Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/uWay8Qb-ypcDd7A2AWYsDwJWc_E.roa
File: uWay8Qb-ypcDd7A2AWYsDwJWc_E.roa (raw, json)
Hash identifier: vzg2RnVcm3vUeAQxbt9XODe8QIBH8qEzbU8VvD7RW+Q=
Subject key identifier: B9:66:B2:F1:06:FE:CA:97:03:77:B0:36:01:66:2C:0F:02:56:73:F1
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018CC8DF3045DE2E07A74F4C1CCDE57340BB
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/uWay8Qb-ypcDd7A2AWYsDwJWc_E.roa
Signing time: Tue 02 Jan 2024 06:31:59 +0000
ROA not before: Tue 02 Jan 2024 06:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202320
IP address blocks: 147.234.21.0/24 maxlen: 24
147.234.21.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:30:45:de:2e:07:a7:4f:4c:1c:cd:e5:73:40:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 06:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b966b2f106feca970377b03601662c0f025673f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:89:bb:02:d8:46:65:e2:07:cd:ab:c9:1e:
35:d0:82:7d:b1:90:1f:cf:56:87:2f:29:d3:5d:64:
d9:15:bf:6f:a5:24:d3:ad:c5:15:c8:fa:70:b7:93:
e1:49:eb:51:9b:f6:09:98:7d:95:98:1a:bf:35:85:
62:96:25:1b:14:5f:78:4c:cc:3f:31:1b:21:46:80:
32:84:b8:1c:55:c4:3a:21:47:92:f4:55:c6:03:a8:
93:22:be:8c:45:51:5a:27:ff:96:02:91:f9:96:5b:
c6:0b:19:f9:c2:35:c5:7d:61:11:7a:10:fe:31:42:
79:fb:84:30:3e:df:41:a1:9e:15:01:f6:4b:51:ee:
7f:54:b2:93:12:2b:64:17:dd:e0:bc:a7:66:b9:ca:
43:6d:1e:c8:6c:a6:42:ae:93:d0:8c:a5:3f:25:a8:
57:25:1b:22:da:3b:9f:29:9f:65:ef:7f:9c:0a:e1:
72:8d:fe:98:1f:9e:f6:c8:cf:2c:9c:ca:d5:b4:b0:
44:2c:cd:c5:3b:dd:6d:f8:66:c0:91:4f:ba:f0:94:
ea:28:14:97:2c:96:c9:1f:78:20:8f:8f:aa:b2:61:
84:ca:06:e4:52:b5:d8:cc:22:48:d4:78:69:3c:4b:
5d:f4:f9:a0:de:9f:b7:e5:98:ff:bb:61:2a:3d:65:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:B2:F1:06:FE:CA:97:03:77:B0:36:01:66:2C:0F:02:56:73:F1
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/uWay8Qb-ypcDd7A2AWYsDwJWc_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:57:cc:d8:54:db:b8:46:7f:d5:b2:de:7c:69:51:b4:09:76:
42:00:92:00:53:6a:47:8b:51:94:f0:e2:d8:75:59:ba:22:07:
22:0c:79:c6:0e:6d:c0:74:ba:d0:c2:41:4b:fe:74:38:6c:68:
5e:cb:14:91:1c:fb:11:af:4e:48:20:74:70:61:b2:92:27:b1:
74:4f:fa:da:c6:43:9c:1f:ad:98:37:bb:08:4f:6d:c3:b8:23:
c4:fa:37:07:b0:89:38:28:be:6f:dd:29:ab:61:5c:74:e6:52:
36:b2:53:b7:af:ea:20:94:ea:0d:92:5c:64:83:2b:ba:83:ae:
dc:a3:57:08:0f:15:bb:86:d8:c2:8d:22:bb:0a:47:63:60:46:
29:35:2b:a4:fb:a2:d2:ea:c9:1c:1a:af:be:92:69:52:95:0c:
5b:77:11:86:21:ad:63:a6:a2:26:c0:01:c3:fa:96:23:4b:65:
b8:0c:e4:45:f6:2f:ed:a9:13:11:da:bd:e0:32:98:8d:17:61:
46:cc:90:f1:a0:22:f8:a6:60:15:94:00:eb:1e:4d:d6:e3:2d:
57:c8:5d:38:e8:8a:34:d2:84:2a:01:b1:6d:8a:fc:2f:66:44:
e3:93:f1:ac:dc:5c:e2:74:3d:2e:07:c7:03:b6:b9:fa:59:f8:
a1:d4:89:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3zBF3i4Hp09MHM3lc0C7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjQwMTAyMDYzMTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTY2YjJmMTA2ZmVjYTk3MDM3N2IwMzYwMTY2MmMwZjAyNTY3M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDiJuwLYRmXiB82ryR410IJ9sZAf
z1aHLynTXWTZFb9vpSTTrcUVyPpwt5PhSetRm/YJmH2VmBq/NYViliUbFF94TMw/
MRshRoAyhLgcVcQ6IUeS9FXGA6iTIr6MRVFaJ/+WApH5llvGCxn5wjXFfWERehD+
MUJ5+4QwPt9BoZ4VAfZLUe5/VLKTEitkF93gvKdmucpDbR7IbKZCrpPQjKU/JahX
JRsi2jufKZ9l73+cCuFyjf6YH572yM8snMrVtLBELM3FO91t+GbAkU+68JTqKBSX
LJbJH3ggj4+qsmGEygbkUrXYzCJI1HhpPEtd9Pmg3p+35Zj/u2EqPWU8xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLlmsvEG/sqXA3ewNgFmLA8CVnPxMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvdVdheThRYi15cGNEZDdBMkFXWXNEd0pXY19FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+oVMA0G
CSqGSIb3DQEBCwUAA4IBAQCyV8zYVNu4Rn/Vst58aVG0CXZCAJIAU2pHi1GU8OLY
dVm6IgciDHnGDm3AdLrQwkFL/nQ4bGheyxSRHPsRr05IIHRwYbKSJ7F0T/raxkOc
H62YN7sIT23DuCPE+jcHsIk4KL5v3SmrYVx05lI2slO3r+oglOoNklxkgyu6g67c
o1cIDxW7htjCjSK7CkdjYEYpNSuk+6LS6skcGq++kmlSlQxbdxGGIa1jpqImwAHD
+pYjS2W4DORF9i/tqRMR2r3gMpiNF2FGzJDxoCL4pmAVlADrHk3W4y1XyF046Io0
0oQqAbFtivwvZkTjk/Gs3FzidD0uB8cDtrn6Wfih1Ik8
-----END CERTIFICATE-----
Generated at Sun May 19 14:14:28 2024 by rpki-client on console-fra.rpki-client.org