Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/U9Wex3sE-QNoTz5kudmOVpGRgBY.roa
File: U9Wex3sE-QNoTz5kudmOVpGRgBY.roa (raw, json)
Hash identifier: 4VM54EL/QibVDFYO4YFt88Bkkd1GGtQoLF6CCF8IRaE=
Subject key identifier: 53:D5:9E:C7:7B:04:F9:03:68:4F:3E:64:B9:D9:8E:56:91:91:80:16
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 018CC26D5E42838BB6B45247541F2D423B83
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/U9Wex3sE-QNoTz5kudmOVpGRgBY.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57039
IP address blocks: 94.143.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5e:42:83:8b:b6:b4:52:47:54:1f:2d:42:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53d59ec77b04f903684f3e64b9d98e5691918016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:39:12:3b:5f:9c:ee:e6:c5:db:ed:15:f8:
4e:28:fb:77:39:15:b4:08:a8:bb:05:2f:43:15:e8:
fb:43:fc:84:79:40:1b:e2:2a:5c:7e:4d:11:90:51:
ae:5a:c6:0e:d1:5e:96:6c:96:a6:9e:0e:57:81:a7:
71:3d:d8:30:10:20:a6:3d:8f:7a:02:3f:53:17:ef:
b7:0d:9d:88:1a:4c:53:75:60:c5:d2:89:32:fc:c3:
7b:ad:8f:61:2e:a1:06:9a:c3:26:25:9b:ff:d4:53:
30:98:cc:42:6b:6a:25:01:24:d2:b2:08:93:e7:16:
04:00:10:3a:d0:32:71:c4:4d:69:8b:42:b8:16:28:
0a:f7:cf:d2:12:29:2a:6f:8e:21:a0:e9:77:cb:0f:
b2:e5:1f:a9:cb:9f:1f:0f:52:72:be:23:23:11:d7:
07:fa:4c:4f:c5:90:71:84:e2:fb:96:e5:c5:2d:d1:
bc:6a:bf:9d:d1:99:eb:49:61:30:7c:53:78:85:ba:
e6:55:5b:b5:0a:8a:9a:20:00:b7:d9:3b:6c:3f:8b:
da:c0:d3:d5:94:bd:d2:cd:2c:24:bb:0e:ab:21:18:
ff:a2:d9:7e:41:00:ed:88:eb:5f:87:71:51:8a:1c:
fc:17:e8:22:25:b2:7d:fc:e2:56:8d:5c:6f:a3:9e:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D5:9E:C7:7B:04:F9:03:68:4F:3E:64:B9:D9:8E:56:91:91:80:16
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/U9Wex3sE-QNoTz5kudmOVpGRgBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.99.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8f:83:79:db:ca:0e:0e:07:8c:80:62:df:e4:e3:80:b4:68:
90:ac:54:3f:7f:dd:6a:8c:46:bf:cb:f0:b1:f3:a5:84:cb:50:
1a:99:f7:bf:ff:38:ed:ae:47:06:8c:59:c9:e1:74:bf:68:1b:
21:9b:6a:f4:a3:04:21:6d:22:c2:d7:47:cd:12:3a:23:82:6e:
08:0d:79:e0:02:c1:04:d2:9f:ef:04:74:fc:9c:35:e7:80:99:
21:30:67:5e:68:95:29:b5:0c:27:30:72:3b:44:ef:17:c3:56:
79:33:0e:f3:1e:3b:05:d9:96:ea:32:28:78:3e:69:5a:d2:8d:
fb:c7:3b:9c:fe:f8:73:c3:36:0e:4d:3f:06:f1:cb:52:8c:c7:
e2:41:d1:41:bb:ee:63:0a:ea:21:33:22:67:f2:55:d8:8c:81:
22:fc:f8:20:2f:23:64:cc:3e:53:32:22:ad:49:d7:3f:52:7c:
4c:5b:63:67:af:85:68:ee:79:b4:e6:21:35:14:9b:a4:6a:69:
51:b0:17:bb:35:2a:a3:76:cc:04:09:aa:9d:ed:73:3e:0c:12:
bc:05:ae:98:00:36:26:7e:25:d0:9a:8d:e8:d0:3b:63:68:bb:
c1:91:89:ad:5d:ae:f1:68:ea:cb:f7:29:11:af:bf:a9:d4:e7:
ff:ab:80:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbV5Cg4u2tFJHVB8tQjuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1
MjE3NDYwHhcNMjQwMTAxMDAyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2Q1OWVjNzdiMDRmOTAzNjg0ZjNlNjRiOWQ5OGU1NjkxOTE4MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIs5EjtfnO7mxdvtFfhOKPt3ORW0
CKi7BS9DFej7Q/yEeUAb4ipcfk0RkFGuWsYO0V6WbJamng5XgadxPdgwECCmPY96
Aj9TF++3DZ2IGkxTdWDF0oky/MN7rY9hLqEGmsMmJZv/1FMwmMxCa2olASTSsgiT
5xYEABA60DJxxE1pi0K4FigK98/SEikqb44hoOl3yw+y5R+py58fD1JyviMjEdcH
+kxPxZBxhOL7luXFLdG8ar+d0ZnrSWEwfFN4hbrmVVu1CoqaIAC32TtsP4vawNPV
lL3SzSwkuw6rIRj/otl+QQDtiOtfh3FRihz8F+giJbJ9/OJWjVxvo55f7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPVnsd7BPkDaE8+ZLnZjlaRkYAWMB8GA1UdIwQY
MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt
NTBmYzRkNTU3ZDA4LzEvVTlXZXgzc0UtUU5vVHo1a3VkbU9WcEdSZ0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4
LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo9jMA0G
CSqGSIb3DQEBCwUAA4IBAQA4j4N528oODgeMgGLf5OOAtGiQrFQ/f91qjEa/y/Cx
86WEy1Aamfe//zjtrkcGjFnJ4XS/aBshm2r0owQhbSLC10fNEjojgm4IDXngAsEE
0p/vBHT8nDXngJkhMGdeaJUptQwnMHI7RO8Xw1Z5Mw7zHjsF2ZbqMih4Pmla0o37
xzuc/vhzwzYOTT8G8ctSjMfiQdFBu+5jCuohMyJn8lXYjIEi/PggLyNkzD5TMiKt
Sdc/UnxMW2Nnr4Vo7nm05iE1FJukamlRsBe7NSqjdswECaqd7XM+DBK8Ba6YADYm
fiXQmo3o0DtjaLvBkYmtXa7xaOrL9ykRr7+p1Of/q4CL
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:32:11 2024 by rpki-client on console-ams.rpki-client.org