Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/Usx3zOIIZ-azrRU-NmaoSl0TB0g.roa
File: Usx3zOIIZ-azrRU-NmaoSl0TB0g.roa (raw, json)
Hash identifier: Ngxx+oynCGzW8PJPWi8MCdFvcczyJCwtxMhOIsVJZnE=
Subject key identifier: 52:CC:77:CC:E2:08:67:E6:B3:AD:15:3E:36:66:A8:4A:5D:13:07:48
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 018CC8DF0BA257DB9EA7F7C464ED1CF55266
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/Usx3zOIIZ-azrRU-NmaoSl0TB0g.roa
Signing time: Tue 02 Jan 2024 06:31:49 +0000
ROA not before: Tue 02 Jan 2024 06:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51517
IP address blocks: 185.219.6.0/24 maxlen: 24
2a10:e300::/32 maxlen: 32
2a10:e300:8411::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0b:a2:57:db:9e:a7:f7:c4:64:ed:1c:f5:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 2 06:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52cc77cce20867e6b3ad153e3666a84a5d130748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:56:ec:e5:fa:e7:38:ee:ab:9a:a3:b1:08:8f:
f9:6a:8e:18:23:ae:fe:05:ab:93:68:15:84:22:85:
a0:22:99:5b:39:3f:fa:f1:ef:b5:24:b8:ff:b3:80:
2f:cd:ca:50:50:02:80:5b:48:16:cc:e3:45:d7:f6:
f5:ac:76:7a:e7:f2:2a:a2:80:c6:52:5c:af:d8:7f:
7d:65:29:b0:76:bf:0d:17:0b:62:6c:af:34:af:42:
fb:fa:d6:37:25:bd:61:ce:3a:26:9d:54:43:ea:8d:
df:8f:e6:03:4d:0e:c2:09:01:9c:78:e9:67:98:cd:
05:2f:ad:28:33:36:d6:58:67:ab:25:99:62:a9:07:
87:f8:3f:21:a4:0d:9d:9d:6b:fa:64:41:84:cd:3d:
1b:b6:6e:e1:29:59:83:ae:85:2c:c5:3e:df:d9:b0:
6a:e0:ec:51:6d:c3:b2:d4:6d:e3:91:7e:07:0a:f1:
f4:3b:0f:71:39:33:7c:22:da:6c:aa:2e:24:ca:ba:
ed:4e:cb:a7:06:ae:e5:41:8b:3c:b6:e9:2d:ba:8d:
8d:d6:82:00:60:86:2b:04:3a:ed:4b:b2:ae:80:66:
68:07:7b:9d:f6:8a:97:f1:ea:49:80:5b:4b:59:cc:
f2:04:6a:17:ce:62:7e:67:1b:81:94:aa:48:8f:28:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:77:CC:E2:08:67:E6:B3:AD:15:3E:36:66:A8:4A:5D:13:07:48
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/Usx3zOIIZ-azrRU-NmaoSl0TB0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.6.0/24
IPv6:
2a10:e300::/32
Signature Algorithm: sha256WithRSAEncryption
88:8f:fc:45:d3:cc:34:6c:36:ad:fc:bd:79:ff:29:ac:37:88:
d2:c4:25:99:f1:cb:a1:71:9d:7c:f9:e6:33:1a:80:12:29:86:
ae:ec:6d:1d:3f:f8:e2:33:43:af:ed:7a:33:72:6b:74:e9:1c:
fe:3b:66:dd:a3:a3:a5:90:6a:95:d5:82:8c:1f:44:d8:66:ad:
d7:e5:03:89:10:c8:7d:2d:56:4c:86:ad:5d:81:cb:13:ad:29:
4c:2e:c7:9a:c0:ee:92:73:8c:05:59:a7:0d:e1:20:ce:1e:da:
47:cc:ef:d9:1f:da:d8:b8:d6:0d:c5:c2:9b:20:68:f2:e6:4a:
43:86:c7:b9:3c:55:ff:58:f7:f3:3a:c9:e0:37:7b:7a:c7:49:
48:5d:09:70:c4:30:c8:b0:d0:0d:99:98:cd:67:08:ec:8d:11:
0b:2c:b6:8b:b1:ad:f6:16:eb:47:da:a0:bd:23:51:83:99:d5:
a1:23:6f:cf:cf:71:3e:61:4c:58:57:a8:0d:2d:53:aa:eb:55:
27:34:4b:da:21:fc:c7:a0:ad:1b:58:02:3a:d3:c7:dd:68:6a:
a8:7e:e9:17:ec:e6:4c:c5:f0:43:59:fd:8d:87:d1:ac:ca:92:
1c:9e:c2:b2:95:8c:4f:f7:5d:bd:f3:3b:ea:35:04:bf:7d:42:
50:08:5a:0f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzI3wuiV9uep/fEZO0c9VJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjQwMTAyMDYzMTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmNjNzdjY2UyMDg2N2U2YjNhZDE1M2UzNjY2YTg0YTVkMTMwNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVbs5frnOO6rmqOxCI/5ao4YI67+
BauTaBWEIoWgIplbOT/68e+1JLj/s4AvzcpQUAKAW0gWzONF1/b1rHZ65/IqooDG
Ulyv2H99ZSmwdr8NFwtibK80r0L7+tY3Jb1hzjomnVRD6o3fj+YDTQ7CCQGceOln
mM0FL60oMzbWWGerJZliqQeH+D8hpA2dnWv6ZEGEzT0btm7hKVmDroUsxT7f2bBq
4OxRbcOy1G3jkX4HCvH0Ow9xOTN8Itpsqi4kyrrtTsunBq7lQYs8tuktuo2N1oIA
YIYrBDrtS7KugGZoB3ud9oqX8epJgFtLWczyBGoXzmJ+ZxuBlKpIjyjOLQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFLMd8ziCGfms60VPjZmqEpdEwdIMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvVXN4M3pPSUlaLWF6clJVLU5tYW9TbDBUQjBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudsGMA0E
AgACMAcDBQAqEOMAMA0GCSqGSIb3DQEBCwUAA4IBAQCIj/xF08w0bDat/L15/yms
N4jSxCWZ8cuhcZ18+eYzGoASKYau7G0dP/jiM0Ov7Xozcmt06Rz+O2bdo6OlkGqV
1YKMH0TYZq3X5QOJEMh9LVZMhq1dgcsTrSlMLseawO6Sc4wFWacN4SDOHtpHzO/Z
H9rYuNYNxcKbIGjy5kpDhse5PFX/WPfzOsngN3t6x0lIXQlwxDDIsNANmZjNZwjs
jRELLLaLsa32FutH2qC9I1GDmdWhI2/Pz3E+YUxYV6gNLVOq61UnNEvaIfzHoK0b
WAI608fdaGqofukX7OZMxfBDWf2Nh9GsypIcnsKylYxP91298zvqNQS/fUJQCFoP
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:37 2024 by rpki-client on console-fra.rpki-client.org