Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UUOQANzKPXoPU3KJ6lTuddyMe20.roa
File: UUOQANzKPXoPU3KJ6lTuddyMe20.roa (raw, json)
Hash identifier: 0oiUCwv3VkXyE5FEks5VKLwPT6FlWPLoR4Xk9WMAHag=
Subject key identifier: 51:43:90:00:DC:CA:3D:7A:0F:53:72:89:EA:54:EE:75:DC:8C:7B:6D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D395286368C1178C9D2A2CDA0057C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UUOQANzKPXoPU3KJ6lTuddyMe20.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 77.47.252.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 04:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:39:52:86:36:8c:11:78:c9:d2:a2:cd:a0:05:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51439000dcca3d7a0f537289ea54ee75dc8c7b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:1d:72:35:cd:6a:d3:e8:05:2c:df:6b:09:
b0:cc:5b:11:c5:ff:8c:20:fd:0d:55:17:4c:4e:da:
55:c6:13:f0:f5:da:a4:eb:08:ab:0f:da:b0:33:b4:
d6:d6:da:98:92:14:b0:66:f4:27:85:35:f3:1b:64:
6a:64:4f:f2:ed:41:fd:a6:e9:8d:d3:11:01:f2:ec:
d7:5b:b3:4f:9b:ab:0d:17:05:8d:8b:a5:53:a0:08:
82:70:62:ce:56:41:2e:e8:06:81:bb:15:13:d7:db:
96:88:9c:92:24:f3:4b:0d:49:db:c5:f8:93:c9:d4:
a8:fd:7d:e2:17:31:69:11:86:46:d9:e8:0a:ab:9b:
7d:8e:85:2b:2f:25:76:e7:b7:21:26:28:c8:99:82:
fd:d2:31:00:68:b5:27:15:f0:cd:66:09:78:83:7f:
23:17:ca:d7:94:93:a1:09:7f:82:9c:08:51:9e:8c:
44:77:f9:ab:8d:42:67:86:f8:fc:6b:68:7e:e5:e3:
f9:82:38:07:06:97:05:b9:f8:80:dc:de:41:8b:e0:
5d:4d:e3:47:7a:8d:93:0b:e8:51:21:04:2b:02:be:
08:63:61:91:71:12:73:97:fc:f0:54:c5:56:3f:68:
a8:ea:43:11:d8:da:b2:2b:b8:f0:e1:80:b8:8f:9d:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:90:00:DC:CA:3D:7A:0F:53:72:89:EA:54:EE:75:DC:8C:7B:6D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UUOQANzKPXoPU3KJ6lTuddyMe20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:af:2f:41:48:c6:88:06:ad:a1:74:2d:78:50:c1:55:3f:e9:
c3:69:39:a8:7e:67:eb:e6:35:94:2b:07:b0:2a:32:db:c7:d0:
f5:d6:85:ef:3c:ae:37:6c:20:43:e1:fb:a5:d4:ea:15:e2:32:
63:34:d9:00:0c:1a:60:f5:be:7c:7d:50:cb:74:bb:92:d4:fd:
db:49:b4:57:91:d0:e1:e2:43:8f:d3:2a:4a:d4:64:db:e2:38:
01:26:63:b6:57:c2:46:e7:cb:46:a6:5a:b3:fa:6d:bd:72:81:
46:31:f7:64:bd:1c:0b:ce:5a:db:9f:25:cd:10:a8:75:01:71:
fc:85:68:6c:d0:a6:05:c6:5e:4a:22:01:01:96:f8:c1:1a:ae:
cf:ad:f9:36:67:db:b0:a0:4b:66:2f:89:43:cf:a7:f4:74:f1:
65:c9:0a:19:db:ba:77:d6:36:4e:e2:d5:95:d4:61:c2:80:63:
d1:1e:7c:0a:1f:30:70:a5:0d:a4:6f:20:f0:1f:42:2f:38:8b:
d0:87:07:05:b4:34:fb:c0:02:f0:bd:07:fe:19:e6:da:c9:6d:
2f:5e:83:5b:2b:14:b8:27:0b:aa:84:67:f6:64:a5:0a:f2:7e:
37:16:02:81:43:e1:ff:bc:15:31:d2:89:a1:a4:bf:73:7c:68:
ed:02:f1:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJTTlShjaMEXjJ0qLNoAV8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQwMTAyMDgzMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTQzOTAwMGRjY2EzZDdhMGY1MzcyODllYTU0ZWU3NWRjOGM3YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo4dcjXNatPoBSzfawmwzFsRxf+M
IP0NVRdMTtpVxhPw9dqk6wirD9qwM7TW1tqYkhSwZvQnhTXzG2RqZE/y7UH9pumN
0xEB8uzXW7NPm6sNFwWNi6VToAiCcGLOVkEu6AaBuxUT19uWiJySJPNLDUnbxfiT
ydSo/X3iFzFpEYZG2egKq5t9joUrLyV257chJijImYL90jEAaLUnFfDNZgl4g38j
F8rXlJOhCX+CnAhRnoxEd/mrjUJnhvj8a2h+5eP5gjgHBpcFufiA3N5Bi+BdTeNH
eo2TC+hRIQQrAr4IY2GRcRJzl/zwVMVWP2io6kMR2NqyK7jw4YC4j50cdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFFDkADcyj16D1NyiepU7nXcjHttMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvVVVPUUFOektQWG9QVTNLSjZsVHVkZHlNZTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDTS/4AwQC
w7KAMA0GCSqGSIb3DQEBCwUAA4IBAQCNry9BSMaIBq2hdC14UMFVP+nDaTmofmfr
5jWUKwewKjLbx9D11oXvPK43bCBD4ful1OoV4jJjNNkADBpg9b58fVDLdLuS1P3b
SbRXkdDh4kOP0ypK1GTb4jgBJmO2V8JG58tGplqz+m29coFGMfdkvRwLzlrbnyXN
EKh1AXH8hWhs0KYFxl5KIgEBlvjBGq7Prfk2Z9uwoEtmL4lDz6f0dPFlyQoZ27p3
1jZO4tWV1GHCgGPRHnwKHzBwpQ2kbyDwH0IvOIvQhwcFtDT7wALwvQf+GebayW0v
XoNbKxS4JwuqhGf2ZKUK8n43FgKBQ+H/vBUx0omhpL9zfGjtAvHS
-----END CERTIFICATE-----
Generated at Sat May 4 09:11:33 2024 by rpki-client on console-ams.rpki-client.org