Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/uqziA4FOaduBcPwd0ZOmX9IkNOM.roa
File: uqziA4FOaduBcPwd0ZOmX9IkNOM.roa (raw, json)
Hash identifier: DGR/kQs/IVAz6B7nA8WISuMp9LMyswW8ML6PVxofMAQ=
Subject key identifier: BA:AC:E2:03:81:4E:69:DB:81:70:FC:1D:D1:93:A6:5F:D2:24:34:E3
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018CC94D869033AD9DCF47C90DB0BF98EBB8
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/uqziA4FOaduBcPwd0ZOmX9IkNOM.roa
Signing time: Tue 02 Jan 2024 08:32:30 +0000
ROA not before: Tue 02 Jan 2024 08:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13260
IP address blocks: 185.11.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:86:90:33:ad:9d:cf:47:c9:0d:b0:bf:98:eb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 08:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baace203814e69db8170fc1dd193a65fd22434e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:65:65:99:14:d1:25:1a:45:ae:ae:0d:e5:
43:cc:4b:97:e2:06:d9:01:92:2d:22:cf:62:50:f0:
c3:2a:10:4b:0f:bf:72:29:8c:27:56:f1:4a:79:d1:
f1:2a:69:ac:b1:b8:fe:db:2e:e2:31:91:da:bf:a6:
f3:a6:68:59:a7:fa:63:32:bf:2f:02:7b:d4:f8:26:
ec:89:47:75:99:cb:d2:61:3d:0c:c6:6b:4e:aa:72:
78:af:f5:d3:be:e2:d6:49:17:97:06:d8:b9:bc:9d:
2f:21:71:d6:a0:d0:09:b2:4d:56:f9:41:23:da:dd:
7b:f0:30:75:8b:28:89:2e:56:a2:91:d7:f6:1f:75:
76:04:68:44:7a:3c:24:1e:00:f9:90:8b:82:aa:c1:
9d:84:70:2d:aa:f7:60:d1:b9:82:87:ca:d1:cc:31:
e5:47:b9:db:97:66:c3:81:a1:8c:50:ed:27:fa:9f:
36:79:a0:8b:73:7d:0d:5a:3f:da:86:fe:c2:6e:e7:
a0:78:e6:67:e1:15:70:3b:d4:96:56:fd:8b:0e:70:
44:3d:58:4e:c4:48:1f:86:4e:9a:34:ef:7e:0f:ca:
9e:94:fb:d3:04:be:7f:02:9e:5a:ae:b0:1d:93:47:
97:c9:39:7b:5a:f3:bc:ed:f4:f9:e0:0e:98:5a:48:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AC:E2:03:81:4E:69:DB:81:70:FC:1D:D1:93:A6:5F:D2:24:34:E3
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/uqziA4FOaduBcPwd0ZOmX9IkNOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.25.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:37:4a:fc:f1:a6:4d:c0:e3:72:c9:7f:fa:dc:97:a3:3d:73:
6f:65:e6:82:f5:70:3b:6a:9b:76:1c:cc:8d:74:90:d6:ab:0e:
5f:09:66:00:af:84:4b:df:f8:0b:b4:a1:ad:58:b8:48:26:5e:
3a:09:1d:2a:83:d3:65:61:74:0a:87:39:3b:12:96:31:ba:f4:
1f:cc:bb:d0:79:4b:ce:f1:89:08:db:3f:59:5f:b8:62:ff:1d:
d9:6f:22:92:bb:9b:fc:1f:43:c4:f4:ea:01:1a:fb:29:b7:d4:
3b:37:30:23:35:b8:21:bb:f3:60:5f:30:77:9a:f8:08:52:9a:
b9:29:19:3e:8c:de:2c:e5:9f:31:a1:62:57:bb:12:92:37:5e:
1f:29:2d:35:ed:e3:20:df:42:d9:72:32:9c:c3:91:cc:39:21:
59:a7:55:43:c2:1f:9e:92:df:76:a8:07:32:4e:59:e9:63:65:
8a:1e:4a:5f:5e:b3:03:67:b0:b0:45:9b:39:b0:b2:9c:0a:f8:
af:db:a5:f7:1f:8c:b4:9b:7f:1a:9a:11:af:31:c6:71:3d:fd:
e3:f1:4c:f9:96:d0:4e:42:d2:7b:d2:23:d1:f0:31:a2:0b:51:
c0:d3:fa:e1:c5:b9:d8:1b:11:6b:81:4b:2d:94:60:b4:02:1c:
9c:00:49:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTYaQM62dz0fJDbC/mOu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjQwMTAyMDgzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWFjZTIwMzgxNGU2OWRiODE3MGZjMWRkMTkzYTY1ZmQyMjQzNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv5lZZkU0SUaRa6uDeVDzEuX4gbZ
AZItIs9iUPDDKhBLD79yKYwnVvFKedHxKmmssbj+2y7iMZHav6bzpmhZp/pjMr8v
AnvU+CbsiUd1mcvSYT0MxmtOqnJ4r/XTvuLWSReXBti5vJ0vIXHWoNAJsk1W+UEj
2t178DB1iyiJLlaikdf2H3V2BGhEejwkHgD5kIuCqsGdhHAtqvdg0bmCh8rRzDHl
R7nbl2bDgaGMUO0n+p82eaCLc30NWj/ahv7CbuegeOZn4RVwO9SWVv2LDnBEPVhO
xEgfhk6aNO9+D8qelPvTBL5/Ap5arrAdk0eXyTl7WvO87fT54A6YWkgqyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqs4gOBTmnbgXD8HdGTpl/SJDTjMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvdXF6aUE0Rk9hZHVCY1B3ZDBaT21YOUlrTk9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQsZMA0G
CSqGSIb3DQEBCwUAA4IBAQC9N0r88aZNwONyyX/63JejPXNvZeaC9XA7apt2HMyN
dJDWqw5fCWYAr4RL3/gLtKGtWLhIJl46CR0qg9NlYXQKhzk7EpYxuvQfzLvQeUvO
8YkI2z9ZX7hi/x3ZbyKSu5v8H0PE9OoBGvspt9Q7NzAjNbghu/NgXzB3mvgIUpq5
KRk+jN4s5Z8xoWJXuxKSN14fKS017eMg30LZcjKcw5HMOSFZp1VDwh+ekt92qAcy
TlnpY2WKHkpfXrMDZ7CwRZs5sLKcCviv26X3H4y0m38amhGvMcZxPf3j8Uz5ltBO
QtJ70iPR8DGiC1HA0/rhxbnYGxFrgUstlGC0AhycAEnW
-----END CERTIFICATE-----
Generated at Sat May 18 14:20:21 2024 by rpki-client on console-fra.rpki-client.org