Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UIzSrAW6jMwEc5RWspvDo5kaBpg.roa
File: UIzSrAW6jMwEc5RWspvDo5kaBpg.roa (raw, json)
Hash identifier: MKg6Q3FhaEHaz8PHWzK36RmAfFZME8jdV8XNvRt2YkA=
Subject key identifier: 50:8C:D2:AC:05:BA:8C:CC:04:73:94:56:B2:9B:C3:A3:99:1A:06:98
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018E1006BEAD5C04BB471DA10F46BEBB89F4
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UIzSrAW6jMwEc5RWspvDo5kaBpg.roa
Signing time: Tue 05 Mar 2024 19:11:01 +0000
ROA not before: Tue 05 Mar 2024 19:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51540
IP address blocks: 31.210.39.0/24 maxlen: 24
78.135.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:06:be:ad:5c:04:bb:47:1d:a1:0f:46:be:bb:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 5 19:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=508cd2ac05ba8ccc04739456b29bc3a3991a0698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:17:c8:58:cc:5f:c5:b6:26:1d:05:a4:f6:a9:
72:e6:b4:14:49:97:6d:bd:e2:ea:94:5b:9b:a8:c2:
24:73:7f:c9:1f:3b:82:4d:83:64:c2:c8:52:31:fa:
79:3d:89:5f:78:b6:2c:21:3f:79:7d:fc:6c:fb:91:
d4:60:3a:1b:ab:a3:aa:0b:04:9f:68:ce:df:3b:c0:
6b:96:b7:ce:b4:3d:f8:b0:0a:14:13:66:3d:08:d1:
f7:2f:c2:66:7f:dd:79:d3:4f:30:94:5a:21:b1:ad:
48:0f:7d:8b:07:1f:e8:5c:6f:d6:8d:bd:c5:6b:d1:
9a:24:89:e8:e6:b6:47:15:b1:42:c9:4b:e6:0c:4f:
97:69:b2:90:f9:67:89:69:20:e7:71:a4:12:3b:ef:
45:42:7c:64:88:da:0f:b6:84:10:4e:1c:41:6f:92:
b2:c9:09:c4:79:79:06:13:9b:74:15:cc:da:ff:6e:
2f:ca:bf:97:b6:9d:e6:41:25:15:ac:9a:8f:32:ba:
8e:21:7c:1a:2c:67:55:9c:a2:b2:b0:ee:31:e0:d0:
14:55:98:85:b9:0b:b7:43:e2:34:c5:73:b7:35:19:
7f:1b:41:9e:00:74:d4:ce:e3:f5:f3:b9:f6:df:4f:
cf:32:a9:8e:54:9a:0c:e4:14:75:1b:5d:c3:b0:48:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:D2:AC:05:BA:8C:CC:04:73:94:56:B2:9B:C3:A3:99:1A:06:98
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UIzSrAW6jMwEc5RWspvDo5kaBpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.39.0/24
78.135.84.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9c:b6:97:d7:0c:e8:cb:2d:9d:b4:a9:ba:79:72:38:4f:61:
5f:28:34:a2:72:63:54:99:69:da:06:c8:80:71:7f:d4:bc:60:
fd:07:98:b5:bf:aa:3c:c8:df:19:5d:8e:92:50:45:5e:56:93:
32:63:0a:3a:46:fd:1d:c3:04:b4:77:9c:68:4a:1a:48:25:82:
d5:a5:4d:a9:6c:48:e1:18:bf:7e:46:bb:9d:d4:91:f1:92:51:
c5:b2:89:bc:3b:e0:4d:53:95:67:4a:2f:3d:e7:02:d6:0c:d9:
60:f1:88:fd:1e:96:b4:c2:b4:21:dc:76:05:ba:fb:74:0b:e5:
7c:5b:f4:10:ab:3f:b1:4a:22:2b:d5:64:e4:96:0b:8f:d9:87:
cc:b7:1d:11:2e:29:70:4a:0e:6a:79:d4:1f:8c:f9:ca:a1:93:
f1:c4:34:74:47:70:af:cc:d1:ba:66:c2:ee:94:04:a3:2f:c4:
a4:6d:d7:52:0a:d7:d6:d4:6d:78:bd:8d:7c:0b:38:b3:99:df:
b2:b4:6e:f2:97:d7:83:00:64:32:74:f4:b1:da:5f:20:98:6f:
d6:cc:05:c5:98:fe:b6:fc:2a:94:47:27:d5:89:dc:cd:a5:88:
59:8f:ea:20:59:77:37:4e:ba:2f:04:7c:c1:27:c1:b6:d1:53:
1b:11:3e:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY4QBr6tXAS7Rx2hD0a+u4n0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMzA1MTkxMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDhjZDJhYzA1YmE4Y2NjMDQ3Mzk0NTZiMjliYzNhMzk5MWEwNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghfIWMxfxbYmHQWk9qly5rQUSZdt
veLqlFubqMIkc3/JHzuCTYNkwshSMfp5PYlfeLYsIT95ffxs+5HUYDobq6OqCwSf
aM7fO8BrlrfOtD34sAoUE2Y9CNH3L8Jmf915008wlFohsa1ID32LBx/oXG/Wjb3F
a9GaJIno5rZHFbFCyUvmDE+XabKQ+WeJaSDncaQSO+9FQnxkiNoPtoQQThxBb5Ky
yQnEeXkGE5t0Fcza/24vyr+Xtp3mQSUVrJqPMrqOIXwaLGdVnKKysO4x4NAUVZiF
uQu3Q+I0xXO3NRl/G0GeAHTUzuP187n230/PMqmOVJoM5BR1G13DsEj8KQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFCM0qwFuozMBHOUVrKbw6OZGgaYMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvVUl6U3JBVzZqTXdFYzVSV3NwdkRvNWthQnBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH9InAwQA
TodUMA0GCSqGSIb3DQEBCwUAA4IBAQACnLaX1wzoyy2dtKm6eXI4T2FfKDSicmNU
mWnaBsiAcX/UvGD9B5i1v6o8yN8ZXY6SUEVeVpMyYwo6Rv0dwwS0d5xoShpIJYLV
pU2pbEjhGL9+Rrud1JHxklHFsom8O+BNU5VnSi895wLWDNlg8Yj9Hpa0wrQh3HYF
uvt0C+V8W/QQqz+xSiIr1WTklguP2YfMtx0RLilwSg5qedQfjPnKoZPxxDR0R3Cv
zNG6ZsLulASjL8SkbddSCtfW1G14vY18Czizmd+ytG7yl9eDAGQydPSx2l8gmG/W
zAXFmP62/CqURyfVidzNpYhZj+ogWXc3TrovBHzBJ8G20VMbET6M
-----END CERTIFICATE-----
Generated at Mon May 20 17:43:41 2024 by rpki-client on console-ams.rpki-client.org