Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UY234L6M8pXhei1BmmgslqGqSyk.roa
File: UY234L6M8pXhei1BmmgslqGqSyk.roa (raw, json)
Hash identifier: mXKr8vdcGLAbCCW7bI8i3FXhwDJJTV1/wUEvXKyxD6I=
Subject key identifier: 51:8D:B7:E0:BE:8C:F2:95:E1:7A:2D:41:9A:68:2C:96:A1:AA:4B:29
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49337980077B7062D1225A93AD1CE98
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UY234L6M8pXhei1BmmgslqGqSyk.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49532
IP address blocks: 37.153.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:37:98:00:77:b7:06:2d:12:25:a9:3a:d1:ce:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=518db7e0be8cf295e17a2d419a682c96a1aa4b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:bc:ac:f3:9c:2c:9c:e7:fe:f5:f6:3b:ad:
32:46:9f:21:ea:1f:5d:87:3c:df:37:cc:41:df:03:
5e:5a:42:1b:57:c2:c3:f6:b7:40:01:1f:8b:65:65:
75:24:ad:4d:ab:55:b7:c0:3d:05:0b:3f:8e:e7:b1:
c6:7a:bc:b2:8b:a4:f5:62:cc:db:10:21:21:1d:72:
4d:7c:3e:59:87:bc:d4:60:39:c6:f7:14:89:5c:ae:
7a:36:d2:6e:ad:fc:fb:3b:cc:ab:73:f9:75:e5:6e:
42:bc:fa:11:d6:0a:95:97:4a:e7:ba:d6:3b:a7:ec:
24:55:56:73:e7:61:51:d6:d1:94:c8:53:d3:30:8c:
c9:c6:74:e9:35:c9:fc:95:c3:97:b8:69:e1:6f:48:
f8:ac:2b:65:82:af:f4:1f:e1:46:18:8f:f6:da:d8:
4a:3e:dd:5c:70:7b:04:8c:4d:e9:df:1e:12:ad:ee:
ef:95:7f:ad:b1:a9:c6:f0:cf:72:94:28:a2:e9:3c:
d8:3c:d1:4d:22:8c:fa:6b:41:4b:b5:29:a5:c7:7a:
7c:28:ef:08:21:0a:5c:d4:52:89:4a:cb:76:e8:97:
db:4b:e6:e9:c4:c2:9f:e7:65:55:16:75:5f:19:c8:
ac:f2:bd:21:24:48:fc:44:ab:6a:b3:31:19:82:04:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8D:B7:E0:BE:8C:F2:95:E1:7A:2D:41:9A:68:2C:96:A1:AA:4B:29
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UY234L6M8pXhei1BmmgslqGqSyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.158.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1f:db:8f:cf:3a:25:db:2b:34:18:0e:60:90:64:de:7a:87:
1e:ec:15:95:43:16:e4:f4:a2:30:a8:d7:66:a9:29:bc:e0:6d:
08:0d:bc:ae:c2:5c:0f:96:b8:c0:7b:bd:be:d7:0c:18:d4:74:
10:1d:d6:0c:e7:b1:6c:fd:3e:f7:b5:19:3d:b5:b0:48:4b:0f:
50:c3:85:f3:74:2b:62:de:9b:ec:24:cf:d9:7a:19:87:e5:52:
b9:0c:6e:93:98:48:af:11:dd:aa:7a:c3:55:dc:80:45:76:7a:
49:e0:ce:bb:1c:0c:10:55:9d:6f:4f:95:c6:30:d4:56:b9:26:
5d:ce:0b:55:33:9b:db:30:42:aa:0d:27:d4:5d:2f:5f:df:d1:
4f:5a:f7:a1:70:c3:3a:f5:cb:a7:e8:ec:c7:c6:33:43:5b:ba:
18:84:40:de:98:df:45:c9:1c:0e:58:77:85:26:e7:74:77:15:
01:10:b2:56:a0:97:6c:2b:9c:84:bd:37:42:c2:83:97:8b:7d:
b6:f2:09:aa:c3:ea:36:dd:ab:0e:70:ad:83:d7:7e:0d:aa:77:
62:9b:f2:78:e2:7f:3a:98:b1:e4:41:47:5f:37:7d:10:4e:6b:
38:ed:a8:cc:04:1e:6e:b3:47:5e:06:9f:23:0c:69:42:a2:ca:
e4:ad:8c:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkzeYAHe3Bi0SJak60c6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMTAxMTAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MThkYjdlMGJlOGNmMjk1ZTE3YTJkNDE5YTY4MmM5NmExYWE0YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1+8rPOcLJzn/vX2O60yRp8h6h9d
hzzfN8xB3wNeWkIbV8LD9rdAAR+LZWV1JK1Nq1W3wD0FCz+O57HGeryyi6T1Yszb
ECEhHXJNfD5Zh7zUYDnG9xSJXK56NtJurfz7O8yrc/l15W5CvPoR1gqVl0rnutY7
p+wkVVZz52FR1tGUyFPTMIzJxnTpNcn8lcOXuGnhb0j4rCtlgq/0H+FGGI/22thK
Pt1ccHsEjE3p3x4Sre7vlX+tsanG8M9ylCii6TzYPNFNIoz6a0FLtSmlx3p8KO8I
IQpc1FKJSst26JfbS+bpxMKf52VVFnVfGcis8r0hJEj8RKtqszEZggSMqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGNt+C+jPKV4XotQZpoLJahqkspMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVVkyMzRMNk04cFhoZWkxQm1tZ3NscUdxU3lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZmeMA0G
CSqGSIb3DQEBCwUAA4IBAQBYH9uPzzol2ys0GA5gkGTeeoce7BWVQxbk9KIwqNdm
qSm84G0IDbyuwlwPlrjAe72+1wwY1HQQHdYM57Fs/T73tRk9tbBISw9Qw4XzdCti
3pvsJM/ZehmH5VK5DG6TmEivEd2qesNV3IBFdnpJ4M67HAwQVZ1vT5XGMNRWuSZd
zgtVM5vbMEKqDSfUXS9f39FPWvehcMM69cun6OzHxjNDW7oYhEDemN9FyRwOWHeF
Jud0dxUBELJWoJdsK5yEvTdCwoOXi3228gmqw+o23asOcK2D134Nqndim/J44n86
mLHkQUdfN30QTms47ajMBB5us0deBp8jDGlCosrkrYyT
-----END CERTIFICATE-----
Generated at Fri Jun 7 19:55:59 2024 by rpki-client on console-fra.rpki-client.org