Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/UyZBBbmnEIuEyK-InC0Trk5RseU.roa
File: UyZBBbmnEIuEyK-InC0Trk5RseU.roa (raw, json)
Hash identifier: UymwxmB5BqyEMc/pZKK6TlMTtZ5c3lASlr7i7dFMm7o=
Subject key identifier: 53:26:41:05:B9:A7:10:8B:84:C8:AF:88:9C:2D:13:AE:4E:51:B1:E5
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 0190DF0F96A3878E8C0CC85B1B6169FB2CFD
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/UyZBBbmnEIuEyK-InC0Trk5RseU.roa
Signing time: Tue 23 Jul 2024 10:07:39 +0000
ROA not before: Tue 23 Jul 2024 10:07:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197382
IP address blocks: 94.141.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:0f:96:a3:87:8e:8c:0c:c8:5b:1b:61:69:fb:2c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jul 23 10:07:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53264105b9a7108b84c8af889c2d13ae4e51b1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:6a:fb:f0:2b:cc:df:0a:b6:86:28:01:bb:
34:44:7e:08:56:3b:09:af:71:a3:e6:03:3f:1b:e9:
4c:75:9e:25:fe:36:01:f0:fb:d6:e1:6b:47:d5:7b:
12:e1:4c:09:9d:60:49:68:91:a2:59:28:29:5c:87:
df:05:87:31:8f:2d:50:e1:65:0f:6f:32:25:b4:9d:
0f:f5:06:7f:c3:48:01:5f:b2:9e:26:b0:f1:eb:bd:
d8:af:fa:f6:c4:6e:9e:82:38:64:b3:86:d7:2d:b0:
98:72:ff:fc:24:07:31:4f:56:72:ce:fa:bf:48:13:
5e:70:dc:f0:66:12:ce:f9:d4:7d:17:0e:1c:55:f9:
31:33:64:14:03:13:19:94:75:4e:07:8d:50:17:95:
66:41:9f:d9:0d:34:db:34:1d:45:b4:ab:c3:5b:e4:
9f:0f:70:88:eb:b1:d5:cc:3e:57:11:39:5f:03:ae:
45:07:72:7f:f9:85:e2:f7:8e:01:54:f5:37:24:50:
0c:46:16:9e:f2:7f:7a:8d:c6:f9:02:a2:20:13:00:
98:23:a8:d1:f9:57:e7:a0:d6:a3:ec:e2:dc:ff:7a:
fc:f3:36:58:34:f9:83:58:c1:c2:e7:b0:d2:7b:e7:
84:1d:ca:31:e0:dd:9b:fb:7e:a1:bf:33:a5:6b:71:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:26:41:05:B9:A7:10:8B:84:C8:AF:88:9C:2D:13:AE:4E:51:B1:E5
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/UyZBBbmnEIuEyK-InC0Trk5RseU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.121.0/24
Signature Algorithm: sha256WithRSAEncryption
21:bd:ee:aa:1d:d1:30:12:18:d9:a3:46:31:90:51:10:b4:73:
e9:84:b7:5e:9f:eb:86:46:ea:d2:08:14:da:96:46:fd:a8:84:
b8:a5:a9:9e:4e:f3:8d:ef:67:a4:ed:6a:94:6f:78:f4:79:0a:
50:08:ad:10:4d:03:6a:cd:26:ee:d0:3a:3d:92:08:47:7d:78:
45:d4:4e:9f:51:65:46:20:cd:49:ef:38:8e:4d:15:50:87:9a:
28:ed:a0:cb:e7:84:d7:04:b3:eb:2a:3a:74:f7:bd:85:ed:52:
ad:56:9a:14:9a:77:b9:e9:45:0d:73:a9:af:9c:bd:a3:dc:3d:
bb:e3:31:b7:07:7e:f7:73:02:7d:c1:37:f6:f5:0d:7d:08:b8:
87:99:9a:29:18:ce:81:21:cb:75:b3:c0:7b:ce:70:d6:bc:bf:
cf:aa:2d:69:71:ac:a0:8c:12:bb:bd:c1:ad:b9:b1:ad:ea:bb:
ea:df:b6:6d:02:08:26:8d:2f:4c:f3:b2:88:84:21:ba:8a:1d:
b4:4a:dd:d0:59:21:41:ed:fc:4a:78:d3:a6:ba:9f:e7:20:93:
d3:d4:8a:0a:be:4a:fe:4d:4f:e0:2f:91:57:49:78:1d:e1:7b:
21:02:7a:b0:f2:33:d8:f6:2f:9e:c4:64:25:c8:74:68:9e:1b:
b2:0d:53:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDfD5ajh46MDMhbG2Fp+yz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj
MTA5OTEwHhcNMjQwNzIzMTAwNzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzI2NDEwNWI5YTcxMDhiODRjOGFmODg5YzJkMTNhZTRlNTFiMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaRq+/ArzN8KtoYoAbs0RH4IVjsJ
r3Gj5gM/G+lMdZ4l/jYB8PvW4WtH1XsS4UwJnWBJaJGiWSgpXIffBYcxjy1Q4WUP
bzIltJ0P9QZ/w0gBX7KeJrDx673Yr/r2xG6egjhks4bXLbCYcv/8JAcxT1Zyzvq/
SBNecNzwZhLO+dR9Fw4cVfkxM2QUAxMZlHVOB41QF5VmQZ/ZDTTbNB1FtKvDW+Sf
D3CI67HVzD5XETlfA65FB3J/+YXi944BVPU3JFAMRhae8n96jcb5AqIgEwCYI6jR
+VfnoNaj7OLc/3r88zZYNPmDWMHC57DSe+eEHcox4N2b+36hvzOla3Ew1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMmQQW5pxCLhMiviJwtE65OUbHlMB8GA1UdIwQY
MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt
NWUyZDYwNzBlZjgzLzEvVXlaQkJibW5FSXVFeUstSW5DMFRyazVSc2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz
LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo15MA0G
CSqGSIb3DQEBCwUAA4IBAQAhve6qHdEwEhjZo0YxkFEQtHPphLden+uGRurSCBTa
lkb9qIS4pameTvON72ek7WqUb3j0eQpQCK0QTQNqzSbu0Do9kghHfXhF1E6fUWVG
IM1J7ziOTRVQh5oo7aDL54TXBLPrKjp0972F7VKtVpoUmne56UUNc6mvnL2j3D27
4zG3B373cwJ9wTf29Q19CLiHmZopGM6BIct1s8B7znDWvL/Pqi1pcaygjBK7vcGt
ubGt6rvq37ZtAggmjS9M87KIhCG6ih20St3QWSFB7fxKeNOmup/nIJPT1IoKvkr+
TU/gL5FXSXgd4XshAnqw8jPY9i+exGQlyHRonhuyDVMb
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:10 2024 by rpki-client on console-fra.rpki-client.org