Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/U2aE4TKgGspLQNBJynv8rVbIvN4.roa
File: U2aE4TKgGspLQNBJynv8rVbIvN4.roa (raw, json)
Hash identifier: p5LBUR3NkU8Pi9hJjCHnzlHEXx5i4Wq1hHRlyFtmeaA=
Subject key identifier: 53:66:84:E1:32:A0:1A:CA:4B:40:D0:49:CA:7B:FC:AD:56:C8:BC:DE
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 018CC94E0F0BFF2610B0C73C953F58E99357
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/U2aE4TKgGspLQNBJynv8rVbIvN4.roa
Signing time: Tue 02 Jan 2024 08:33:05 +0000
ROA not before: Tue 02 Jan 2024 08:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201274
IP address blocks: 185.79.14.0/23 maxlen: 24
185.79.12.0/22 maxlen: 23
185.79.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0f:0b:ff:26:10:b0:c7:3c:95:3f:58:e9:93:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Jan 2 08:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=536684e132a01aca4b40d049ca7bfcad56c8bcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:a8:2d:cf:75:0e:4f:f0:a5:c1:1a:cb:90:
84:36:a6:b8:a5:61:05:1a:b1:ab:fb:a4:5b:dc:dc:
eb:ae:84:02:49:10:fa:8f:dc:25:13:f3:6a:a1:69:
7b:78:25:ba:c3:fa:74:d4:54:85:13:ab:b3:d8:e4:
68:15:3c:29:72:e7:bf:f5:8f:75:da:13:32:2d:c6:
40:2b:d9:89:69:e4:73:b2:5b:10:58:f4:86:35:97:
2a:e3:cb:27:fa:53:9b:2d:90:08:6b:d8:15:f0:b4:
77:db:de:5b:f3:a0:bd:26:de:d5:21:04:d2:2e:81:
9c:e6:c6:76:2a:83:4a:d1:7f:a4:bc:42:af:fa:2b:
3e:3d:16:ba:06:c4:65:21:02:ab:58:aa:45:62:7c:
c9:0b:27:5a:2e:52:82:84:bb:57:39:1d:db:5e:e9:
a9:62:57:2f:ce:5e:c6:63:ff:26:f5:31:1c:60:2f:
60:c6:9c:b1:ee:f5:f5:dc:cc:9a:1f:2b:07:c3:4c:
13:79:89:1e:e5:2d:7a:4b:e7:7c:3d:98:34:25:77:
85:1c:95:aa:f6:f3:08:63:29:be:24:8b:3d:5d:32:
df:4a:3e:f3:7f:12:f7:b0:a6:4c:05:18:9d:c7:d8:
dd:d6:93:4b:10:c6:fd:79:c4:46:d6:bd:ef:af:9d:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:66:84:E1:32:A0:1A:CA:4B:40:D0:49:CA:7B:FC:AD:56:C8:BC:DE
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/U2aE4TKgGspLQNBJynv8rVbIvN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.12.0/22
Signature Algorithm: sha256WithRSAEncryption
75:98:0e:06:61:8c:f9:ae:6d:35:48:26:ea:de:08:c0:ba:8c:
d2:66:07:51:fb:73:9a:38:da:86:e8:34:06:d5:24:42:62:ff:
52:26:19:a0:36:a5:c0:c5:79:fc:13:be:7c:cd:09:9b:e0:f9:
75:65:11:07:63:38:0d:3f:60:6f:d4:81:5c:74:41:93:8e:ad:
2c:c1:f9:72:ed:c2:d1:7a:b9:22:c1:b1:96:dd:93:a0:41:6d:
a2:74:4a:d4:f6:6e:43:0c:fe:88:4a:c8:0a:59:5a:29:f4:b7:
13:c4:9d:c4:24:f6:d3:13:72:09:4e:e6:73:af:58:30:ac:75:
b3:8d:2e:e9:e9:80:45:1f:3b:cd:b3:1d:e4:3d:c2:36:70:ff:
70:30:c7:31:43:16:30:18:36:7c:02:ca:eb:7e:93:bc:ee:22:
3a:1c:4a:6b:cb:8e:69:b2:95:8e:2a:d2:90:01:23:0f:5e:93:
d8:24:6b:b1:3a:4a:2e:31:14:8f:25:24:cd:f5:18:db:97:3a:
81:c0:79:c7:1d:04:2b:36:2e:9c:41:17:27:4e:20:a9:23:1d:
a1:f1:e5:18:6c:94:34:71:c7:d3:f3:b3:5e:cd:f8:44:df:e7:
5b:9f:8b:69:f8:c3:98:45:65:4b:fb:59:c7:9d:80:f8:31:eb:
6d:ec:02:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTg8L/yYQsMc8lT9Y6ZNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy
N2IwYzkwHhcNMjQwMTAyMDgzMzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzY2ODRlMTMyYTAxYWNhNGI0MGQwNDljYTdiZmNhZDU2YzhiY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslqoLc91Dk/wpcEay5CENqa4pWEF
GrGr+6Rb3NzrroQCSRD6j9wlE/NqoWl7eCW6w/p01FSFE6uz2ORoFTwpcue/9Y91
2hMyLcZAK9mJaeRzslsQWPSGNZcq48sn+lObLZAIa9gV8LR3295b86C9Jt7VIQTS
LoGc5sZ2KoNK0X+kvEKv+is+PRa6BsRlIQKrWKpFYnzJCydaLlKChLtXOR3bXump
Ylcvzl7GY/8m9TEcYC9gxpyx7vX13MyaHysHw0wTeYke5S16S+d8PZg0JXeFHJWq
9vMIYym+JIs9XTLfSj7zfxL3sKZMBRidx9jd1pNLEMb9ecRG1r3vr51zEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFNmhOEyoBrKS0DQScp7/K1WyLzeMB8GA1UdIwQY
MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt
OWE4MDNmNzM2YzRhLzEvVTJhRTRUS2dHc3BMUU5CSnludjhyVmJJdk40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh
LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuU8MMA0G
CSqGSIb3DQEBCwUAA4IBAQB1mA4GYYz5rm01SCbq3gjAuozSZgdR+3OaONqG6DQG
1SRCYv9SJhmgNqXAxXn8E758zQmb4Pl1ZREHYzgNP2Bv1IFcdEGTjq0swfly7cLR
erkiwbGW3ZOgQW2idErU9m5DDP6ISsgKWVop9LcTxJ3EJPbTE3IJTuZzr1gwrHWz
jS7p6YBFHzvNsx3kPcI2cP9wMMcxQxYwGDZ8AsrrfpO87iI6HEpry45pspWOKtKQ
ASMPXpPYJGuxOkouMRSPJSTN9RjblzqBwHnHHQQrNi6cQRcnTiCpIx2h8eUYbJQ0
ccfT87NezfhE3+dbn4tp+MOYRWVL+1nHnYD4Mett7AJv
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:38 2024 by rpki-client on console-fra.rpki-client.org