Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/UgXHmzPcvEI-vewGgOz-MM9fD_c.roa
File: UgXHmzPcvEI-vewGgOz-MM9fD_c.roa (raw, json)
Hash identifier: 4xC3GZ0CsKTFh1bxI3tx7v+DDAGWjsjRiUXiEM5yG/o=
Subject key identifier: 52:05:C7:9B:33:DC:BC:42:3E:BD:EC:06:80:EC:FE:30:CF:5F:0F:F7
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801B0FB4F25F870345DFC3AD148491B
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/UgXHmzPcvEI-vewGgOz-MM9fD_c.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204791
IP address blocks: 31.40.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b0:fb:4f:25:f8:70:34:5d:fc:3a:d1:48:49:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5205c79b33dcbc423ebdec0680ecfe30cf5f0ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:61:fc:26:56:2c:1e:85:92:3e:95:23:51:
c2:fa:8d:9e:af:00:17:8f:0e:a4:06:e3:b4:04:e5:
cf:0b:f5:ba:43:78:e6:fc:89:94:ed:8b:33:e5:79:
60:19:ae:11:f5:55:cb:a7:84:93:f2:61:61:51:c5:
97:33:d4:1b:88:41:d3:95:a6:d0:11:56:66:90:74:
d2:28:9c:95:fa:9c:6e:e1:7d:47:0b:2a:d4:18:c6:
a9:a7:3a:9f:30:d1:06:d6:06:3f:24:c3:27:2f:32:
6c:d5:36:fe:3f:24:ec:ea:e1:21:4e:a0:74:7d:7f:
40:4d:73:2b:87:ea:b8:6b:0d:19:c1:14:02:75:e6:
99:dd:bb:5b:eb:5e:a6:fd:4a:6e:be:5f:5d:a2:42:
08:11:0f:e1:00:0e:14:64:72:ed:02:85:e7:38:85:
b9:56:87:68:56:08:66:8a:dc:0c:c8:42:87:27:79:
79:0b:4c:a1:b1:21:6e:5f:86:cc:12:ba:cc:2c:f3:
2f:5e:e0:ae:aa:da:56:a3:2f:99:ff:4f:10:9c:07:
15:a8:43:cc:60:cf:c8:b6:72:95:0b:11:fd:f8:1b:
d0:30:6e:5d:2d:4a:4b:00:1a:d8:a5:1d:4c:cc:32:
2d:6d:90:6b:da:a4:6a:37:42:ee:e3:54:1b:27:0c:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:05:C7:9B:33:DC:BC:42:3E:BD:EC:06:80:EC:FE:30:CF:5F:0F:F7
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/UgXHmzPcvEI-vewGgOz-MM9fD_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.130.0/24
Signature Algorithm: sha256WithRSAEncryption
81:22:86:bf:b7:16:a8:ff:de:c0:ba:3c:3a:7f:85:f6:e0:0c:
e5:88:b9:83:0a:48:ec:a2:d6:aa:4e:ec:50:57:19:cf:2e:1a:
fe:09:3e:07:47:f1:95:13:57:b1:be:df:8e:69:c6:9e:5c:c4:
60:0a:87:c2:f1:71:40:2b:60:a8:ff:d6:6f:ab:cc:b9:87:37:
0f:67:b4:20:2b:b8:05:44:20:ff:85:cd:54:8f:80:ee:17:cf:
93:eb:5f:04:01:f1:57:84:69:3c:4a:82:42:0b:e5:16:2b:8e:
8c:08:26:8b:10:3c:b5:06:a4:c9:35:51:27:b1:6a:6e:74:ad:
af:df:0c:3c:20:f7:8c:9f:9d:b3:fa:ae:61:f2:ee:0c:74:4d:
e9:3a:58:f1:59:e6:4d:5a:d9:72:00:71:27:92:a7:41:21:f8:
df:87:a9:91:7e:bd:ae:90:66:9d:1b:18:f0:13:9d:6f:87:db:
46:6d:74:9e:22:c3:2c:da:b2:51:9b:b2:a8:ec:9d:45:11:4e:
8d:2b:fa:b5:c8:b6:9e:06:7a:ed:70:1a:65:58:1d:53:77:1e:
f9:d6:a7:01:1a:56:4c:72:80:08:2e:f5:1e:e4:c5:0b:ab:f5:
76:11:5a:41:42:af:0b:91:79:f5:89:f7:2c:1c:22:71:bd:27:
3d:ec:06:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAbD7TyX4cDRd/DrRSEkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjQwMTAyMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjA1Yzc5YjMzZGNiYzQyM2ViZGVjMDY4MGVjZmUzMGNmNWYwZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttZh/CZWLB6Fkj6VI1HC+o2erwAX
jw6kBuO0BOXPC/W6Q3jm/ImU7Ysz5XlgGa4R9VXLp4ST8mFhUcWXM9QbiEHTlabQ
EVZmkHTSKJyV+pxu4X1HCyrUGMappzqfMNEG1gY/JMMnLzJs1Tb+PyTs6uEhTqB0
fX9ATXMrh+q4aw0ZwRQCdeaZ3btb616m/Upuvl9dokIIEQ/hAA4UZHLtAoXnOIW5
VodoVghmitwMyEKHJ3l5C0yhsSFuX4bMErrMLPMvXuCuqtpWoy+Z/08QnAcVqEPM
YM/ItnKVCxH9+BvQMG5dLUpLABrYpR1MzDItbZBr2qRqN0Lu41QbJwwnJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFIFx5sz3LxCPr3sBoDs/jDPXw/3MB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvVWdYSG16UGN2RUktdmV3R2dPei1NTTlmRF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyiCMA0G
CSqGSIb3DQEBCwUAA4IBAQCBIoa/txao/97Aujw6f4X24AzliLmDCkjsotaqTuxQ
VxnPLhr+CT4HR/GVE1exvt+OacaeXMRgCofC8XFAK2Co/9Zvq8y5hzcPZ7QgK7gF
RCD/hc1Uj4DuF8+T618EAfFXhGk8SoJCC+UWK46MCCaLEDy1BqTJNVEnsWpudK2v
3ww8IPeMn52z+q5h8u4MdE3pOljxWeZNWtlyAHEnkqdBIfjfh6mRfr2ukGadGxjw
E51vh9tGbXSeIsMs2rJRm7Ko7J1FEU6NK/q1yLaeBnrtcBplWB1Tdx751qcBGlZM
coAILvUe5MULq/V2EVpBQq8LkXn1ifcsHCJxvSc97AZJ
-----END CERTIFICATE-----
Generated at Wed May 22 07:06:54 2024 by rpki-client on console-fra.rpki-client.org