Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UEaBfgCFldFlxa_28YfkCZ_rqBg.roa
File: UEaBfgCFldFlxa_28YfkCZ_rqBg.roa (raw, json)
Hash identifier: BEt6772K1Jx4IaftBi8N50veYD+DKD/0mz01ugALtHM=
Subject key identifier: 50:46:81:7E:00:85:95:D1:65:C5:AF:F6:F1:87:E4:09:9F:EB:A8:18
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018D5A16CAD8E2CDE2CA3EFA26887704238B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UEaBfgCFldFlxa_28YfkCZ_rqBg.roa
Signing time: Tue 30 Jan 2024 11:17:39 +0000
ROA not before: Tue 30 Jan 2024 11:17:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49241
IP address blocks: 188.130.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:16:ca:d8:e2:cd:e2:ca:3e:fa:26:88:77:04:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 30 11:17:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5046817e008595d165c5aff6f187e4099feba818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:91:64:0b:72:70:1f:ac:c4:cf:4f:96:ff:
16:35:10:30:05:9f:64:be:18:5d:4f:e0:01:c4:a0:
46:d0:b3:f9:ea:4f:de:49:c3:a8:a0:f5:1f:1e:7d:
0c:ae:5b:b6:27:b2:c2:15:0e:84:92:d7:64:4e:78:
8e:08:cd:f8:56:77:45:89:02:e2:f3:07:1c:e8:72:
04:c6:a5:44:8c:52:57:b6:65:1c:d8:99:4f:2a:52:
59:62:b2:3c:44:54:35:f8:48:58:d7:27:6a:0e:7f:
06:41:b7:90:d2:8b:e3:f3:67:23:12:79:0f:c5:85:
91:80:12:30:9b:fb:1b:83:5f:b9:1e:2c:03:7a:d3:
e1:50:71:40:a5:84:09:1b:e5:ff:86:cd:f9:47:69:
4a:b2:3d:2a:20:bf:9f:9b:b8:75:38:c8:f2:7f:29:
01:92:fb:5b:62:5e:b8:a0:03:a0:8e:02:d7:ca:0d:
95:4c:06:4a:6c:f9:65:62:a4:37:1b:c0:5f:30:bc:
6b:4f:cd:45:42:43:67:d1:bb:ad:c1:8c:2b:1d:bd:
eb:11:08:50:64:b0:4c:62:6d:60:7d:db:a4:fd:81:
92:bf:99:f6:88:ee:c5:f8:53:8b:dd:9c:ff:b6:69:
6c:5f:13:32:66:0f:c2:5a:0c:66:7d:c0:bd:65:b8:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:81:7E:00:85:95:D1:65:C5:AF:F6:F1:87:E4:09:9F:EB:A8:18
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UEaBfgCFldFlxa_28YfkCZ_rqBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.245.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b1:15:c6:1e:b1:16:a4:82:71:4e:33:fa:e9:33:c2:e6:69:
8a:20:c8:91:b5:20:c4:de:80:e1:32:83:35:c2:18:32:e0:43:
3e:e0:af:91:c8:f6:4f:e2:f7:7d:16:c0:6b:1f:f8:03:1d:0b:
a5:42:fa:1f:e0:c0:14:55:c4:40:ba:19:06:2f:1c:f4:c9:eb:
67:79:81:aa:21:1b:f7:29:c6:44:a9:9b:2b:42:b8:71:29:4a:
59:68:2f:b7:2d:0a:73:88:ba:0e:cf:a0:87:f8:1c:16:94:0e:
c4:11:39:85:fd:c4:4c:62:9d:53:57:e1:0c:2f:0d:bc:56:8a:
50:89:69:67:89:a2:c2:f4:13:e7:16:ab:1c:96:82:c2:0e:ab:
9a:06:77:be:60:6e:4a:17:3d:e6:0c:95:59:d0:df:2d:84:50:
06:8f:7c:99:5c:eb:58:3c:0c:ff:0d:12:39:74:d5:77:e5:24:
aa:6a:0b:d0:83:42:70:69:65:9f:3d:df:d9:16:82:89:e1:7b:
18:3f:90:92:0d:03:4d:1e:bb:bd:69:ec:f9:2a:9f:f1:1a:d7:
c7:10:f2:c9:85:cd:be:bd:3a:ac:56:73:7a:07:97:9b:5c:38:
f4:c7:12:bd:6d:5e:a8:83:50:ed:e3:d0:20:7e:00:9a:dd:86:
ee:bd:dc:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1aFsrY4s3iyj76Joh3BCOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjQwMTMwMTExNzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDQ2ODE3ZTAwODU5NWQxNjVjNWFmZjZmMTg3ZTQwOTlmZWJhODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwGRZAtycB+sxM9Plv8WNRAwBZ9k
vhhdT+ABxKBG0LP56k/eScOooPUfHn0Mrlu2J7LCFQ6EktdkTniOCM34VndFiQLi
8wcc6HIExqVEjFJXtmUc2JlPKlJZYrI8RFQ1+EhY1ydqDn8GQbeQ0ovj82cjEnkP
xYWRgBIwm/sbg1+5HiwDetPhUHFApYQJG+X/hs35R2lKsj0qIL+fm7h1OMjyfykB
kvtbYl64oAOgjgLXyg2VTAZKbPllYqQ3G8BfMLxrT81FQkNn0butwYwrHb3rEQhQ
ZLBMYm1gfduk/YGSv5n2iO7F+FOL3Zz/tmlsXxMyZg/CWgxmfcC9Zbi63wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBGgX4AhZXRZcWv9vGH5Amf66gYMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvVUVhQmZnQ0ZsZEZseGFfMjhZZmtDWl9ycUJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIL1MA0G
CSqGSIb3DQEBCwUAA4IBAQCvsRXGHrEWpIJxTjP66TPC5mmKIMiRtSDE3oDhMoM1
whgy4EM+4K+RyPZP4vd9FsBrH/gDHQulQvof4MAUVcRAuhkGLxz0yetneYGqIRv3
KcZEqZsrQrhxKUpZaC+3LQpziLoOz6CH+BwWlA7EETmF/cRMYp1TV+EMLw28VopQ
iWlniaLC9BPnFqscloLCDquaBne+YG5KFz3mDJVZ0N8thFAGj3yZXOtYPAz/DRI5
dNV35SSqagvQg0JwaWWfPd/ZFoKJ4XsYP5CSDQNNHru9aez5Kp/xGtfHEPLJhc2+
vTqsVnN6B5ebXDj0xxK9bV6og1Dt49AgfgCa3Ybuvdx8
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:21:54 2024 by rpki-client on console-ams.rpki-client.org