Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/tKudBUUKJeGwWKDgC6TrUEGOd2I.roa
File: tKudBUUKJeGwWKDgC6TrUEGOd2I.roa (raw, json)
Hash identifier: z4JGOI0j4C1v3V9osJXKSTZhBiUr9PO2q96UFabBK2A=
Subject key identifier: B4:AB:9D:05:45:0A:25:E1:B0:58:A0:E0:0B:A4:EB:50:41:8E:77:62
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018DC343446C9C0B47D1CD91046C1DCFADBC
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/tKudBUUKJeGwWKDgC6TrUEGOd2I.roa
Signing time: Mon 19 Feb 2024 21:26:21 +0000
ROA not before: Mon 19 Feb 2024 21:26:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 88.80.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:43:44:6c:9c:0b:47:d1:cd:91:04:6c:1d:cf:ad:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 19 21:26:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4ab9d05450a25e1b058a0e00ba4eb50418e7762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:0b:d2:33:ca:cf:6f:e6:3a:18:da:2c:ff:
b0:02:2b:b0:3d:e5:46:a5:ee:f1:52:58:cc:13:0c:
0c:d7:db:fc:26:fe:38:d4:59:3e:75:f4:ad:8e:62:
b7:d0:51:b0:4c:9c:1e:2e:d8:46:c1:41:76:8b:d3:
9b:37:04:82:42:43:22:85:6e:07:18:8d:b6:62:2d:
88:41:7c:98:61:60:2e:c3:db:5a:15:bb:61:b8:0a:
ef:7c:cd:f1:53:cb:bb:cf:6c:51:46:0f:d2:56:97:
15:a4:02:f5:b6:85:a4:0a:d7:17:37:5b:66:ab:7a:
db:2c:3d:9d:e4:be:3a:b3:49:ce:2c:1c:f1:b2:91:
40:87:d0:cd:dd:06:1f:c6:e6:94:0e:9d:6b:e9:63:
f0:d4:51:3a:ec:52:e7:33:8a:a6:83:42:93:49:f5:
07:63:6c:26:07:a1:86:e8:48:ad:b9:bf:2b:97:b4:
99:ca:3e:40:15:11:f3:ce:67:5c:80:91:e3:3d:fc:
87:ef:57:5f:ef:e9:68:9d:ec:78:ec:96:62:ef:fe:
f9:9f:28:6c:35:89:0c:9d:ac:4f:9a:f5:32:36:1a:
6e:55:08:e4:47:b9:0d:5e:bd:76:6c:56:cd:75:73:
d1:e8:f7:f6:1a:8a:2c:90:5a:93:8d:57:be:4f:36:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AB:9D:05:45:0A:25:E1:B0:58:A0:E0:0B:A4:EB:50:41:8E:77:62
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/tKudBUUKJeGwWKDgC6TrUEGOd2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:66:11:31:34:ff:e9:4d:7d:f1:f3:83:28:8a:28:11:33:9b:
99:d8:c7:e1:c8:7d:01:6f:80:a2:ea:8d:48:78:75:20:56:ea:
d4:bc:be:33:f3:23:bb:3f:c1:dd:84:b7:71:ba:ae:24:b9:b4:
71:ea:27:2c:6b:3b:a5:12:08:2b:2c:6c:cc:74:6a:dd:af:1f:
fe:ad:88:0c:66:80:92:c2:fe:af:29:8e:2e:b7:f3:3e:e7:dd:
17:80:82:38:9e:cd:c8:31:b8:8d:6e:38:34:a8:29:3a:de:14:
ce:6f:94:1a:eb:75:bd:bf:ae:13:45:44:cc:35:ee:ec:26:42:
f2:a7:76:6b:e8:c3:cb:df:55:35:f8:96:21:2a:24:b1:77:d3:
ba:e5:bd:32:c5:b5:0b:fe:cb:c5:85:8e:fc:02:df:48:51:25:
7d:ca:e4:2c:c7:64:a5:e4:43:bd:ad:cb:62:ab:14:2f:42:1c:
1a:a1:5d:26:ba:ad:d4:81:e1:aa:90:2a:14:d8:40:37:c8:e9:
5e:52:ea:2d:91:7d:af:b0:50:dd:5b:04:59:a1:30:ab:a3:d5:
ad:02:10:c4:cf:26:a0:68:45:bf:4f:99:d5:c9:4d:be:7d:59:
c5:92:63:64:e0:f2:20:7f:25:f7:70:b8:fb:29:9e:c9:53:6a:
39:3a:01:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3DQ0RsnAtH0c2RBGwdz628MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwMjE5MjEyNjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGFiOWQwNTQ1MGEyNWUxYjA1OGEwZTAwYmE0ZWI1MDQxOGU3NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyIL0jPKz2/mOhjaLP+wAiuwPeVG
pe7xUljMEwwM19v8Jv441Fk+dfStjmK30FGwTJweLthGwUF2i9ObNwSCQkMihW4H
GI22Yi2IQXyYYWAuw9taFbthuArvfM3xU8u7z2xRRg/SVpcVpAL1toWkCtcXN1tm
q3rbLD2d5L46s0nOLBzxspFAh9DN3QYfxuaUDp1r6WPw1FE67FLnM4qmg0KTSfUH
Y2wmB6GG6Eitub8rl7SZyj5AFRHzzmdcgJHjPfyH71df7+lonex47JZi7/75nyhs
NYkMnaxPmvUyNhpuVQjkR7kNXr12bFbNdXPR6Pf2GooskFqTjVe+TzZSdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLSrnQVFCiXhsFig4Auk61BBjndiMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvdEt1ZEJVVUtKZUd3V0tEZ0M2VHJVRUdPZDJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWFCOMA0G
CSqGSIb3DQEBCwUAA4IBAQBfZhExNP/pTX3x84MoiigRM5uZ2MfhyH0Bb4Ci6o1I
eHUgVurUvL4z8yO7P8HdhLdxuq4kubRx6icsazulEggrLGzMdGrdrx/+rYgMZoCS
wv6vKY4ut/M+590XgII4ns3IMbiNbjg0qCk63hTOb5Qa63W9v64TRUTMNe7sJkLy
p3Zr6MPL31U1+JYhKiSxd9O65b0yxbUL/svFhY78At9IUSV9yuQsx2Sl5EO9rcti
qxQvQhwaoV0muq3UgeGqkCoU2EA3yOleUuotkX2vsFDdWwRZoTCro9WtAhDEzyag
aEW/T5nVyU2+fVnFkmNk4PIgfyX3cLj7KZ7JU2o5OgFX
-----END CERTIFICATE-----
Generated at Sat May 4 22:56:36 2024 by rpki-client on console-ams.rpki-client.org