Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Ufm5aKQDckFgHXa2L4pyzkIn7Ko.roa
File: Ufm5aKQDckFgHXa2L4pyzkIn7Ko.roa (raw, json)
Hash identifier: 17WMT/Kc3TmwPw4R3B3GiujwE1WUgUcmYRWMfYv1jnY=
Subject key identifier: 51:F9:B9:68:A4:03:72:41:60:1D:76:B6:2F:8A:72:CE:42:27:EC:AA
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 0192D716ED4143FEE30A0E559A26B9127652
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Ufm5aKQDckFgHXa2L4pyzkIn7Ko.roa
Signing time: Tue 29 Oct 2024 07:04:16 +0000
ROA not before: Tue 29 Oct 2024 07:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210993
IP address blocks: 95.181.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:16:ed:41:43:fe:e3:0a:0e:55:9a:26:b9:12:76:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Oct 29 07:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51f9b968a4037241601d76b62f8a72ce4227ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:14:76:9e:1d:db:97:0f:03:73:be:cd:a0:
37:0f:a0:72:44:b8:5f:6c:70:d4:ad:16:e7:04:e6:
d7:23:a8:a5:24:b2:9e:96:a5:ae:b5:15:c2:5d:0f:
9e:91:60:66:da:16:67:a9:35:b9:fb:f3:46:99:e1:
da:64:fc:9d:bd:87:72:20:ec:3b:28:30:89:96:06:
63:35:06:3d:d4:65:6d:07:6a:ad:ef:1f:28:07:37:
15:ff:87:c1:75:7e:aa:25:a0:04:f0:08:96:75:e9:
2d:87:4f:19:c6:fc:cd:f0:6f:bb:32:5c:c8:0a:b1:
f1:78:2f:e7:e7:c8:2b:0a:e0:27:c5:be:58:5c:21:
b5:2f:52:b6:48:0e:5d:3d:1a:62:b8:32:ff:70:aa:
88:a9:17:28:23:cd:1f:0d:50:e0:7c:82:6b:0c:3b:
6b:77:66:d9:5c:a7:75:e1:56:0a:0c:0e:4b:b3:c8:
70:ba:0d:a6:d2:a1:7e:38:ff:55:aa:fa:46:f2:1a:
b3:ba:7f:c3:c6:ec:4c:a8:dc:47:29:bf:3a:a8:96:
29:45:b9:12:3a:47:31:1f:2a:be:86:bf:c6:84:64:
25:85:59:2a:23:59:82:42:93:5a:6e:f0:8b:d8:af:
56:de:75:da:7c:97:1d:c6:5f:ed:7c:cc:15:85:ba:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:B9:68:A4:03:72:41:60:1D:76:B6:2F:8A:72:CE:42:27:EC:AA
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Ufm5aKQDckFgHXa2L4pyzkIn7Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.158.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d9:f0:35:14:20:b3:4d:2d:8d:6d:16:1e:04:78:ee:8a:44:
78:ce:56:1c:12:a9:2b:13:fe:06:6f:fe:77:06:e8:95:84:8b:
18:bf:c0:13:f9:2a:ef:39:24:2f:b5:f3:6c:6c:35:81:30:7c:
b3:8c:9f:9e:70:2c:8e:2e:08:2b:ef:99:61:ec:e4:bb:0a:e0:
be:e0:59:48:59:99:0d:ef:b7:af:03:85:5e:40:c3:54:f5:1a:
73:82:2a:bc:39:f3:26:b7:39:7d:55:34:9c:ab:ec:b0:b3:bc:
97:e5:b9:52:a1:fc:d4:6a:5a:fb:51:bb:fc:6b:17:a9:87:36:
ee:db:c2:3a:2a:72:29:dd:db:fd:0e:8b:6b:a0:d5:69:a8:2e:
b4:f8:7c:ed:00:26:89:10:c9:2c:30:a5:78:c3:7c:d1:ee:bf:
65:fb:48:06:2a:0c:39:63:74:af:87:02:f9:ad:6f:01:23:94:
d9:d7:12:87:a2:9e:79:af:86:7f:87:15:93:f5:3a:89:4b:5b:
48:f1:a9:b9:1e:5e:ed:ea:ae:2e:79:47:5e:0e:56:98:1b:d1:
1b:6d:73:07:1d:cf:b6:f9:e4:84:b9:84:1b:c1:c2:45:f2:ab:
c2:7b:0a:ec:2c:1a:67:cd:e7:cc:fc:b3:39:36:c0:15:60:44:
c5:7c:90:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLXFu1BQ/7jCg5Vmia5EnZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1
YTNjMjAwHhcNMjQxMDI5MDcwNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWY5Yjk2OGE0MDM3MjQxNjAxZDc2YjYyZjhhNzJjZTQyMjdlY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaAUdp4d25cPA3O+zaA3D6ByRLhf
bHDUrRbnBObXI6ilJLKelqWutRXCXQ+ekWBm2hZnqTW5+/NGmeHaZPydvYdyIOw7
KDCJlgZjNQY91GVtB2qt7x8oBzcV/4fBdX6qJaAE8AiWdekth08ZxvzN8G+7MlzI
CrHxeC/n58grCuAnxb5YXCG1L1K2SA5dPRpiuDL/cKqIqRcoI80fDVDgfIJrDDtr
d2bZXKd14VYKDA5Ls8hwug2m0qF+OP9VqvpG8hqzun/DxuxMqNxHKb86qJYpRbkS
OkcxHyq+hr/GhGQlhVkqI1mCQpNabvCL2K9W3nXafJcdxl/tfMwVhbry6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFH5uWikA3JBYB12ti+Kcs5CJ+yqMB8GA1UdIwQY
MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvVWZtNWFLUURja0ZnSFhhMkw0cHl6a0luN0tvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WeMA0G
CSqGSIb3DQEBCwUAA4IBAQAn2fA1FCCzTS2NbRYeBHjuikR4zlYcEqkrE/4Gb/53
BuiVhIsYv8AT+SrvOSQvtfNsbDWBMHyzjJ+ecCyOLggr75lh7OS7CuC+4FlIWZkN
77evA4VeQMNU9Rpzgiq8OfMmtzl9VTScq+yws7yX5blSofzUalr7Ubv8axephzbu
28I6KnIp3dv9DotroNVpqC60+HztACaJEMksMKV4w3zR7r9l+0gGKgw5Y3SvhwL5
rW8BI5TZ1xKHop55r4Z/hxWT9TqJS1tI8am5Hl7t6q4ueUdeDlaYG9EbbXMHHc+2
+eSEuYQbwcJF8qvCewrsLBpnzefM/LM5NsAVYETFfJAx
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:33 2024 by rpki-client on console-fra.rpki-client.org