e:2d:f2:cf:8b:bf:44:09:7c:4a:be:4f:71:
6a:07:03:50:84:1b:96:36:41:19:0c:0a:a6:ce:3c:
f5:ca:06:f0:9a:a3:8d:07:1f:4c:52:4c:32:d9:d0:
4b:b3:4e:7c:cf:c9:52:a4:87:7a:4b:6a:51:2a:fc:
df:4d:61:6a:f4:28:c2:3e:3c:91:46:3a:24:e3:48:
80:f2:04:d4:3f:29:ec:e4:2e:ad:13:6d:6e:11:93:
e9:32:55:9d:51:83:04:46:6d:e9:ab:44:82:9e:cd:
1c:7f:bc:07:94:15:7e:24:32:a6:04:3b:ed:43:1b:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:C1:02:84:C9:63:FC:77:E6:6D:4E:1C:5B:70:C5:E5:EF:A8:11
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/UyfBAoTJY_x35m1OHFtwxeXvqBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.48.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bf:f0:14:26:11:a4:f1:94:86:65:4c:73:76:94:9b:97:94:
ca:a8:87:c0:71:9c:2c:49:9b:cc:3e:5a:52:f1:78:99:4f:47:
c7:64:73:be:9e:2e:0f:2a:b7:14:02:5f:63:d7:cc:71:b0:7e:
fe:cb:a4:c5:99:0f:ce:8a:2e:84:93:da:30:08:66:b9:6f:e7:
3e:ae:83:ce:13:1e:49:42:7f:c8:05:1b:47:48:52:87:0d:43:
ef:94:29:d5:fc:92:97:8c:43:22:05:0c:e8:80:4a:dc:3a:ee:
58:b6:88:15:eb:b3:00:e1:27:58:de:bd:9e:50:02:19:ba:5d:
f4:83:74:3f:56:7a:e0:21:b8:82:92:75:ea:9a:1d:cc:29:9f:
cc:5c:50:98:ac:cb:c0:f6:49:80:8d:e7:e2:d2:c3:46:bf:05:
69:e1:af:7d:c8:94:31:07:5d:e5:12:90:4e:fe:d5:77:27:23:
99:35:77:e6:be:e6:4a:e7:62:35:13:76:75:ed:23:11:84:aa:
15:ec:56:e8:45:fd:3d:bb:8f:3a:94:1c:70:2d:b5:68:55:4e:
5d:5f:f5:8c:58:0d:ce:fb:da:44:a5:ff:18:de:53:d4:01:a2:
82:69:cf:d5:fe:12:f5:ab:b5:a0:9f:4d:52:60:f6:b8:e0:20:
ea:8b:56:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvAGtdzhvPZ8ACSVQu6rOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx
NDlkNTYwHhcNMjQwMTAyMTAzMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzI3YzEwMjg0Yzk2M2ZjNzdlNjZkNGUxYzViNzBjNWU1ZWZhODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly8eZWNqk87iz79/+dvH/qINUEfK
VIWtqJ/AZiYomJGjGr0LwWQk6wS4+ZdKPjL3znMofB71WXQqV4CtpUVYlQXORQRs
IDFYGYR8uGQaFGVX/HVqDmSao9+aH5upd+/HK3rlDs9USxebdbMkfMPZBz3qgM7I
Wwyr9IP7N3/gFyT6Lz8wTRNs/R4t8s+Lv0QJfEq+T3FqBwNQhBuWNkEZDAqmzjz1
ygbwmqONBx9MUkwy2dBLs058z8lSpId6S2pRKvzfTWFq9CjCPjyRRjok40iA8gTU
Pyns5C6tE21uEZPpMlWdUYMERm3pq0SCns0cf7wHlBV+JDKmBDvtQxvtwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMnwQKEyWP8d+ZtThxbcMXl76gRMB8GA1UdIwQY
MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt
MGZlYjY2ZTdmMjhhLzEvVXlmQkFvVEpZX3gzNW0xT0hGdHd4ZVh2cUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh
LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXwwMA0G
CSqGSIb3DQEBCwUAA4IBAQAOv/AUJhGk8ZSGZUxzdpSbl5TKqIfAcZwsSZvMPlpS
8XiZT0fHZHO+ni4PKrcUAl9j18xxsH7+y6TFmQ/Oii6Ek9owCGa5b+c+roPOEx5J
Qn/IBRtHSFKHDUPvlCnV/JKXjEMiBQzogErcOu5YtogV67MA4SdY3r2eUAIZul30
g3Q/VnrgIbiCknXqmh3MKZ/MXFCYrMvA9kmAjefi0sNGvwVp4a99yJQxB13lEpBO
/tV3JyOZNXfmvuZK52I1E3Z17SMRhKoV7FboRf09u486lBxwLbVoVU5dX/WMWA3O
+9pEpf8Y3lPUAaKCac/V/hL1q7Wgn01SYPa44CDqi1YL
-----END CERTIFICATE-----
Generated at Mon May 13 17:26:24 2024 by rpki-client on console-ams.rpki-client.org