Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/UvEHodeQN1ckDAwMNQLmy6nYG9c.roa
File: UvEHodeQN1ckDAwMNQLmy6nYG9c.roa (raw, json)
Hash identifier: m6VQa9Q52Nt/9ASckX1PnKwcXmHh91+SGhHSKaGyHCs=
Subject key identifier: 52:F1:07:A1:D7:90:37:57:24:0C:0C:0C:35:02:E6:CB:A9:D8:1B:D7
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 018CC86F5FB457016AEC38B96512E675814B
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/UvEHodeQN1ckDAwMNQLmy6nYG9c.roa
Signing time: Tue 02 Jan 2024 04:29:51 +0000
ROA not before: Tue 02 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8978
IP address blocks: 193.43.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5f:b4:57:01:6a:ec:38:b9:65:12:e6:75:81:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Jan 2 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52f107a1d7903757240c0c0c3502e6cba9d81bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:46:24:92:86:5e:79:d3:4c:7a:26:b7:62:
06:33:9a:d2:58:22:f2:17:ac:94:e7:f3:d3:97:33:
11:21:40:a0:10:cf:df:3e:d1:c4:6e:04:29:91:12:
a8:29:7c:67:bc:3a:91:58:5e:08:d8:68:59:c9:c6:
d0:66:a2:2c:f5:19:6b:12:a4:9d:22:7d:53:9b:8d:
c4:15:60:14:af:3e:fa:89:e3:3b:d1:95:cc:e0:d1:
98:e1:28:5b:f1:5e:78:c2:d0:53:1f:f3:ee:e6:7f:
b7:e7:f2:e9:d0:f0:7b:1c:76:56:c0:ec:8b:c4:6a:
d8:57:f7:cd:c1:c0:d4:54:27:88:af:ae:1b:88:ea:
84:7f:5d:66:b7:68:2f:62:33:3b:5b:5f:97:48:4d:
ce:e8:c9:e5:76:47:9f:89:b9:1a:28:cf:d5:62:30:
0c:e4:64:f0:c2:45:6a:d0:c3:5a:6b:e5:1b:75:dc:
0c:36:a0:1b:b6:47:cf:72:2d:de:67:93:98:2e:66:
cd:a3:58:d0:2e:a0:c9:ca:63:60:12:22:64:b5:e3:
ad:14:49:43:c1:bd:74:a8:02:a1:1f:8a:eb:2c:44:
ff:61:89:98:98:03:59:c3:2f:9d:3c:f9:9a:b0:ca:
4a:7a:0f:46:ab:02:f2:7a:cd:26:a8:b0:af:3c:40:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F1:07:A1:D7:90:37:57:24:0C:0C:0C:35:02:E6:CB:A9:D8:1B:D7
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/UvEHodeQN1ckDAwMNQLmy6nYG9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.128.0/22
Signature Algorithm: sha256WithRSAEncryption
67:59:80:ff:c0:fc:13:9a:3c:6f:be:16:73:13:0f:7c:f5:9d:
3c:a4:9e:c4:1c:2b:f0:c3:9c:13:60:36:3c:3e:db:c3:f5:64:
20:9f:09:3b:d8:bc:d6:e5:dd:e5:d5:28:a7:b6:de:83:95:74:
f8:32:36:78:01:3c:63:32:10:af:f8:14:c3:77:25:c0:2d:b5:
6f:3e:8f:dc:2e:fb:24:2d:4c:e8:aa:ee:f0:0d:36:ba:2d:d1:
b1:f9:2d:92:44:00:17:39:15:16:0d:5e:0f:db:d0:fa:34:68:
c2:3d:01:a7:32:36:49:9d:3e:2b:7e:8c:05:38:d9:bd:b0:c6:
41:88:f8:2c:39:dc:76:3b:85:bd:ee:2a:c6:5d:c1:9a:6f:1d:
f2:2e:2d:ff:12:51:7e:9a:21:5e:96:d5:6c:b7:c2:c9:1c:2a:
66:4f:d9:cb:7b:9c:be:e0:20:d6:ec:2b:96:16:7a:14:b5:33:
89:89:f0:c2:34:62:b8:e8:86:c9:26:dd:d5:9f:f4:86:07:54:
33:22:bc:92:82:a4:c3:f8:47:39:e7:df:41:4d:e9:6a:b3:87:
48:0c:ec:cb:89:71:0a:13:5d:7f:02:d8:3f:22:ad:b9:2f:c9:
db:44:ba:b4:b8:db:73:e5:90:8a:5e:49:2c:11:28:39:ea:41:
fb:47:e8:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb1+0VwFq7Di5ZRLmdYFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzNjZDJkMWY2ZGNmMWVlYzk3ZTg2OTQzYzRlNTNiMGM4
OGVhYWUwHhcNMjQwMTAyMDQyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmYxMDdhMWQ3OTAzNzU3MjQwYzBjMGMzNTAyZTZjYmE5ZDgxYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPpGJJKGXnnTTHomt2IGM5rSWCLy
F6yU5/PTlzMRIUCgEM/fPtHEbgQpkRKoKXxnvDqRWF4I2GhZycbQZqIs9RlrEqSd
In1Tm43EFWAUrz76ieM70ZXM4NGY4Shb8V54wtBTH/Pu5n+35/Lp0PB7HHZWwOyL
xGrYV/fNwcDUVCeIr64biOqEf11mt2gvYjM7W1+XSE3O6MnldkefibkaKM/VYjAM
5GTwwkVq0MNaa+UbddwMNqAbtkfPci3eZ5OYLmbNo1jQLqDJymNgEiJkteOtFElD
wb10qAKhH4rrLET/YYmYmANZwy+dPPmasMpKeg9GqwLyes0mqLCvPEDCowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFLxB6HXkDdXJAwMDDUC5sup2BvXMB8GA1UdIwQY
MBaAFBUzzS0fbc8e7JfoaUPE5TsMiOquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMt
OWZlNTViMTcxNjgzLzEvVXZFSG9kZVFOMWNrREF3TU5RTG15Nm5ZRzljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMtOWZlNTViMTcxNjgz
LzEvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSuAMA0G
CSqGSIb3DQEBCwUAA4IBAQBnWYD/wPwTmjxvvhZzEw989Z08pJ7EHCvww5wTYDY8
PtvD9WQgnwk72LzW5d3l1Sintt6DlXT4MjZ4ATxjMhCv+BTDdyXALbVvPo/cLvsk
LUzoqu7wDTa6LdGx+S2SRAAXORUWDV4P29D6NGjCPQGnMjZJnT4rfowFONm9sMZB
iPgsOdx2O4W97irGXcGabx3yLi3/ElF+miFeltVst8LJHCpmT9nLe5y+4CDW7CuW
FnoUtTOJifDCNGK46IbJJt3Vn/SGB1QzIrySgqTD+Ec5599BTelqs4dIDOzLiXEK
E11/Atg/Iq25L8nbRLq0uNtz5ZCKXkksESg56kH7R+jZ
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:30 2024 by rpki-client on console-ams.rpki-client.org