Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa
File: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (raw, json)
Hash identifier: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=
Subject key identifier: 51:55:BE:20:41:42:0A:AE:DA:86:93:DD:8F:D5:98:EC:A9:FC:42:A1
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0194258F9F9383DFFE85C62F19DC7980D064
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56995
IP address blocks: 188.161.104.0/21 maxlen: 21
188.161.104.0/24 maxlen: 24
188.161.105.0/24 maxlen: 24
188.161.106.0/24 maxlen: 24
188.161.107.0/24 maxlen: 24
188.161.108.0/24 maxlen: 24
188.161.109.0/24 maxlen: 24
188.161.110.0/24 maxlen: 24
188.161.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9f:93:83:df:fe:85:c6:2f:19:dc:79:80:d0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5155be2041420aaeda8693dd8fd598eca9fc42a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:7f:97:9b:60:15:91:f7:1d:e9:73:29:8f:
3a:6a:5f:d1:4f:5e:99:87:58:da:a5:cc:4b:43:9d:
e1:4f:f0:40:6d:f1:78:ea:37:39:aa:34:de:19:38:
b3:8c:51:50:09:4d:a1:a7:54:85:f8:32:b6:29:e4:
d6:0b:31:50:d8:13:db:9b:4b:43:48:00:7d:1a:80:
48:ec:18:14:69:d3:93:78:1d:2f:8f:53:95:ab:d7:
0a:7b:9a:68:ed:c0:3f:10:f0:49:d4:b5:d3:39:e0:
6f:1b:04:d7:ef:09:86:98:60:8b:47:3f:d1:2d:95:
c7:f0:a9:86:b8:a2:f1:05:f6:74:42:c1:67:4b:93:
31:f8:3d:3a:2b:49:b6:8e:52:bc:c5:61:14:6e:3c:
e8:37:38:b3:5b:ee:8c:5a:65:15:d3:fa:d6:36:10:
d8:e9:a8:11:a7:69:62:4a:7e:34:55:10:62:67:f9:
ec:e6:65:b2:11:6e:91:cb:0f:2a:98:f2:77:9c:18:
59:5a:14:f2:86:45:a1:a3:5c:ca:b4:44:ee:b4:15:
1f:13:62:b9:a7:8e:13:cb:2a:1a:e9:26:57:32:8a:
29:49:e7:1c:c5:4a:e6:82:b7:3f:96:96:16:8f:e6:
59:0b:84:bd:e7:2c:da:98:40:56:dd:d5:4b:50:ea:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:BE:20:41:42:0A:AE:DA:86:93:DD:8F:D5:98:EC:A9:FC:42:A1
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.161.104.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:97:6a:20:1e:d3:b3:28:9f:96:50:1e:f6:99:8e:e0:6b:f5:
17:6a:b2:b6:f2:70:28:30:c8:45:49:dc:e8:d1:c2:5a:52:f1:
e8:04:2b:47:87:dc:6c:24:d6:20:69:cf:c1:0a:a3:a6:49:48:
5c:97:38:f3:28:44:59:f6:43:f7:ac:bf:9d:89:21:b5:08:ca:
28:d1:a4:a1:6c:03:8c:c4:32:dd:2a:53:c3:4d:d6:aa:9b:b8:
f3:c0:c0:83:77:db:5a:bf:00:cb:e0:40:6d:8d:22:6b:53:68:
71:44:0c:bb:97:47:44:a2:47:13:ca:83:aa:ba:8b:35:24:08:
bb:df:57:f3:5c:b9:f4:2d:99:20:ab:1c:a9:10:78:d9:da:36:
50:21:b4:56:9d:ff:8b:65:99:23:50:9f:a8:98:ba:8b:fb:ed:
49:6c:de:bb:87:e5:88:96:bc:bf:e4:bb:67:9f:77:bb:55:4b:
b8:c6:50:bb:1b:35:a7:a2:2b:cc:f7:66:1e:de:cb:14:72:ad:
40:97:77:88:63:51:f1:6d:66:81:46:ae:41:4b:78:48:68:bd:
30:1e:b6:2b:1c:03:2c:47:95:3c:51:52:4d:99:79:7f:a0:88:
8d:27:3f:d1:df:db:3f:32:f2:82:fb:6b:27:6c:d0:96:99:c2:
91:36:1c:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5+Tg9/+hcYvGdx5gNBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm
ZTc0ZjkwHhcNMjUwMTAyMDU0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTU1YmUyMDQxNDIwYWFlZGE4NjkzZGQ4ZmQ1OThlY2E5ZmM0MmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgp/l5tgFZH3HelzKY86al/RT16Z
h1japcxLQ53hT/BAbfF46jc5qjTeGTizjFFQCU2hp1SF+DK2KeTWCzFQ2BPbm0tD
SAB9GoBI7BgUadOTeB0vj1OVq9cKe5po7cA/EPBJ1LXTOeBvGwTX7wmGmGCLRz/R
LZXH8KmGuKLxBfZ0QsFnS5Mx+D06K0m2jlK8xWEUbjzoNzizW+6MWmUV0/rWNhDY
6agRp2liSn40VRBiZ/ns5mWyEW6Ryw8qmPJ3nBhZWhTyhkWho1zKtETutBUfE2K5
p44Tyyoa6SZXMoopSeccxUrmgrc/lpYWj+ZZC4S95yzamEBW3dVLUOrpwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFFVviBBQgqu2oaT3Y/VmOyp/EKhMB8GA1UdIwQY
MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt
ZWI1YTYyN2U3NmEzLzEvVVZXLUlFRkNDcTdhaHBQZGo5V1k3S244UXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz
LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvKFoMA0G
CSqGSIb3DQEBCwUAA4IBAQAul2ogHtOzKJ+WUB72mY7ga/UXarK28nAoMMhFSdzo
0cJaUvHoBCtHh9xsJNYgac/BCqOmSUhclzjzKERZ9kP3rL+diSG1CMoo0aShbAOM
xDLdKlPDTdaqm7jzwMCDd9tavwDL4EBtjSJrU2hxRAy7l0dEokcTyoOquos1JAi7
31fzXLn0LZkgqxypEHjZ2jZQIbRWnf+LZZkjUJ+omLqL++1JbN67h+WIlry/5Ltn
n3e7VUu4xlC7GzWnoivM92Ye3ssUcq1Al3eIY1HxbWaBRq5BS3hIaL0wHrYrHAMs
R5U8UVJNmXl/oIiNJz/R39s/MvKC+2snbNCWmcKRNhxT
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:12 2025 by rpki-client