Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/UPA_sNP12WJ9sTxM8dkYq5fsdTA.roa
File: UPA_sNP12WJ9sTxM8dkYq5fsdTA.roa (raw, json)
Hash identifier: LJM2BrUxoOfUWqKdwkGr92yv0CPZSd0/nFqoGCRX1Dg=
Subject key identifier: 50:F0:3F:B0:D3:F5:D9:62:7D:B1:3C:4C:F1:D9:18:AB:97:EC:75:30
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 018CC501217A325784AE9978D838BAA28AC1
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/UPA_sNP12WJ9sTxM8dkYq5fsdTA.roa
Signing time: Mon 01 Jan 2024 12:30:34 +0000
ROA not before: Mon 01 Jan 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210191
IP address blocks: 185.212.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:21:7a:32:57:84:ae:99:78:d8:38:ba:a2:8a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50f03fb0d3f5d9627db13c4cf1d918ab97ec7530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:07:07:46:b2:db:a6:5b:9c:66:88:80:0d:
d8:a6:7a:84:5d:1f:61:c2:57:12:27:5a:cd:6a:89:
19:20:a7:d2:3e:d9:2f:98:70:d0:89:c1:3f:41:28:
57:6d:64:98:96:3f:92:b9:20:f9:5a:a0:8b:21:77:
d3:13:b1:a7:cd:38:4f:0a:52:ff:96:82:74:cf:e2:
f9:cb:b3:3b:fa:61:90:7a:1a:1b:9d:67:92:59:d8:
ea:73:90:a6:7b:b3:81:52:d8:3d:d0:ec:6e:73:f0:
62:0e:03:06:30:d8:7e:bb:69:d2:e0:85:1d:98:f3:
a8:37:61:79:57:bd:f7:9b:de:19:f1:5f:46:53:58:
97:75:1b:f6:95:0f:ec:6c:34:f6:12:2f:65:f2:11:
c7:08:30:f8:4d:94:a3:97:df:cf:26:dd:ba:36:ab:
e8:35:1a:7d:7e:a6:3d:25:a8:dc:e2:a8:ab:cf:1e:
fd:c0:54:42:91:ba:18:4d:6b:24:60:36:eb:f6:dc:
cd:29:a0:db:19:ea:03:d1:49:a9:9c:8b:34:b2:ba:
e3:c3:14:ac:60:4e:9a:27:c1:a4:ff:68:01:25:4f:
7f:48:e0:8b:f1:94:2c:9e:f0:8a:92:51:7f:f0:41:
c3:04:38:7d:35:0b:e6:88:a2:08:67:9e:dd:c2:0d:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F0:3F:B0:D3:F5:D9:62:7D:B1:3C:4C:F1:D9:18:AB:97:EC:75:30
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/UPA_sNP12WJ9sTxM8dkYq5fsdTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6b:be:f9:80:0d:c0:77:a9:9a:66:34:88:e0:07:8a:79:b3:
9c:78:5e:db:2f:89:df:7c:01:1e:0c:ac:20:86:78:3d:f4:29:
51:27:2c:5e:4a:64:5f:22:98:8f:f9:8e:f9:e0:c8:d5:89:86:
20:b3:bc:2a:d6:34:cc:1b:0c:82:39:68:fb:ab:19:c8:31:29:
09:f7:ed:f2:37:44:1c:68:53:6c:34:f3:29:f9:0f:95:c9:2a:
5d:d1:e3:89:b6:bf:47:65:25:06:ea:e4:3b:b5:46:a7:74:f8:
79:9f:c6:b4:8f:cc:04:32:d9:5a:ef:0b:9e:b9:5d:9e:da:f2:
f5:84:34:60:dc:b0:3a:e1:4e:ee:c1:5a:f3:ab:11:b8:c2:84:
a1:9c:91:21:bd:e1:2f:24:84:ca:e0:ab:27:97:60:22:56:58:
7d:19:27:e9:ab:3f:28:37:90:02:da:72:d7:a8:c8:a5:6b:78:
25:dd:24:d8:45:1f:a9:10:65:0f:7b:d8:c1:dd:a3:1d:2d:fe:
2e:13:67:35:91:17:b9:b9:b3:6d:df:dd:dc:9c:95:11:db:d0:
7b:18:26:2c:20:33:c5:48:05:66:e3:f4:c6:4b:b6:df:d3:74:
83:c8:0c:a1:13:16:d1:d3:6e:41:3e:31:6e:3b:53:ef:59:7a:
0b:43:f9:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFASF6MleErpl42Di6oorBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNTM4YWFlNGVjNGQwYTJmM2MwYTY1Zjg5ZjQ4NzQ2YjUx
NWU1N2IwHhcNMjQwMTAxMTIzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGYwM2ZiMGQzZjVkOTYyN2RiMTNjNGNmMWQ5MThhYjk3ZWM3NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nYHB0ay26ZbnGaIgA3YpnqEXR9h
wlcSJ1rNaokZIKfSPtkvmHDQicE/QShXbWSYlj+SuSD5WqCLIXfTE7GnzThPClL/
loJ0z+L5y7M7+mGQehobnWeSWdjqc5Cme7OBUtg90Oxuc/BiDgMGMNh+u2nS4IUd
mPOoN2F5V733m94Z8V9GU1iXdRv2lQ/sbDT2Ei9l8hHHCDD4TZSjl9/PJt26Nqvo
NRp9fqY9Jajc4qirzx79wFRCkboYTWskYDbr9tzNKaDbGeoD0UmpnIs0srrjwxSs
YE6aJ8Gk/2gBJU9/SOCL8ZQsnvCKklF/8EHDBDh9NQvmiKIIZ57dwg1QLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFDwP7DT9dlifbE8TPHZGKuX7HUwMB8GA1UdIwQY
MBaAFP1Tiq5OxNCi88CmX4n0h0a1FeV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYt
NDI4MzdjY2EwMGMzLzEvVVBBX3NOUDEyV0o5c1R4TThka1lxNWZzZFRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYtNDI4MzdjY2EwMGMz
LzEvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudRDMA0G
CSqGSIb3DQEBCwUAA4IBAQCma775gA3Ad6maZjSI4AeKebOceF7bL4nffAEeDKwg
hng99ClRJyxeSmRfIpiP+Y754MjViYYgs7wq1jTMGwyCOWj7qxnIMSkJ9+3yN0Qc
aFNsNPMp+Q+VySpd0eOJtr9HZSUG6uQ7tUandPh5n8a0j8wEMtla7wueuV2e2vL1
hDRg3LA64U7uwVrzqxG4woShnJEhveEvJITK4Ksnl2AiVlh9GSfpqz8oN5AC2nLX
qMila3gl3STYRR+pEGUPe9jB3aMdLf4uE2c1kRe5ubNt393cnJUR29B7GCYsIDPF
SAVm4/TGS7bf03SDyAyhExbR025BPjFuO1PvWXoLQ/mQ
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:49:47 2024 by rpki-client on console-ams.rpki-client.org