Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/UZREhjZ1Cer6EzgTd-99-HqH1Lw.roa
File: UZREhjZ1Cer6EzgTd-99-HqH1Lw.roa (raw, json)
Hash identifier: 9/QQVQLX/bHlr4B0l/OF+uZ41qW5wQBKalgO0kEj/SE=
Subject key identifier: 51:94:44:86:36:75:09:EA:FA:13:38:13:77:EF:7D:F8:7A:87:D4:BC
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018CC3B6D697A069EF50113390F177D9411A
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/UZREhjZ1Cer6EzgTd-99-HqH1Lw.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140403
IP address blocks: 46.8.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d6:97:a0:69:ef:50:11:33:90:f1:77:d9:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51944486367509eafa13381377ef7df87a87d4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:4a:7e:00:8d:89:e2:a5:55:08:31:ab:5f:
d3:fc:4d:74:f0:c1:15:f5:3d:68:5e:63:02:8c:b2:
e4:21:4c:19:d8:84:87:a9:b2:2b:d4:e0:fd:b8:71:
e1:61:61:3c:30:13:8b:18:62:0b:e1:3c:3f:3f:cb:
18:f7:1a:37:99:a0:f4:e0:23:84:50:c3:ee:5c:39:
b8:14:32:cb:c2:74:10:8d:1d:53:b1:37:d1:f7:46:
4c:b5:2d:d7:9c:f0:7b:20:9d:d8:95:0d:b5:6a:9d:
85:61:0d:b0:5c:f6:73:23:4f:bd:63:bf:10:47:b8:
71:9f:2a:65:c4:b2:1b:01:9b:2d:77:10:67:1a:da:
5a:ac:41:80:50:da:27:b6:d9:58:7d:d5:9d:4c:87:
05:69:5a:11:42:2d:25:10:86:90:26:b1:d9:9d:aa:
0a:ad:52:a0:41:49:6d:e0:b4:9a:2c:47:90:3f:c7:
00:94:59:66:4c:8d:a2:79:0a:70:96:25:ed:a3:8a:
30:ee:3b:06:a8:a6:6c:60:4e:be:e9:fa:a0:80:46:
a9:eb:8f:ad:d3:2a:4d:e8:c2:e6:a9:c3:4f:43:c8:
d0:c3:1d:9c:ef:ea:db:3d:23:c1:80:4b:9e:eb:2a:
81:b5:c8:2c:c4:a2:33:07:95:1d:ad:f7:df:00:78:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:44:86:36:75:09:EA:FA:13:38:13:77:EF:7D:F8:7A:87:D4:BC
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/UZREhjZ1Cer6EzgTd-99-HqH1Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.96.0/23
Signature Algorithm: sha256WithRSAEncryption
04:23:1a:c0:40:39:ea:6c:25:67:e8:1f:64:62:3d:0e:9c:d0:
fe:e3:2e:2c:3b:73:87:52:88:55:a5:91:6c:78:82:7e:29:2e:
5a:f6:c6:ab:d7:0e:5b:bb:3b:30:a5:4d:6a:2b:2a:1b:00:ee:
32:4a:b7:d7:19:9c:1f:2d:66:8f:00:fc:23:74:07:01:6c:36:
1b:ad:c9:6e:12:19:37:8b:89:8b:85:33:5b:70:90:9e:7e:bc:
c8:4d:14:91:17:58:c8:8b:3d:32:82:0a:ac:98:29:b2:b0:e5:
47:38:e7:30:f8:c8:65:47:c5:9f:2f:71:fb:b6:d4:5c:23:ac:
e4:a9:ac:3d:9e:37:20:65:45:c4:5f:18:c5:c9:ce:ec:74:f2:
8c:67:60:02:31:37:2d:b4:e5:fe:9f:bc:50:b6:24:e4:c4:0c:
50:31:db:98:e4:04:1d:73:88:7b:b8:2a:f0:ab:bd:7f:3f:99:
14:ad:d8:41:6a:e5:b4:f6:cd:03:d8:65:6b:95:46:36:cf:a9:
a5:2c:48:5f:22:0f:ff:49:f6:d1:fe:e0:f1:fa:82:90:7e:bb:
bc:26:7b:ec:2d:5d:78:85:b7:f6:9a:32:2b:75:72:45:06:5a:
4e:44:75:91:72:9c:5c:d8:55:19:de:7b:d3:95:b5:e2:dc:2e:
ac:f9:d9:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDttaXoGnvUBEzkPF32UEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy
NjMxYjIwHhcNMjQwMTAxMDYyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTk0NDQ4NjM2NzUwOWVhZmExMzM4MTM3N2VmN2RmODdhODdkNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0NKfgCNieKlVQgxq1/T/E108MEV
9T1oXmMCjLLkIUwZ2ISHqbIr1OD9uHHhYWE8MBOLGGIL4Tw/P8sY9xo3maD04COE
UMPuXDm4FDLLwnQQjR1TsTfR90ZMtS3XnPB7IJ3YlQ21ap2FYQ2wXPZzI0+9Y78Q
R7hxnyplxLIbAZstdxBnGtparEGAUNonttlYfdWdTIcFaVoRQi0lEIaQJrHZnaoK
rVKgQUlt4LSaLEeQP8cAlFlmTI2ieQpwliXto4ow7jsGqKZsYE6+6fqggEap64+t
0ypN6MLmqcNPQ8jQwx2c7+rbPSPBgEue6yqBtcgsxKIzB5UdrfffAHgCZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGURIY2dQnq+hM4E3fvffh6h9S8MB8GA1UdIwQY
MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt
MzY3MWQ2N2ViOWY4LzEvVVpSRWhqWjFDZXI2RXpnVGQtOTktSHFIMUx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4
LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLghgMA0G
CSqGSIb3DQEBCwUAA4IBAQAEIxrAQDnqbCVn6B9kYj0OnND+4y4sO3OHUohVpZFs
eIJ+KS5a9sar1w5buzswpU1qKyobAO4ySrfXGZwfLWaPAPwjdAcBbDYbrcluEhk3
i4mLhTNbcJCefrzITRSRF1jIiz0yggqsmCmysOVHOOcw+MhlR8WfL3H7ttRcI6zk
qaw9njcgZUXEXxjFyc7sdPKMZ2ACMTcttOX+n7xQtiTkxAxQMduY5AQdc4h7uCrw
q71/P5kUrdhBauW09s0D2GVrlUY2z6mlLEhfIg//SfbR/uDx+oKQfru8JnvsLV14
hbf2mjIrdXJFBlpORHWRcpxc2FUZ3nvTlbXi3C6s+dlY
-----END CERTIFICATE-----
Generated at Mon May 6 01:08:33 2024 by rpki-client on console-fra.rpki-client.org