Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/U8ffZROwHO5AvO8ss3BVV6_vUhI.roa
File: U8ffZROwHO5AvO8ss3BVV6_vUhI.roa (raw, json)
Hash identifier: 8wdNdel5aPRrMlDisHiW3L5nmXkjszdWN+fP7kZZH7Y=
Subject key identifier: 53:C7:DF:65:13:B0:1C:EE:40:BC:EF:2C:B3:70:55:57:AF:EF:52:12
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFAEA411BD3EBC4F8A4BF7E23D2E30
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/U8ffZROwHO5AvO8ss3BVV6_vUhI.roa
Signing time: Tue 02 Jan 2024 06:32:31 +0000
ROA not before: Tue 02 Jan 2024 06:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209657
IP address blocks: 176.118.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ae:a4:11:bd:3e:bc:4f:8a:4b:f7:e2:3d:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53c7df6513b01cee40bcef2cb3705557afef5212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:c2:5c:66:ab:80:ed:f2:aa:ae:f7:f4:29:
4d:7f:80:62:69:c0:2c:43:c4:aa:6c:89:9f:1e:3e:
6c:91:af:12:19:15:dc:03:7d:a1:a1:5a:06:63:28:
37:6c:e9:74:12:89:15:21:6e:87:82:46:4a:5b:bd:
8d:8c:21:15:de:42:77:15:95:60:36:bb:c1:f5:c2:
9d:82:10:f0:91:bb:c7:3f:71:08:e9:40:a3:1f:2f:
0a:e5:5e:f7:e7:a3:6a:d1:5f:df:6c:97:2b:60:39:
90:08:3a:ee:ba:89:8d:82:44:aa:5d:3d:e1:af:cc:
a7:fe:97:7a:02:97:31:7b:a6:04:7e:c9:8f:2c:b0:
de:df:e9:d9:54:4e:df:9e:1f:41:42:a5:28:62:94:
6f:d9:c2:53:cd:9b:ac:53:f4:e9:c8:68:2e:17:1f:
51:ab:51:ad:51:db:ae:54:1c:de:30:4c:1d:5e:8d:
f8:07:5f:58:dc:32:3e:b2:17:cd:9e:43:8c:e0:fc:
a2:5c:eb:5b:54:90:d9:29:13:06:34:67:e0:f2:e1:
63:dc:df:23:00:a1:9d:79:c3:5a:21:5c:6b:c4:ca:
bb:5c:6a:c6:a2:34:d5:11:63:81:b4:f1:19:05:1a:
84:a1:cd:4d:d5:23:21:90:18:7c:a6:8c:28:72:97:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:DF:65:13:B0:1C:EE:40:BC:EF:2C:B3:70:55:57:AF:EF:52:12
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/U8ffZROwHO5AvO8ss3BVV6_vUhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:5d:1b:58:73:ed:a0:c6:57:48:e4:80:33:64:76:4e:74:a2:
2f:df:d4:98:d9:34:84:4e:39:60:64:0c:5d:79:3c:2b:1a:20:
08:96:bb:d0:96:30:7b:90:17:f0:c8:6d:02:75:70:57:97:37:
30:b7:c9:e5:ad:e1:02:02:c3:ca:70:07:d5:8b:cc:26:0a:a1:
40:eb:99:09:ca:23:2a:d3:3c:2e:63:77:de:6a:5c:0d:14:19:
73:af:77:00:7b:d9:f8:b6:97:ed:33:fd:c5:c5:b1:83:f2:8f:
4f:66:46:7c:86:e7:45:93:d7:29:f6:37:c6:4c:0f:48:8c:ce:
e4:89:eb:32:98:d7:b6:43:a9:59:2b:ff:83:7b:a2:f7:05:4a:
4a:76:24:6d:9c:69:44:ed:5a:da:8a:93:95:24:6d:5e:5e:e2:
01:e5:05:02:a2:be:0a:76:ed:83:08:2e:ad:9d:7d:97:ae:05:
6b:94:f6:c4:5b:67:56:ee:fb:8d:d0:82:f5:2a:44:b3:54:d5:
33:d1:a9:ce:de:ff:23:7b:87:3b:15:97:5a:9b:4d:6d:67:d7:
94:14:62:39:f9:e6:ea:db:07:71:58:5b:ca:1c:66:dd:15:28:
73:c7:a6:48:fd:ec:35:1f:c4:81:65:a2:60:93:4f:e1:6b:80:
1f:51:cf:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI366kEb0+vE+KS/fiPS4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2M3ZGY2NTEzYjAxY2VlNDBiY2VmMmNiMzcwNTU1N2FmZWY1MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgfCXGargO3yqq739ClNf4BiacAs
Q8SqbImfHj5ska8SGRXcA32hoVoGYyg3bOl0EokVIW6HgkZKW72NjCEV3kJ3FZVg
NrvB9cKdghDwkbvHP3EI6UCjHy8K5V7356Nq0V/fbJcrYDmQCDruuomNgkSqXT3h
r8yn/pd6Apcxe6YEfsmPLLDe3+nZVE7fnh9BQqUoYpRv2cJTzZusU/TpyGguFx9R
q1GtUduuVBzeMEwdXo34B19Y3DI+shfNnkOM4PyiXOtbVJDZKRMGNGfg8uFj3N8j
AKGdecNaIVxrxMq7XGrGojTVEWOBtPEZBRqEoc1N1SMhkBh8powocpeoIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPH32UTsBzuQLzvLLNwVVev71ISMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvVThmZlpST3dITzVBdk84c3MzQlZWNl92VWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHbEMA0G
CSqGSIb3DQEBCwUAA4IBAQCsXRtYc+2gxldI5IAzZHZOdKIv39SY2TSETjlgZAxd
eTwrGiAIlrvQljB7kBfwyG0CdXBXlzcwt8nlreECAsPKcAfVi8wmCqFA65kJyiMq
0zwuY3fealwNFBlzr3cAe9n4tpftM/3FxbGD8o9PZkZ8hudFk9cp9jfGTA9IjM7k
iesymNe2Q6lZK/+De6L3BUpKdiRtnGlE7VraipOVJG1eXuIB5QUCor4Kdu2DCC6t
nX2XrgVrlPbEW2dW7vuN0IL1KkSzVNUz0anO3v8je4c7FZdam01tZ9eUFGI5+ebq
2wdxWFvKHGbdFShzx6ZI/ew1H8SBZaJgk0/ha4AfUc8K
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:58 2024 by rpki-client on console-ams.rpki-client.org