Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/uCi79S5GgKNalditAP6aMTs2Ums.roa
File: uCi79S5GgKNalditAP6aMTs2Ums.roa (raw, json)
Hash identifier: VVzqGCu0XUgb5bhEIzFftBw7Q4QxHx/ljPvg88Qd2VE=
Subject key identifier: B8:28:BB:F5:2E:46:80:A3:5A:95:D8:AD:00:FE:9A:31:3B:36:52:6B
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 0193627401A50585F2DE876CB758FE8418FF
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/uCi79S5GgKNalditAP6aMTs2Ums.roa
Signing time: Mon 25 Nov 2024 08:33:09 +0000
ROA not before: Mon 25 Nov 2024 08:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28959
IP address blocks: 194.126.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:74:01:a5:05:85:f2:de:87:6c:b7:58:fe:84:18:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Nov 25 08:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b828bbf52e4680a35a95d8ad00fe9a313b36526b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:38:7f:51:e2:50:49:3e:06:d3:47:ca:61:
33:3b:eb:83:f8:36:70:d0:0e:6a:b4:ff:7c:86:57:
a4:29:5c:50:ea:d4:46:f2:59:2f:76:c2:d2:f6:b9:
40:c9:05:91:e7:1f:ac:c5:57:f0:61:5f:ce:6e:29:
92:74:75:f2:60:48:25:7a:49:9b:dc:5b:d2:b1:5b:
01:3b:6e:d1:7a:ca:8d:f8:0b:8b:aa:77:50:48:31:
a8:3b:92:06:d9:2c:d3:ce:ac:c8:28:22:75:18:ff:
05:5a:9f:c9:ff:e4:65:39:14:97:f4:46:2c:e4:91:
2a:f0:d4:e5:6d:d9:d0:5d:13:c5:3a:e4:5b:dc:3b:
ed:ef:79:c0:70:92:4d:0b:2c:f4:d8:b2:d2:7d:dc:
0d:09:ee:c2:10:bd:20:50:84:7d:c4:4b:dc:87:55:
d9:00:86:af:b2:39:66:bb:2d:72:d6:aa:d7:40:a5:
4b:2e:69:2d:cc:e9:e0:ab:fd:26:47:e2:3b:fd:b8:
be:9d:38:1c:52:18:60:3d:66:30:32:7a:db:27:26:
aa:4d:27:6a:30:0b:93:fc:69:c9:d0:08:06:5e:9f:
94:a0:b0:54:7a:41:d6:c9:5f:ae:22:48:6a:e5:6d:
0e:b1:9d:ad:56:ce:07:f4:3f:72:1f:94:2c:9f:0c:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:BB:F5:2E:46:80:A3:5A:95:D8:AD:00:FE:9A:31:3B:36:52:6B
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/uCi79S5GgKNalditAP6aMTs2Ums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.209.0/24
Signature Algorithm: sha256WithRSAEncryption
71:70:9b:dd:c0:8f:ef:02:94:b9:e5:78:43:45:81:bb:00:5d:
9e:d9:cf:16:b2:af:53:43:e4:fe:6d:19:ac:72:d0:28:89:0f:
b2:99:4f:c4:ca:b8:56:08:71:1b:a4:d9:a8:dd:5a:23:d9:93:
18:53:a8:2d:a5:77:0c:2b:93:84:45:59:e0:d6:6b:6a:a4:cd:
93:b8:fa:0a:d7:f0:fe:58:35:b7:85:11:20:d6:27:9b:21:10:
ff:65:2b:dd:97:74:60:f6:14:10:e5:23:2a:be:5d:eb:15:67:
d8:13:63:64:e4:63:f7:7a:4c:01:98:5a:d8:5a:61:86:75:21:
12:8d:1c:a8:ac:a8:66:da:1e:48:43:4c:13:6e:bd:70:33:33:
6f:ff:fd:50:c0:dc:e9:14:8a:6f:b7:ca:65:c8:57:b3:c7:bf:
d4:2f:b4:a6:04:90:fc:25:a9:30:97:fd:e2:fe:35:a9:93:1c:
70:04:71:a4:83:ca:51:86:e1:99:79:95:b1:30:b2:ef:de:93:
3e:88:fe:04:15:10:77:5f:12:2c:c7:6b:f4:da:9e:7d:09:d4:
3a:59:23:91:44:0f:40:e7:28:5c:7a:1f:d7:c8:ba:11:5c:d3:
67:28:4a:63:c6:6e:cb:46:9b:5a:55:bb:3b:5c:51:c3:43:2b:
13:8f:4f:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNidAGlBYXy3odst1j+hBj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4
MzkwOTcwHhcNMjQxMTI1MDgzMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODI4YmJmNTJlNDY4MGEzNWE5NWQ4YWQwMGZlOWEzMTNiMzY1MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qU4f1HiUEk+BtNHymEzO+uD+DZw
0A5qtP98hlekKVxQ6tRG8lkvdsLS9rlAyQWR5x+sxVfwYV/ObimSdHXyYEglekmb
3FvSsVsBO27ResqN+AuLqndQSDGoO5IG2SzTzqzIKCJ1GP8FWp/J/+RlORSX9EYs
5JEq8NTlbdnQXRPFOuRb3Dvt73nAcJJNCyz02LLSfdwNCe7CEL0gUIR9xEvch1XZ
AIavsjlmuy1y1qrXQKVLLmktzOngq/0mR+I7/bi+nTgcUhhgPWYwMnrbJyaqTSdq
MAuT/GnJ0AgGXp+UoLBUekHWyV+uIkhq5W0OsZ2tVs4H9D9yH5QsnwyjuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgou/UuRoCjWpXYrQD+mjE7NlJrMB8GA1UdIwQY
MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt
Y2E4MGJhZGQ3OWJmLzEvdUNpNzlTNUdnS05hbGRpdEFQNmFNVHMyVW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm
LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7RMA0G
CSqGSIb3DQEBCwUAA4IBAQBxcJvdwI/vApS55XhDRYG7AF2e2c8Wsq9TQ+T+bRms
ctAoiQ+ymU/EyrhWCHEbpNmo3Voj2ZMYU6gtpXcMK5OERVng1mtqpM2TuPoK1/D+
WDW3hREg1iebIRD/ZSvdl3Rg9hQQ5SMqvl3rFWfYE2Nk5GP3ekwBmFrYWmGGdSES
jRyorKhm2h5IQ0wTbr1wMzNv//1QwNzpFIpvt8plyFezx7/UL7SmBJD8Jakwl/3i
/jWpkxxwBHGkg8pRhuGZeZWxMLLv3pM+iP4EFRB3XxIsx2v02p59CdQ6WSORRA9A
5yhceh/XyLoRXNNnKEpjxm7LRptaVbs7XFHDQysTj0+u
-----END CERTIFICATE-----
Generated at Sat Dec 28 02:55:32 2024 by rpki-client on console-ams.rpki-client.org