Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/ubPZq0RYFzcdZ3bJVHAVmEaqwuo.roa
File: ubPZq0RYFzcdZ3bJVHAVmEaqwuo.roa (raw, json)
Hash identifier: ZF3xiIt+9VuJ42Wy7ZzO5fbaJtkizbxS0O/XurbNke0=
Subject key identifier: B9:B3:D9:AB:44:58:17:37:1D:67:76:C9:54:70:15:98:46:AA:C2:EA
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 018CC801CD5AE9C4AE7EEE5C03630E4AB333
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/ubPZq0RYFzcdZ3bJVHAVmEaqwuo.roa
Signing time: Tue 02 Jan 2024 02:30:10 +0000
ROA not before: Tue 02 Jan 2024 02:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208416
IP address blocks: 45.138.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:cd:5a:e9:c4:ae:7e:ee:5c:03:63:0e:4a:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Jan 2 02:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9b3d9ab445817371d6776c95470159846aac2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:02:7d:07:83:98:09:06:3d:98:83:79:fe:
95:ce:51:49:9e:a2:ca:71:80:e9:0f:d5:40:03:e7:
6d:a9:71:c0:b6:47:10:b3:4b:e1:c7:a9:fb:b7:c3:
fa:eb:68:30:a0:9d:08:8d:71:ed:41:a9:f0:14:d3:
51:9c:ee:f3:56:52:e9:8b:16:d1:49:48:99:cb:4c:
88:56:66:af:6f:5d:48:86:d9:3a:a5:ff:29:aa:6e:
7e:e0:b6:41:a7:60:dc:2d:69:ee:d0:70:43:0f:7d:
3d:df:94:45:48:49:c5:fa:1c:86:af:b4:7e:5c:cf:
a4:5d:82:4a:ff:60:84:01:66:10:92:4c:4b:19:28:
40:d8:cd:f7:f5:f4:0e:52:a7:91:61:02:3b:9b:4c:
9c:de:ef:69:eb:15:9d:d6:fb:d3:05:13:6a:c6:9d:
ed:ea:1f:86:8a:8c:01:c0:35:8e:1f:5d:44:0e:3e:
da:23:33:16:42:52:ab:1b:9d:65:94:d3:ac:b6:79:
d3:21:f8:88:1f:12:97:1a:ca:c0:60:00:b7:b6:f8:
84:26:d2:27:76:9a:be:e6:a7:1a:6f:7e:9f:c1:32:
7e:9b:07:25:2f:f4:54:3e:94:77:be:dc:07:3b:03:
71:66:d5:17:cf:fd:9d:b2:72:5b:83:69:be:9b:86:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:D9:AB:44:58:17:37:1D:67:76:C9:54:70:15:98:46:AA:C2:EA
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/ubPZq0RYFzcdZ3bJVHAVmEaqwuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.121.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1f:3f:44:1b:fb:a1:dd:80:89:04:25:c7:1b:06:ae:f0:1a:
57:86:d2:6a:65:42:23:8e:3b:5f:33:61:7d:35:6a:de:0e:95:
f7:78:ab:9c:1c:2d:f6:16:75:dc:19:b3:b2:ae:be:d5:2b:ae:
fd:69:37:87:03:d7:39:8c:19:c0:cc:c2:62:72:fd:18:be:d6:
ef:5f:6d:86:c3:46:e1:c6:78:4b:0e:5c:60:72:df:a5:c3:50:
68:37:85:3f:35:63:c1:72:8a:03:7c:d2:8d:28:83:34:ce:28:
60:04:6e:9c:63:af:f0:0c:72:4b:91:73:5a:58:3c:6a:23:f4:
ab:66:24:26:46:44:a1:f7:3d:3c:b9:88:18:e1:15:93:6a:cf:
6a:4b:ba:bc:3e:30:06:75:cf:0b:9d:c7:c8:c5:10:a6:fa:74:
00:e1:6c:fd:90:02:8e:85:44:2d:e2:fc:a3:3a:81:2a:17:b2:
0e:55:f8:b5:e4:7e:3c:d5:dd:6b:11:aa:eb:66:26:e3:6e:7e:
01:74:85:20:3f:a9:11:37:b6:42:f7:ac:35:c8:bb:61:fc:04:
29:47:3b:16:04:1f:66:d9:23:9c:3c:20:ba:e8:6e:85:c6:37:
45:25:74:4c:b9:7a:4c:69:38:7c:47:f0:cb:71:84:b6:c5:1f:
78:6b:e2:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAc1a6cSufu5cA2MOSrMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5
MDYwMWYwHhcNMjQwMTAyMDIzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWIzZDlhYjQ0NTgxNzM3MWQ2Nzc2Yzk1NDcwMTU5ODQ2YWFjMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/UCfQeDmAkGPZiDef6VzlFJnqLK
cYDpD9VAA+dtqXHAtkcQs0vhx6n7t8P662gwoJ0IjXHtQanwFNNRnO7zVlLpixbR
SUiZy0yIVmavb11Ihtk6pf8pqm5+4LZBp2DcLWnu0HBDD30935RFSEnF+hyGr7R+
XM+kXYJK/2CEAWYQkkxLGShA2M339fQOUqeRYQI7m0yc3u9p6xWd1vvTBRNqxp3t
6h+GiowBwDWOH11EDj7aIzMWQlKrG51llNOstnnTIfiIHxKXGsrAYAC3tviEJtIn
dpq+5qcab36fwTJ+mwclL/RUPpR3vtwHOwNxZtUXz/2dsnJbg2m+m4aJ4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmz2atEWBc3HWd2yVRwFZhGqsLqMB8GA1UdIwQY
MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt
NmNlNDQ0ZWJlYWYwLzEvdWJQWnEwUllGemNkWjNiSlZIQVZtRWFxd3VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw
LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYp5MA0G
CSqGSIb3DQEBCwUAA4IBAQBoHz9EG/uh3YCJBCXHGwau8BpXhtJqZUIjjjtfM2F9
NWreDpX3eKucHC32FnXcGbOyrr7VK679aTeHA9c5jBnAzMJicv0YvtbvX22Gw0bh
xnhLDlxgct+lw1BoN4U/NWPBcooDfNKNKIM0zihgBG6cY6/wDHJLkXNaWDxqI/Sr
ZiQmRkSh9z08uYgY4RWTas9qS7q8PjAGdc8LncfIxRCm+nQA4Wz9kAKOhUQt4vyj
OoEqF7IOVfi15H481d1rEarrZibjbn4BdIUgP6kRN7ZC96w1yLth/AQpRzsWBB9m
2SOcPCC66G6FxjdFJXRMuXpMaTh8R/DLcYS2xR94a+LT
-----END CERTIFICATE-----
Generated at Wed Jun 26 17:47:04 2024 by rpki-client on console-ams.rpki-client.org