Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa
File: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (raw, json)
Hash identifier: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=
Subject key identifier: 50:A0:8E:2B:E5:B7:A3:1D:F0:43:EF:F1:42:9E:8D:BB:F0:F0:0B:3E
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 0194497C2102A8709597666B0E924D066D4B
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa
Signing time: Thu 09 Jan 2025 05:14:19 +0000
ROA not before: Thu 09 Jan 2025 05:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200525
IP address blocks: 193.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:7c:21:02:a8:70:95:97:66:6b:0e:92:4d:06:6d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 9 05:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50a08e2be5b7a31df043eff1429e8dbbf0f00b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:60:55:5d:0f:24:3d:61:ed:30:d2:9a:9a:
f4:88:cb:c2:e1:ea:d4:f4:85:67:62:65:2f:ef:c0:
f9:9b:f8:3e:bd:2f:6b:03:4d:c4:34:87:e2:4a:63:
21:ba:46:70:c1:5b:9c:f5:f2:eb:8a:cc:45:9f:6c:
35:34:91:41:5b:30:ac:76:a5:21:78:e7:ae:9b:40:
9a:5e:73:d0:dc:c3:0a:4f:f1:0c:ce:f0:48:bf:6f:
07:3a:9d:04:3d:a9:5d:8c:73:cd:a3:cf:0d:a2:fe:
e0:4b:89:c2:94:f7:80:c4:fc:c2:2c:fa:36:be:01:
40:3e:0f:bc:79:7a:e8:b1:39:c5:46:b5:4a:28:5d:
c2:ce:f6:d1:ba:f6:c8:6d:46:c9:d3:34:b0:08:13:
4e:d3:4d:01:a2:08:55:a0:6d:c9:0f:46:93:ff:a4:
59:37:e5:dd:8c:a0:3e:05:26:71:f9:8d:6b:3c:8c:
91:93:16:08:31:3a:79:ee:47:04:fd:cb:e1:ca:1b:
6e:cb:3d:a3:0a:24:04:b3:0e:73:4a:9a:ac:8f:52:
93:2d:cb:be:99:3b:a6:eb:ea:4f:81:c4:d6:19:dc:
fe:b6:12:39:36:96:92:8f:bd:16:39:6e:60:f6:27:
75:82:fb:2b:8f:65:c6:85:a4:9b:dd:94:68:d5:7f:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A0:8E:2B:E5:B7:A3:1D:F0:43:EF:F1:42:9E:8D:BB:F0:F0:0B:3E
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e5:8c:ec:15:da:03:b3:77:ba:f8:c6:3c:6f:84:47:92:79:
b5:2b:4d:31:30:9d:63:bb:d2:f3:6a:8c:14:a4:c1:fc:3d:d8:
1d:dc:35:3e:55:9a:02:1e:3c:a5:5d:84:d5:d0:c9:7f:a8:05:
a5:32:11:13:ba:70:34:bb:25:4c:1b:50:09:33:b9:50:74:9e:
57:ed:3d:62:c6:83:7a:9a:48:8b:e5:54:70:71:48:09:a5:5b:
82:56:ee:ef:8f:07:8e:da:73:16:45:fa:a4:9f:b5:6f:71:2f:
6a:d1:37:09:cf:27:0d:c2:c8:c6:88:15:59:cd:c1:53:17:8f:
e2:82:32:b8:1c:1c:4c:4e:a2:f5:15:9d:a9:e2:4e:50:dd:4d:
bf:3d:9a:9a:a7:55:b7:28:38:94:48:13:84:5b:cd:68:d6:dc:
71:b8:5c:a7:6c:46:6a:e7:ae:8e:c0:91:23:2d:32:de:d0:1c:
76:4a:56:a0:e4:27:5e:a8:0b:7e:6d:bf:ea:45:85:1f:37:1b:
75:9a:7f:6d:89:49:3f:5a:ef:1f:29:6a:93:c2:f3:2f:33:ce:
6b:82:de:98:f3:13:4c:92:44:5a:b2:f7:e6:ef:43:84:d9:b6:
fc:e4:74:71:21:3c:30:ef:93:8a:71:14:cd:4a:ae:b3:bb:3e:
73:93:bd:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRJfCECqHCVl2ZrDpJNBm1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2
OWYyYTAwHhcNMjUwMTA5MDUxNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGEwOGUyYmU1YjdhMzFkZjA0M2VmZjE0MjllOGRiYmYwZjAwYjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSRgVV0PJD1h7TDSmpr0iMvC4erU
9IVnYmUv78D5m/g+vS9rA03ENIfiSmMhukZwwVuc9fLrisxFn2w1NJFBWzCsdqUh
eOeum0CaXnPQ3MMKT/EMzvBIv28HOp0EPaldjHPNo88Nov7gS4nClPeAxPzCLPo2
vgFAPg+8eXrosTnFRrVKKF3CzvbRuvbIbUbJ0zSwCBNO000BoghVoG3JD0aT/6RZ
N+XdjKA+BSZx+Y1rPIyRkxYIMTp57kcE/cvhyhtuyz2jCiQEsw5zSpqsj1KTLcu+
mTum6+pPgcTWGdz+thI5NpaSj70WOW5g9id1gvsrj2XGhaSb3ZRo1X9awQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFCgjivlt6Md8EPv8UKejbvw8As+MB8GA1UdIwQY
MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt
NDI4NTk5ODM5MmQzLzEvVUtDT0stVzNveDN3US1feFFwNk51X0R3Q3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz
LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV0/MA0G
CSqGSIb3DQEBCwUAA4IBAQA25YzsFdoDs3e6+MY8b4RHknm1K00xMJ1ju9LzaowU
pMH8Pdgd3DU+VZoCHjylXYTV0Ml/qAWlMhETunA0uyVMG1AJM7lQdJ5X7T1ixoN6
mkiL5VRwcUgJpVuCVu7vjweO2nMWRfqkn7VvcS9q0TcJzycNwsjGiBVZzcFTF4/i
gjK4HBxMTqL1FZ2p4k5Q3U2/PZqap1W3KDiUSBOEW81o1txxuFynbEZq566OwJEj
LTLe0Bx2Slag5CdeqAt+bb/qRYUfNxt1mn9tiUk/Wu8fKWqTwvMvM85rgt6Y8xNM
kkRasvfm70OE2bb85HRxITww75OKcRTNSq6zuz5zk70V
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:18:08 2025 by rpki-client