Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/UGwwTRlu-c3aAM8xDXa7VWk-xCg.roa
File: UGwwTRlu-c3aAM8xDXa7VWk-xCg.roa (raw, json)
Hash identifier: Ls0mGzQ02LYqcI4VoHLNVJV8vbf9j5F0Pr8Rzw7oVV8=
Subject key identifier: 50:6C:30:4D:19:6E:F9:CD:DA:00:CF:31:0D:76:BB:55:69:3E:C4:28
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 018CC94E3B36065F00D8781B9F17F167E236
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/UGwwTRlu-c3aAM8xDXa7VWk-xCg.roa
Signing time: Tue 02 Jan 2024 08:33:16 +0000
ROA not before: Tue 02 Jan 2024 08:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.54.158.0/24 maxlen: 24
176.241.80.0/20 maxlen: 24
185.129.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3b:36:06:5f:00:d8:78:1b:9f:17:f1:67:e2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=506c304d196ef9cdda00cf310d76bb55693ec428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:3e:90:fe:c6:44:96:42:26:57:fb:11:86:
61:76:78:bd:34:44:fa:65:a7:bd:d1:90:d3:3c:c1:
a0:09:9c:0f:58:b9:2d:7a:9d:2a:81:d8:0f:69:5c:
1f:f8:7f:e7:1d:f0:5b:47:a4:55:6c:00:27:92:7d:
65:5f:74:c1:f3:27:1c:57:98:5a:e6:3b:ba:ac:84:
2f:07:28:7d:9d:59:2e:c4:19:f1:4d:af:0f:65:f6:
e6:56:de:fd:0d:91:c3:4d:ed:32:e8:27:15:e2:9d:
b5:a2:c4:46:85:ea:e3:af:b4:74:4e:c4:da:87:60:
ca:0a:2a:5b:0c:71:3e:05:7a:5d:8e:2f:82:75:15:
4c:44:94:ab:3d:e9:36:25:22:4c:26:07:f6:44:9f:
38:80:91:9b:a1:d6:92:b1:7b:57:fc:7f:59:65:70:
1b:53:f7:f2:52:8d:b3:b4:b1:e1:f4:ef:a2:e0:44:
a0:b4:1f:1f:de:dd:48:dd:d5:cf:6f:8f:9d:05:bc:
40:2c:d3:bf:ae:cb:2d:ec:b0:fe:86:1f:b8:c0:7c:
30:0c:04:a4:5d:b9:cd:7f:02:93:b8:10:24:98:6e:
af:5b:14:32:c1:97:cf:4f:7a:4d:96:2b:58:11:a6:
92:ac:ef:07:d0:8f:ea:74:f6:71:50:cb:24:e0:4e:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6C:30:4D:19:6E:F9:CD:DA:00:CF:31:0D:76:BB:55:69:3E:C4:28
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/UGwwTRlu-c3aAM8xDXa7VWk-xCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.80.0/20
185.54.158.0/24
185.129.4.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:6f:52:ca:0c:ab:a3:ca:23:18:9c:c3:34:3e:47:dc:ca:4f:
09:3f:b0:5d:35:9d:f0:60:51:e7:14:12:91:a2:7d:90:f4:77:
10:e6:26:9c:50:2f:29:c7:9b:75:2f:ab:58:9b:78:79:ac:71:
58:d7:c0:75:e4:41:ea:64:28:75:2e:88:3d:57:87:26:74:a4:
f4:f2:f1:ea:11:f5:ea:ae:0c:28:27:a7:09:04:d9:68:27:3a:
20:43:d4:e5:5d:ec:48:5d:fa:5c:07:33:04:2e:4c:a2:ac:c3:
08:7b:8c:d0:52:46:30:c4:7c:9b:85:5f:dd:7f:d2:f5:e6:0b:
71:16:ec:66:13:61:f5:5e:93:e8:05:6d:d2:12:cb:eb:c3:2b:
fc:09:d8:4d:2c:3d:a4:40:9e:c6:d7:52:79:3b:97:fa:56:87:
7b:4f:99:ea:45:8d:63:81:62:a9:8f:26:ba:b1:9a:bc:6a:14:
b6:07:ec:e8:c3:20:4b:48:c9:d6:da:4f:00:e0:57:96:19:66:
9e:30:1e:9e:00:d4:3c:65:74:2a:4c:ed:83:6d:ee:a4:d6:c7:
e9:56:b9:8f:3e:03:db:0f:e7:f7:7f:b0:7a:fe:21:37:e7:6b:
8e:ed:0c:3a:09:49:55:e0:a1:b5:5e:4c:25:79:0f:ba:91:9e:
b8:06:c3:04
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJTjs2Bl8A2HgbnxfxZ+I2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGZlMjZkNDAzMTQxYmU5MDU5YWIyMTQ0MzI1YjQwMmQ0
Y2FiN2QwHhcNMjQwMTAyMDgzMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZjMzA0ZDE5NmVmOWNkZGEwMGNmMzEwZDc2YmI1NTY5M2VjNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO8+kP7GRJZCJlf7EYZhdni9NET6
Zae90ZDTPMGgCZwPWLktep0qgdgPaVwf+H/nHfBbR6RVbAAnkn1lX3TB8yccV5ha
5ju6rIQvByh9nVkuxBnxTa8PZfbmVt79DZHDTe0y6CcV4p21osRGherjr7R0TsTa
h2DKCipbDHE+BXpdji+CdRVMRJSrPek2JSJMJgf2RJ84gJGbodaSsXtX/H9ZZXAb
U/fyUo2ztLHh9O+i4ESgtB8f3t1I3dXPb4+dBbxALNO/rsst7LD+hh+4wHwwDASk
XbnNfwKTuBAkmG6vWxQywZfPT3pNlitYEaaSrO8H0I/qdPZxUMsk4E4U+QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFBsME0ZbvnN2gDPMQ12u1VpPsQoMB8GA1UdIwQY
MBaAFGTf4m1AMUG+kFmrIUQyW0AtTKt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDct
ZjY1NzUxOWQwMjMzLzEvVUd3d1RSbHUtYzNhQU04eERYYTdWV2steENnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDctZjY1NzUxOWQwMjMz
LzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEsPFQAwQA
uTaeAwQCuYEEMA0GCSqGSIb3DQEBCwUAA4IBAQC/b1LKDKujyiMYnMM0Pkfcyk8J
P7BdNZ3wYFHnFBKRon2Q9HcQ5iacUC8px5t1L6tYm3h5rHFY18B15EHqZCh1Log9
V4cmdKT08vHqEfXqrgwoJ6cJBNloJzogQ9TlXexIXfpcBzMELkyirMMIe4zQUkYw
xHybhV/df9L15gtxFuxmE2H1XpPoBW3SEsvrwyv8CdhNLD2kQJ7G11J5O5f6Vod7
T5nqRY1jgWKpjya6sZq8ahS2B+zowyBLSMnW2k8A4FeWGWaeMB6eANQ8ZXQqTO2D
be6k1sfpVrmPPgPbD+f3f7B6/iE352uO7Qw6CUlV4KG1XkwleQ+6kZ64BsME
-----END CERTIFICATE-----
Generated at Thu May 2 15:17:28 2024 by rpki-client on console-ams.rpki-client.org