Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uPdKLBK-bxq88mIuFnFbuDaXPAs.roa
File: uPdKLBK-bxq88mIuFnFbuDaXPAs.roa (raw, json)
Hash identifier: 5mm3TPHMyDVz+ndTfiphiLoH0A5S2cisv4yU23leQGM=
Subject key identifier: B8:F7:4A:2C:12:BE:6F:1A:BC:F2:62:2E:16:71:5B:B8:36:97:3C:0B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DEBECC2CAEF828CC510E50195DD08
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uPdKLBK-bxq88mIuFnFbuDaXPAs.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56679
IP address blocks: 81.3.154.0/24 maxlen: 24
84.204.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:eb:ec:c2:ca:ef:82:8c:c5:10:e5:01:95:dd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8f74a2c12be6f1abcf2622e16715bb836973c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:2c:de:6c:ef:78:f5:44:7f:9f:93:c0:6a:
fa:ae:18:3b:5e:15:d0:1a:a1:6a:3e:60:42:7d:50:
4e:4a:e7:37:dc:c3:c3:11:6d:7f:a1:85:5a:07:7b:
70:74:82:64:be:98:8c:de:d7:28:56:d9:46:3f:39:
98:27:ee:79:dd:dc:c4:f0:b7:01:1c:ee:fa:b1:bc:
21:69:ab:cc:4b:42:0f:dc:ec:4b:d7:40:8b:f2:30:
88:9d:2f:d5:56:42:87:06:26:39:5a:2f:fa:a9:8e:
88:59:cb:0c:4a:34:ee:d2:e1:00:02:82:f5:35:de:
0b:4f:29:46:16:e7:12:be:58:64:10:63:c1:b3:93:
62:9a:29:40:76:7d:12:ec:7c:ee:4e:ee:61:c9:e4:
ab:6e:72:da:1a:65:80:84:69:fa:8a:db:99:9a:ed:
b5:b7:7b:b0:61:67:9b:c5:ef:98:6b:74:ed:65:62:
91:9b:0d:cf:0f:a4:e5:ad:38:e1:30:fd:23:69:99:
b0:6a:4c:da:dd:9a:82:22:22:3a:b2:74:59:ef:a5:
d3:13:fb:5b:7f:aa:1d:5a:00:e0:98:4e:2a:6f:e5:
90:c1:60:94:2b:63:86:b4:c3:d0:96:fd:e7:5b:76:
9b:ce:83:53:77:ad:9e:31:e1:e8:63:fe:64:d6:1c:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:4A:2C:12:BE:6F:1A:BC:F2:62:2E:16:71:5B:B8:36:97:3C:0B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uPdKLBK-bxq88mIuFnFbuDaXPAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.154.0/24
84.204.148.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f3:1b:64:b1:f7:5c:9f:4a:0e:78:96:e2:75:ff:91:ac:07:
5b:c5:09:76:75:b2:e7:12:67:c9:29:fa:a3:02:ce:8f:19:b5:
75:a9:04:a4:d7:ec:83:09:70:70:84:57:31:b5:ed:fe:7a:20:
e5:48:be:9b:5b:99:7a:96:7f:c7:4c:f5:98:c8:9d:80:09:e4:
35:a2:ff:95:6c:a3:be:7c:67:ce:5d:79:84:ce:97:1d:d6:d9:
67:68:1f:1b:0b:b8:1b:65:f9:ab:1d:d1:21:4a:2a:11:51:c7:
d5:87:19:93:c1:18:4a:93:a3:85:75:f9:56:6b:6b:c4:44:76:
08:1a:cc:8a:24:8a:c5:1b:7e:38:46:5c:52:f6:91:a4:bb:74:
67:9b:d2:a0:24:e6:2f:1e:e9:e6:6a:ac:94:2c:96:4f:89:10:
a9:92:3f:aa:53:1e:41:fb:8a:cc:02:37:44:94:38:71:13:00:
6a:ab:4f:75:18:4e:57:bf:1a:45:4f:39:96:a5:e9:6a:89:c0:
56:5a:b1:59:a8:15:2f:03:18:6e:fe:5a:5a:30:ad:dc:66:f3:
9f:81:e9:6b:c9:c9:ba:7a:97:cb:eb:a4:2d:b2:20:c6:3d:2c:
a9:22:60:d4:3e:96:be:84:83:06:6f:2b:94:31:67:be:97:70:
50:51:d8:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbevswsrvgozFEOUBld0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMTAxMTQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGY3NGEyYzEyYmU2ZjFhYmNmMjYyMmUxNjcxNWJiODM2OTczYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLss3mzvePVEf5+TwGr6rhg7XhXQ
GqFqPmBCfVBOSuc33MPDEW1/oYVaB3twdIJkvpiM3tcoVtlGPzmYJ+553dzE8LcB
HO76sbwhaavMS0IP3OxL10CL8jCInS/VVkKHBiY5Wi/6qY6IWcsMSjTu0uEAAoL1
Nd4LTylGFucSvlhkEGPBs5NimilAdn0S7HzuTu5hyeSrbnLaGmWAhGn6ituZmu21
t3uwYWebxe+Ya3TtZWKRmw3PD6TlrTjhMP0jaZmwakza3ZqCIiI6snRZ76XTE/tb
f6odWgDgmE4qb+WQwWCUK2OGtMPQlv3nW3abzoNTd62eMeHoY/5k1hxeuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLj3SiwSvm8avPJiLhZxW7g2lzwLMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvdVBkS0xCSy1ieHE4OG1JdUZuRmJ1RGFYUEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQOaAwQA
VMyUMA0GCSqGSIb3DQEBCwUAA4IBAQBD8xtksfdcn0oOeJbidf+RrAdbxQl2dbLn
EmfJKfqjAs6PGbV1qQSk1+yDCXBwhFcxte3+eiDlSL6bW5l6ln/HTPWYyJ2ACeQ1
ov+VbKO+fGfOXXmEzpcd1tlnaB8bC7gbZfmrHdEhSioRUcfVhxmTwRhKk6OFdflW
a2vERHYIGsyKJIrFG344RlxS9pGku3Rnm9KgJOYvHunmaqyULJZPiRCpkj+qUx5B
+4rMAjdElDhxEwBqq091GE5XvxpFTzmWpelqicBWWrFZqBUvAxhu/lpaMK3cZvOf
gelrycm6epfL66QtsiDGPSypImDUPpa+hIMGbyuUMWe+l3BQUdgu
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:30:26 2024 by rpki-client on console-ams.rpki-client.org