Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/UZi5b5xNHQmivLU9WOBtaE4nCpE.roa
File: UZi5b5xNHQmivLU9WOBtaE4nCpE.roa (raw, json)
Hash identifier: ebf5LdRyGa4bmidV45NvmMvqIww/eUack6QbwTDrDMk=
Subject key identifier: 51:98:B9:6F:9C:4D:1D:09:A2:BC:B5:3D:58:E0:6D:68:4E:27:0A:91
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 018CC50040EA7423BBAE39EC7601E5EFDD0D
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/UZi5b5xNHQmivLU9WOBtaE4nCpE.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31117
IP address blocks: 91.148.0.0/18 maxlen: 18
185.242.56.0/22 maxlen: 22
2a03:1d80::/29 maxlen: 29
2a03:1d87:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:40:ea:74:23:bb:ae:39:ec:76:01:e5:ef:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5198b96f9c4d1d09a2bcb53d58e06d684e270a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:49:f6:55:37:27:4b:1d:7f:b5:ce:6a:00:
ad:ec:b3:e3:b0:d2:78:8f:d9:a7:e8:ea:8f:1d:82:
31:79:34:5e:0c:b2:1f:21:50:3e:82:af:61:47:7b:
04:44:23:09:92:fd:a9:c8:7a:b9:28:aa:16:81:38:
6f:72:c0:97:62:a4:e4:8a:33:c0:50:11:58:11:ae:
3c:c1:7e:54:d2:b7:97:59:7b:c2:6c:95:82:ca:36:
28:1c:15:d9:f8:4a:a7:59:5c:1e:90:5e:67:3c:20:
73:d1:08:f2:78:df:d1:b0:89:81:de:5d:3b:04:68:
0b:c9:c6:e2:be:79:a3:41:90:df:69:8c:2b:04:6b:
b3:9e:2f:a7:cc:f5:23:d1:bc:4d:f1:98:29:2a:87:
f1:ab:a0:e4:b3:36:ae:2f:15:23:4a:47:a3:8d:cd:
4c:52:d0:88:7e:8b:d3:c1:d9:ee:c8:17:39:74:ab:
60:c0:b8:13:c4:a2:27:9b:f3:01:18:01:a1:2a:bf:
95:21:4e:51:88:e4:8a:18:84:ea:05:38:9e:cc:79:
8e:22:b2:b8:82:69:48:b3:3c:fb:0e:45:4f:b1:23:
0f:00:76:33:42:0a:64:e4:0a:c6:2a:a0:b3:a6:83:
e2:31:05:22:62:8c:0f:ea:17:38:fe:b0:c0:55:ab:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:B9:6F:9C:4D:1D:09:A2:BC:B5:3D:58:E0:6D:68:4E:27:0A:91
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/UZi5b5xNHQmivLU9WOBtaE4nCpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.0.0/18
185.242.56.0/22
IPv6:
2a03:1d80::/29
Signature Algorithm: sha256WithRSAEncryption
12:1b:22:ca:f5:ba:4e:d8:39:c9:0f:52:62:dc:b7:d4:82:a3:
16:80:f0:54:69:2d:c3:dd:a3:a1:6a:4f:f9:f3:88:79:c4:2e:
d9:00:8c:c9:d8:f9:12:be:78:e8:e1:4d:2a:d3:1b:d5:1d:8b:
21:aa:08:d3:c5:92:9f:98:3f:e6:04:95:c9:41:e8:c7:bc:3b:
cf:18:7e:86:fe:2f:75:1c:9c:6d:66:7b:51:2f:59:ec:c2:0f:
69:29:64:1f:48:2b:b9:cb:fb:39:9f:fd:bc:43:1e:c6:ae:19:
be:5a:41:5d:94:0a:b6:8f:d6:10:6f:d3:05:da:e5:30:58:ba:
35:1c:f5:5a:4a:a6:b7:44:29:8b:77:ae:cd:32:9e:06:3b:6d:
92:5c:a5:7a:e0:2f:ae:f2:0d:59:39:bd:c0:77:a3:e4:6c:3a:
d3:70:de:8b:5f:62:8f:bd:31:54:01:ff:32:35:63:d8:ef:b4:
c9:fe:01:0e:38:14:b7:b4:a6:a7:86:0e:7f:58:b7:f3:b0:e4:
5a:af:34:28:d6:89:ae:75:8e:ed:1a:c4:10:14:d4:cc:2e:e0:
e7:f9:20:a4:1f:7d:c2:3f:4f:18:4b:be:53:68:51:3a:1e:51:
14:df:d0:c9:b5:bc:89:9a:70:9f:0a:31:ff:0c:0f:93:cc:8d:
6d:00:26:12
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFAEDqdCO7rjnsdgHl790NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2NiN2Q5ZTUyMWU2NDY5ZmQ3ZTJhZDEzNjAzZmI3ZWVi
ZmUwZTAwHhcNMjQwMTAxMTIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTk4Yjk2ZjljNGQxZDA5YTJiY2I1M2Q1OGUwNmQ2ODRlMjcwYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPxJ9lU3J0sdf7XOagCt7LPjsNJ4
j9mn6OqPHYIxeTReDLIfIVA+gq9hR3sERCMJkv2pyHq5KKoWgThvcsCXYqTkijPA
UBFYEa48wX5U0reXWXvCbJWCyjYoHBXZ+EqnWVwekF5nPCBz0QjyeN/RsImB3l07
BGgLycbivnmjQZDfaYwrBGuzni+nzPUj0bxN8ZgpKofxq6DkszauLxUjSkejjc1M
UtCIfovTwdnuyBc5dKtgwLgTxKInm/MBGAGhKr+VIU5RiOSKGITqBTiezHmOIrK4
gmlIszz7DkVPsSMPAHYzQgpk5ArGKqCzpoPiMQUiYowP6hc4/rDAVau7wQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFGYuW+cTR0Jory1PVjgbWhOJwqRMB8GA1UdIwQY
MBaAFOI8t9nlIeZGn9firRNgP7fuv+DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYt
ZWE2ZjcwNWQyYzBkLzEvVVppNWI1eE5IUW1pdkxVOVdPQnRhRTRuQ3BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYtZWE2ZjcwNWQyYzBk
LzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGW5QAAwQC
ufI4MA0EAgACMAcDBQMqAx2AMA0GCSqGSIb3DQEBCwUAA4IBAQASGyLK9bpO2DnJ
D1Ji3LfUgqMWgPBUaS3D3aOhak/584h5xC7ZAIzJ2PkSvnjo4U0q0xvVHYshqgjT
xZKfmD/mBJXJQejHvDvPGH6G/i91HJxtZntRL1nswg9pKWQfSCu5y/s5n/28Qx7G
rhm+WkFdlAq2j9YQb9MF2uUwWLo1HPVaSqa3RCmLd67NMp4GO22SXKV64C+u8g1Z
Ob3Ad6PkbDrTcN6LX2KPvTFUAf8yNWPY77TJ/gEOOBS3tKanhg5/WLfzsORarzQo
1omudY7tGsQQFNTMLuDn+SCkH33CP08YS75TaFE6HlEU39DJtbyJmnCfCjH/DA+T
zI1tACYS
-----END CERTIFICATE-----
Generated at Tue May 28 18:47:27 2024 by rpki-client on console-fra.rpki-client.org