Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/u1IjA_C9ECeEmevPiCmmMhAJyfE.roa
File: u1IjA_C9ECeEmevPiCmmMhAJyfE.roa (raw, json)
Hash identifier: M7Id7uv9QXwdu5V6UqecZ4lIW8+kxaLb43lvMezyEdE=
Subject key identifier: BB:52:23:03:F0:BD:10:27:84:99:EB:CF:88:29:A6:32:10:09:C9:F1
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A5752E3B0DFD2038634E8F6FFAACD
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/u1IjA_C9ECeEmevPiCmmMhAJyfE.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207631
IP address blocks: 185.133.209.0/24 maxlen: 24
185.197.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:57:52:e3:b0:df:d2:03:86:34:e8:f6:ff:aa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb522303f0bd10278499ebcf8829a6321009c9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:2a:fa:fb:15:af:d8:7a:59:86:2d:28:1f:
ab:99:7e:5a:39:c6:6d:5d:92:3a:48:51:3d:69:d5:
c8:2d:98:e4:16:9c:dd:d1:4c:86:50:d3:87:81:af:
39:dd:aa:6d:31:87:88:cf:aa:df:8c:9e:db:3d:8c:
52:99:75:86:e1:59:4e:88:4c:27:fa:c5:38:dd:2e:
fc:4d:45:97:a1:84:f0:88:46:35:40:51:aa:65:39:
f1:9e:2e:c1:8b:1c:0c:6a:b1:e4:79:3c:fa:df:93:
17:1c:79:17:56:f1:43:02:6b:36:5b:67:dc:f4:90:
25:6c:a9:3c:24:36:e4:34:ee:38:a1:d8:85:58:50:
74:85:d3:04:b1:0b:9b:93:1c:c3:d9:86:e9:b3:82:
85:62:87:ff:b2:d6:16:a8:b7:78:a0:ab:ef:c9:9a:
7c:76:7c:ea:27:9f:2e:ce:36:d8:de:3a:8a:80:ea:
0e:3f:b7:48:16:d3:29:d6:27:f6:ef:cf:88:37:28:
a1:c6:4e:b2:05:62:ff:79:2c:dc:62:5f:bf:69:10:
b8:18:c0:27:37:f4:20:cc:ac:d4:8f:5a:8c:6e:53:
b8:6d:f2:4e:94:ea:a2:fc:bd:18:8c:15:a3:7b:1c:
2d:96:f4:7c:ac:ab:aa:42:91:28:ca:23:d6:ea:0e:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:23:03:F0:BD:10:27:84:99:EB:CF:88:29:A6:32:10:09:C9:F1
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/u1IjA_C9ECeEmevPiCmmMhAJyfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.209.0/24
185.197.134.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b5:0e:f9:d4:e0:fc:9c:32:6b:01:ec:17:ba:d6:f2:18:27:
b2:bb:2d:c4:65:b7:6b:f1:39:a3:af:22:b7:33:fc:56:97:17:
82:1a:e9:ef:96:00:21:15:d2:ca:9d:2c:76:0d:66:e2:aa:24:
a8:fe:b5:12:12:2c:f5:29:70:de:fd:b5:ad:7e:db:60:1c:3a:
7c:b8:3c:a9:a3:c4:57:2c:1c:6a:3a:0c:0e:6b:77:56:0d:df:
45:e6:62:c8:e3:e2:00:d6:36:16:cf:89:52:95:83:64:23:a4:
f3:e2:6c:42:d5:c7:f3:11:e5:b0:f7:a6:58:a4:f6:28:0d:9b:
16:3f:9f:d2:9d:54:b4:00:ae:73:c5:b6:b9:52:ca:c2:ba:66:
ce:b3:b6:ae:51:d6:55:74:b4:3c:7f:48:b7:22:a6:32:98:24:
42:3a:aa:61:e1:b7:fc:ff:ed:10:0f:12:de:06:ff:88:da:74:
72:4a:b8:f7:9c:92:97:2f:68:1d:33:ab:11:98:24:0c:13:70:
38:41:83:ec:e7:07:a1:d0:f1:c8:8c:40:6f:12:6b:4e:34:cc:
1d:de:52:26:c8:54:7a:dc:d2:04:9b:5a:29:5c:82:f9:1d:f3:
5c:dd:d5:b2:2e:e0:66:5f:9d:54:f9:60:ff:cf:40:73:86:44:
04:cb:8f:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKldS47Df0gOGNOj2/6rNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjQwMTAyMTIzMzQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjUyMjMwM2YwYmQxMDI3ODQ5OWViY2Y4ODI5YTYzMjEwMDljOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZYq+vsVr9h6WYYtKB+rmX5aOcZt
XZI6SFE9adXILZjkFpzd0UyGUNOHga853aptMYeIz6rfjJ7bPYxSmXWG4VlOiEwn
+sU43S78TUWXoYTwiEY1QFGqZTnxni7BixwMarHkeTz635MXHHkXVvFDAms2W2fc
9JAlbKk8JDbkNO44odiFWFB0hdMEsQubkxzD2Ybps4KFYof/stYWqLd4oKvvyZp8
dnzqJ58uzjbY3jqKgOoOP7dIFtMp1if278+INyihxk6yBWL/eSzcYl+/aRC4GMAn
N/QgzKzUj1qMblO4bfJOlOqi/L0YjBWjexwtlvR8rKuqQpEoyiPW6g65AQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLtSIwPwvRAnhJnrz4gppjIQCcnxMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvdTFJakFfQzlFQ2VFbWV2UGlDbW1NaEFKeWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYXRAwQA
ucWGMA0GCSqGSIb3DQEBCwUAA4IBAQBBtQ751OD8nDJrAewXutbyGCeyuy3EZbdr
8TmjryK3M/xWlxeCGunvlgAhFdLKnSx2DWbiqiSo/rUSEiz1KXDe/bWtfttgHDp8
uDypo8RXLBxqOgwOa3dWDd9F5mLI4+IA1jYWz4lSlYNkI6Tz4mxC1cfzEeWw96ZY
pPYoDZsWP5/SnVS0AK5zxba5UsrCumbOs7auUdZVdLQ8f0i3IqYymCRCOqph4bf8
/+0QDxLeBv+I2nRySrj3nJKXL2gdM6sRmCQME3A4QYPs5weh0PHIjEBvEmtONMwd
3lImyFR63NIEm1opXIL5HfNc3dWyLuBmX51U+WD/z0BzhkQEy49w
-----END CERTIFICATE-----
Generated at Wed May 15 18:37:01 2024 by rpki-client on console-fra.rpki-client.org