Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/uEjH0AaPJwVsPnTrq1GHOlK1cig.roa
File: uEjH0AaPJwVsPnTrq1GHOlK1cig.roa (raw, json)
Hash identifier: fJ243IZ3Tl3JGL8tmjzsmbNhMtl2LeksQAB70fPXCNQ=
Subject key identifier: B8:48:C7:D0:06:8F:27:05:6C:3E:74:EB:AB:51:87:3A:52:B5:72:28
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 018CC348E54D26AB87EA1CD4E21BA0EE28A8
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/uEjH0AaPJwVsPnTrq1GHOlK1cig.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59422
IP address blocks: 2a13:74c0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e5:4d:26:ab:87:ea:1c:d4:e2:1b:a0:ee:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b848c7d0068f27056c3e74ebab51873a52b57228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:02:9e:52:44:36:0f:e7:39:e9:5b:29:e5:
57:dd:d6:9e:41:e1:b1:7f:87:40:3b:bd:45:8c:da:
ed:2f:93:f6:31:11:04:ed:fa:a7:ad:1b:5c:a3:be:
01:38:40:f2:b9:48:f1:3a:1f:ba:ef:8f:39:06:bd:
51:0c:b7:1d:1c:86:91:c3:5c:97:59:63:c9:fc:0e:
d1:6b:08:51:b0:b7:93:22:40:18:15:d9:83:de:d4:
56:44:ff:83:fb:03:c9:a7:cd:3e:2f:33:31:2e:01:
5a:92:5b:fb:ba:58:33:d9:32:26:b1:f4:2a:fc:ab:
01:01:a0:58:12:ee:5b:af:5e:5d:25:a9:a8:93:4f:
0f:d6:f5:e3:96:42:30:af:13:78:36:66:07:14:d7:
9c:bb:c8:c1:cf:1f:7a:12:6c:60:cd:0c:73:cd:cf:
a0:31:5b:b3:96:d6:af:31:71:68:fb:80:1e:38:7b:
37:c3:21:62:56:ef:73:ee:8f:7d:b4:8b:ce:26:6c:
c4:04:5f:dc:92:f9:13:16:5c:15:31:21:53:4a:a7:
6c:cf:b7:67:b7:13:00:78:a0:5c:79:c1:95:f9:fb:
42:b8:53:ec:0d:d3:f9:59:28:44:07:98:78:dd:3e:
7b:c0:97:89:ab:d1:91:64:5d:1a:3d:7b:6e:bf:20:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:C7:D0:06:8F:27:05:6C:3E:74:EB:AB:51:87:3A:52:B5:72:28
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/uEjH0AaPJwVsPnTrq1GHOlK1cig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:74c0:5::/48
Signature Algorithm: sha256WithRSAEncryption
4f:fe:10:6d:11:a1:b1:6f:5f:ed:9a:ce:6a:ac:16:31:7c:d0:
f2:85:25:d4:77:a5:c4:06:0c:be:57:cf:c7:38:79:53:e9:16:
a2:07:fb:14:ad:89:b5:ec:92:94:ce:16:be:81:c0:01:09:3c:
a0:2d:04:83:5c:d4:0c:e3:9c:b5:d2:93:5e:a8:ca:b3:dd:fd:
51:ba:d1:f9:51:d7:99:43:dc:d9:7d:13:ba:a3:96:fe:e9:bc:
69:71:85:fd:69:b7:28:88:04:bc:88:57:7f:6e:6e:e8:2a:12:
2e:b9:60:b9:85:99:2f:94:68:05:79:0c:de:fb:ff:11:c2:f2:
13:7c:66:2f:51:75:7f:36:cb:e9:75:e5:98:41:03:44:a3:db:
71:fb:9e:a6:9e:9f:20:51:96:46:54:d2:59:51:ef:5a:35:96:
7c:3d:11:87:93:d4:3d:83:12:fa:97:a5:29:45:aa:7c:e5:4a:
77:c6:b1:fe:dd:96:25:12:10:31:e2:57:38:90:d9:21:8d:07:
5d:c6:ca:30:49:bd:e7:1b:b3:71:27:5e:a0:9d:d7:a3:79:1a:
82:f3:37:0d:c0:11:4a:99:dd:9c:8b:22:3c:1f:27:4f:2e:3c:
49:c6:31:46:bd:c9:14:be:7b:4c:68:97:01:5e:7e:c2:b1:8c:
11:d5:62:5a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzDSOVNJquH6hzU4hug7iioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTc5YWM5MDUyZjY5NDFiMzk1MzViN2ZkMjFlMmFhYjA4
ZDU4NzgwHhcNMjQwMTAxMDQyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODQ4YzdkMDA2OGYyNzA1NmMzZTc0ZWJhYjUxODczYTUyYjU3MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaYCnlJENg/nOelbKeVX3daeQeGx
f4dAO71FjNrtL5P2MREE7fqnrRtco74BOEDyuUjxOh+67485Br1RDLcdHIaRw1yX
WWPJ/A7RawhRsLeTIkAYFdmD3tRWRP+D+wPJp80+LzMxLgFaklv7ulgz2TImsfQq
/KsBAaBYEu5br15dJamok08P1vXjlkIwrxN4NmYHFNecu8jBzx96EmxgzQxzzc+g
MVuzltavMXFo+4AeOHs3wyFiVu9z7o99tIvOJmzEBF/ckvkTFlwVMSFTSqdsz7dn
txMAeKBcecGV+ftCuFPsDdP5WShEB5h43T57wJeJq9GRZF0aPXtuvyD9TwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLhIx9AGjycFbD5066tRhzpStXIoMB8GA1UdIwQY
MBaAFIgXmskFL2lBs5U1t/0h4qqwjVh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJlYXlRVXZhVUd6bFRXM19TSGlxckNOV0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yNjVlNWMtZmE0Ni00YjAyLWFkMGEt
NWI3OGJmN2U5NjAzLzEvdUVqSDBBYVBKd1ZzUG5UcnExR0hPbEsxY2lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yNjVlNWMtZmE0Ni00YjAyLWFkMGEtNWI3OGJmN2U5NjAz
LzEvaUJlYXlRVXZhVUd6bFRXM19TSGlxckNOV0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhN0wAAF
MA0GCSqGSIb3DQEBCwUAA4IBAQBP/hBtEaGxb1/tms5qrBYxfNDyhSXUd6XEBgy+
V8/HOHlT6RaiB/sUrYm17JKUzha+gcABCTygLQSDXNQM45y10pNeqMqz3f1RutH5
UdeZQ9zZfRO6o5b+6bxpcYX9abcoiAS8iFd/bm7oKhIuuWC5hZkvlGgFeQze+/8R
wvITfGYvUXV/NsvpdeWYQQNEo9tx+56mnp8gUZZGVNJZUe9aNZZ8PRGHk9Q9gxL6
l6UpRap85Up3xrH+3ZYlEhAx4lc4kNkhjQddxsowSb3nG7NxJ16gndejeRqC8zcN
wBFKmd2ciyI8HydPLjxJxjFGvckUvntMaJcBXn7CsYwR1WJa
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:04 2024 by rpki-client on console-fra.rpki-client.org