Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UFQy6Oy4nMGYVScwcWwq5LYlKZA.roa
File: UFQy6Oy4nMGYVScwcWwq5LYlKZA.roa (raw, json)
Hash identifier: ZvNzIaSj2A8CjIaKqO6y/iy3wMwYe5qe8Tl/9AdFuG0=
Subject key identifier: 50:54:32:E8:EC:B8:9C:C1:98:55:27:30:71:6C:2A:E4:B6:25:29:90
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236993E9F32BAC8C14B26618F69F2F0F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UFQy6Oy4nMGYVScwcWwq5LYlKZA.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42225
IP address blocks: 86.105.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:93:e9:f3:2b:ac:8c:14:b2:66:18:f6:9f:2f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=505432e8ecb89cc198552730716c2ae4b6252990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:df:4a:0c:41:bd:5d:b5:44:df:6a:3a:ff:
21:41:dd:e1:6e:a4:5e:38:1b:2b:0d:2e:09:ea:52:
ac:19:e4:cb:04:f2:af:e1:7c:39:ab:06:ee:6d:f8:
d5:7f:0d:28:26:0f:83:50:d5:01:d1:0c:b5:f1:1e:
0d:d9:c8:58:c6:a5:d2:fa:c8:c4:bb:0a:55:6a:aa:
06:e8:e0:25:3f:db:91:43:10:6f:6e:1f:c5:cf:dc:
8a:d4:d4:60:22:12:71:ab:73:f4:ad:5c:24:1f:50:
ce:f8:ac:09:17:92:4a:b9:33:a1:95:4c:f4:31:78:
a2:43:05:10:7f:05:c3:f4:fa:05:4a:96:80:e2:84:
f6:fc:d9:d5:67:2b:58:21:dd:03:60:5b:81:f0:68:
38:59:a6:93:fe:63:04:10:3a:58:ca:20:78:63:03:
d5:85:7b:78:3c:92:ef:7e:33:03:01:65:39:e5:33:
e9:5f:52:22:42:80:96:d8:03:b8:4c:03:31:e2:5a:
92:f0:ca:e6:c8:03:0d:c0:a2:20:d6:a8:3c:d8:04:
b3:a2:e8:b1:6b:35:c5:1f:5b:41:de:88:10:ac:5c:
d7:6c:25:a2:79:ff:f8:e9:fe:80:49:ba:62:3e:91:
ed:ca:f2:d0:91:cd:2b:6b:08:41:a8:50:04:9e:98:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:54:32:E8:EC:B8:9C:C1:98:55:27:30:71:6C:2A:E4:B6:25:29:90
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UFQy6Oy4nMGYVScwcWwq5LYlKZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.171.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:54:71:2b:26:26:01:f4:52:f7:91:61:35:dd:b7:10:16:8f:
d8:31:57:5e:8a:71:f6:fb:f7:32:71:19:2b:c8:6a:fc:c8:8b:
3c:e2:37:11:0b:fd:c0:40:c7:5b:3a:84:53:ae:68:a1:25:b6:
22:4b:61:ee:bc:3b:0b:ca:86:f2:8b:f1:99:8e:b9:5e:c4:23:
ec:49:4a:dd:e2:67:53:70:12:4b:f7:ba:4b:ef:82:51:80:5d:
4a:61:e1:d1:df:7f:d9:d3:db:f4:ee:af:a6:94:0d:11:6b:d8:
41:75:9b:ba:e5:04:1f:e6:25:b7:0e:9d:e3:d1:39:c2:a5:ae:
44:9b:f0:15:4f:3a:06:f1:f9:f3:1f:f8:1f:9c:53:d4:79:bc:
1f:08:48:e9:d7:55:ae:66:e5:45:3c:12:bc:df:ef:0e:42:25:
0e:ce:d4:88:29:21:3b:2b:fb:0d:78:a1:12:a7:a1:a1:33:42:
da:c7:a3:f5:b5:01:52:f0:6d:5f:56:ba:d6:74:ca:9b:3d:e5:
47:bf:55:1d:b9:9d:b1:4c:50:f4:19:45:53:92:f4:b7:35:15:
0a:72:cf:d0:ed:9b:e9:01:12:fa:04:71:9f:28:63:7a:8f:db:
ab:d7:44:d5:16:4b:e6:fc:04:18:58:b1:7c:7e:26:25:c2:b9:
48:6c:e1:23
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQjaZPp8yusjBSyZhj2ny8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTAxMTk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDU0MzJlOGVjYjg5Y2MxOTg1NTI3MzA3MTZjMmFlNGI2MjUyOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDjfSgxBvV21RN9qOv8hQd3hbqRe
OBsrDS4J6lKsGeTLBPKv4Xw5qwbubfjVfw0oJg+DUNUB0Qy18R4N2chYxqXS+sjE
uwpVaqoG6OAlP9uRQxBvbh/Fz9yK1NRgIhJxq3P0rVwkH1DO+KwJF5JKuTOhlUz0
MXiiQwUQfwXD9PoFSpaA4oT2/NnVZytYId0DYFuB8Gg4WaaT/mMEEDpYyiB4YwPV
hXt4PJLvfjMDAWU55TPpX1IiQoCW2AO4TAMx4lqS8MrmyAMNwKIg1qg82ASzouix
azXFH1tB3ogQrFzXbCWief/46f6ASbpiPpHtyvLQkc0rawhBqFAEnphOgwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFBUMujsuJzBmFUnMHFsKuS2JSmQMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1VGUXk2T3k0bk1HWVZTY3djV3dxNUxZbEtaQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWaasw
DQYJKoZIhvcNAQELBQADggEBAM1UcSsmJgH0UveRYTXdtxAWj9gxV16Kcfb79zJx
GSvIavzIizziNxEL/cBAx1s6hFOuaKEltiJLYe68OwvKhvKL8ZmOuV7EI+xJSt3i
Z1NwEkv3ukvvglGAXUph4dHff9nT2/Tur6aUDRFr2EF1m7rlBB/mJbcOnePROcKl
rkSb8BVPOgbx+fMf+B+cU9R5vB8ISOnXVa5m5UU8Erzf7w5CJQ7O1IgpITsr+w14
oRKnoaEzQtrHo/W1AVLwbV9WutZ0yps95Ue/VR25nbFMUPQZRVOS9Lc1FQpyz9Dt
m+kBEvoEcZ8oY3qP26vXRNUWS+b8BBhYsXx+JiXCuUhs4SM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:25 2025 by rpki-client