Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/uWB3vb5P7hwYU3Kipr3VRidZh_g.roa
File: uWB3vb5P7hwYU3Kipr3VRidZh_g.roa (raw, json)
Hash identifier: cuIDvlKV3CF9CznX93cbrOrXOm1MbmjoaRxKwp3MbKE=
Subject key identifier: B9:60:77:BD:BE:4F:EE:1C:18:53:72:A2:A6:BD:D5:46:27:59:87:F8
Certificate issuer: /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial: 018CC86F67D4473F7225EDE73786C5722A9A
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/uWB3vb5P7hwYU3Kipr3VRidZh_g.roa
Signing time: Tue 02 Jan 2024 04:29:53 +0000
ROA not before: Tue 02 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202675
IP address blocks: 194.76.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:67:d4:47:3f:72:25:ed:e7:37:86:c5:72:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Validity
Not Before: Jan 2 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b96077bdbe4fee1c185372a2a6bdd546275987f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a1:70:4a:73:f1:a9:47:28:c9:30:70:be:42:
90:43:e6:b4:c0:ee:67:f8:7c:c2:57:38:b4:74:94:
01:e8:c8:a7:9d:4f:1d:5c:cc:1e:88:27:a6:17:44:
fe:b1:42:f9:2c:a1:69:b4:0b:23:7c:4b:ab:09:23:
a4:51:47:58:0b:55:19:a6:fc:84:80:11:48:8a:6b:
7a:e6:8d:7b:b5:59:1e:73:db:93:1f:1a:aa:80:f1:
f8:a6:ca:a6:37:e4:56:ce:d1:66:96:e8:23:8f:26:
7e:a0:ab:bb:b4:6b:17:79:2d:d2:a5:a2:7d:4b:36:
2d:30:6c:8d:d7:71:cb:3f:31:c4:84:b6:ef:38:85:
f5:28:fd:a2:0e:7e:b4:5b:e6:ab:e2:dd:38:0d:79:
77:a0:e4:f9:7e:98:40:48:91:50:d0:02:80:f3:ef:
f6:2b:7e:85:04:8b:86:dc:00:f0:be:a6:a8:88:dc:
a4:bd:a8:3e:a0:62:6e:0b:4a:0b:99:78:d1:5e:12:
0e:83:40:ec:aa:d1:be:ec:67:59:62:84:bc:bf:c7:
02:84:ac:34:63:c4:02:a2:da:2c:c4:1f:22:85:14:
23:55:f0:5d:a8:a3:fc:d0:2e:c0:ab:55:1a:07:5c:
d4:4d:ed:38:94:c1:66:c0:e8:e1:fa:f1:ad:6c:99:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:77:BD:BE:4F:EE:1C:18:53:72:A2:A6:BD:D5:46:27:59:87:F8
X509v3 Authority Key Identifier:
keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/uWB3vb5P7hwYU3Kipr3VRidZh_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:e4:c7:bf:be:b1:c7:9d:ac:cd:db:ba:f0:1c:6b:74:d1:5c:
80:73:72:df:6b:67:9d:7a:d4:cc:32:1e:6f:90:95:37:66:53:
86:5e:32:c4:eb:44:db:a7:46:1a:ab:c8:e1:ce:e8:38:07:3d:
aa:6d:0d:45:a9:fb:0c:5a:f0:56:c6:e4:df:3e:ac:92:9d:c2:
72:72:9f:d0:9e:0f:d9:d0:06:54:d3:74:9f:08:3e:9e:32:dd:
48:f1:e7:7d:97:9f:a2:3d:63:e8:63:af:30:78:ae:36:7c:74:
92:4a:69:71:a0:f1:0a:20:6c:62:02:59:d2:ed:22:8f:6a:b4:
d2:93:57:9f:2e:6d:71:ab:b4:d7:d7:1b:dc:99:0c:e5:04:b0:
21:ca:26:d7:5b:4a:59:62:09:5b:ad:96:b7:0f:2e:1e:03:18:
5d:0a:37:02:54:03:1c:d6:36:60:20:ec:24:c6:6a:c3:68:79:
ea:01:82:c8:49:5b:70:4d:04:8f:4d:bd:8f:e4:a5:59:bb:12:
23:2f:07:ef:24:c3:5e:4c:4f:ed:9d:64:8b:5f:0c:3a:a3:d6:
12:fe:2d:f3:65:57:f0:ee:64:e3:09:0e:f7:50:63:25:7b:b8:
e6:84:a2:8f:ab:7f:3f:e7:bd:94:12:9d:39:2a:92:e3:88:f5:
de:33:6f:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb2fURz9yJe3nN4bFciqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm
YTk4OTMwHhcNMjQwMTAyMDQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTYwNzdiZGJlNGZlZTFjMTg1MzcyYTJhNmJkZDU0NjI3NTk4N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KFwSnPxqUcoyTBwvkKQQ+a0wO5n
+HzCVzi0dJQB6MinnU8dXMweiCemF0T+sUL5LKFptAsjfEurCSOkUUdYC1UZpvyE
gBFIimt65o17tVkec9uTHxqqgPH4psqmN+RWztFmlugjjyZ+oKu7tGsXeS3SpaJ9
SzYtMGyN13HLPzHEhLbvOIX1KP2iDn60W+ar4t04DXl3oOT5fphASJFQ0AKA8+/2
K36FBIuG3ADwvqaoiNykvag+oGJuC0oLmXjRXhIOg0DsqtG+7GdZYoS8v8cChKw0
Y8QCotosxB8ihRQjVfBdqKP80C7Aq1UaB1zUTe04lMFmwOjh+vGtbJmPqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLlgd72+T+4cGFNyoqa91UYnWYf4MB8GA1UdIwQY
MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt
ZmFmZGJlZDU3NGFkLzEvdVdCM3ZiNVA3aHdZVTNLaXByM1ZSaWRaaF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk
LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwkx0MA0G
CSqGSIb3DQEBCwUAA4IBAQA/5Me/vrHHnazN27rwHGt00VyAc3Lfa2edetTMMh5v
kJU3ZlOGXjLE60Tbp0Yaq8jhzug4Bz2qbQ1FqfsMWvBWxuTfPqySncJycp/Qng/Z
0AZU03SfCD6eMt1I8ed9l5+iPWPoY68weK42fHSSSmlxoPEKIGxiAlnS7SKParTS
k1efLm1xq7TX1xvcmQzlBLAhyibXW0pZYglbrZa3Dy4eAxhdCjcCVAMc1jZgIOwk
xmrDaHnqAYLISVtwTQSPTb2P5KVZuxIjLwfvJMNeTE/tnWSLXww6o9YS/i3zZVfw
7mTjCQ73UGMle7jmhKKPq38/572UEp05KpLjiPXeM2+G
-----END CERTIFICATE-----
Generated at Fri Jun 7 18:18:28 2024 by rpki-client on console-fra.rpki-client.org