Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/u62AZGUttyiT453W6KEPJY03s1U.roa
File: u62AZGUttyiT453W6KEPJY03s1U.roa (raw, json)
Hash identifier: MpK4Ad2PwCKoGin1TR79fiuQVcurHe4dxamUO9oecI4=
Subject key identifier: BB:AD:80:64:65:2D:B7:28:93:E3:9D:D6:E8:A1:0F:25:8D:37:B3:55
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 018CC2DABA148FF82016A8CD3A48D8C5585F
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/u62AZGUttyiT453W6KEPJY03s1U.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 193.186.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 22:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ba:14:8f:f8:20:16:a8:cd:3a:48:d8:c5:58:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbad8064652db72893e39dd6e8a10f258d37b355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:0b:c2:3d:38:6f:7f:8c:b6:e6:13:30:07:
c6:62:96:2b:78:35:f6:41:dd:ff:c7:bd:c2:d2:29:
2a:c0:e2:a9:38:bd:15:07:69:5c:e6:e2:1f:24:a3:
7e:85:07:f8:53:1a:3d:78:7a:17:52:a5:8e:64:74:
64:15:28:f1:2c:91:c7:f1:7e:d7:4f:74:cf:8e:19:
eb:42:c0:bf:80:2f:0d:05:92:11:f0:b4:46:65:3d:
f8:73:12:6a:f2:61:a7:d9:54:72:23:77:56:28:06:
c3:86:9b:a4:0e:27:01:e1:a5:33:c3:56:c4:11:ff:
e6:6f:55:06:e4:91:d9:b2:f6:6e:cf:c3:b2:89:7e:
43:f5:6a:8b:c7:0d:8b:d3:4d:b4:04:d3:61:d9:32:
98:f5:13:b6:82:26:48:c4:22:5a:49:6b:6c:32:69:
04:4e:5f:b8:2a:f6:58:fb:1c:ce:a7:b3:57:d7:3b:
02:0f:c1:87:69:6e:4f:63:e6:a2:24:28:d6:25:fa:
a2:02:cb:1f:5c:b3:75:26:15:a7:ef:df:5e:85:55:
e5:c0:e8:f4:4a:f6:3d:b5:3c:9d:70:bd:f2:47:64:
ef:5b:20:1a:90:0d:4b:2d:99:29:68:bd:75:b7:fb:
01:d2:67:e8:5c:5b:e3:7a:36:d6:9f:a4:c4:56:bf:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:80:64:65:2D:B7:28:93:E3:9D:D6:E8:A1:0F:25:8D:37:B3:55
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/u62AZGUttyiT453W6KEPJY03s1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fd:ef:0e:39:9f:77:8e:b0:d1:42:1d:2e:77:29:83:41:1f:
03:8f:dd:51:f4:06:3f:2b:ad:c4:72:d9:b4:2c:d8:76:40:e2:
d4:95:10:bc:19:92:6f:85:5d:41:ae:f7:d7:b5:26:49:26:00:
99:44:c7:7b:e2:9c:c1:db:5f:17:4f:2d:b7:7f:dc:a4:74:f3:
20:73:08:e3:d2:33:28:f3:1d:0f:5d:32:e5:ac:86:55:98:50:
91:19:82:d4:c7:bf:4f:63:1a:2f:00:4b:81:36:61:eb:8d:71:
d9:b5:4f:90:5c:c2:b4:b0:34:63:9d:c2:55:2d:80:e8:ba:86:
bf:21:82:80:37:89:04:15:ae:59:fe:43:b4:a1:5b:ec:62:fd:
33:6c:9a:80:ae:db:99:ee:6f:e2:f0:c6:41:5d:76:cc:8b:36:
bf:21:54:10:ec:26:a2:e6:9a:e0:2f:ff:72:59:4e:bb:81:12:
f7:60:7c:7a:f6:ad:06:a8:8b:30:14:40:97:b9:90:20:e0:f7:
cb:39:07:8f:c0:ae:40:c9:35:1e:dc:ad:97:9b:11:2e:b5:b9:
15:20:f3:39:40:ea:1d:ca:be:d7:dd:1f:d1:62:1e:30:90:ae:
bd:3f:fe:e6:31:de:ea:81:c5:ec:fc:3f:20:47:e6:39:7a:9d:
28:44:ce:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2roUj/ggFqjNOkjYxVhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy
OTkwOTQwHhcNMjQwMTAxMDIyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmFkODA2NDY1MmRiNzI4OTNlMzlkZDZlOGExMGYyNThkMzdiMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhgLwj04b3+MtuYTMAfGYpYreDX2
Qd3/x73C0ikqwOKpOL0VB2lc5uIfJKN+hQf4Uxo9eHoXUqWOZHRkFSjxLJHH8X7X
T3TPjhnrQsC/gC8NBZIR8LRGZT34cxJq8mGn2VRyI3dWKAbDhpukDicB4aUzw1bE
Ef/mb1UG5JHZsvZuz8OyiX5D9WqLxw2L0020BNNh2TKY9RO2giZIxCJaSWtsMmkE
Tl+4KvZY+xzOp7NX1zsCD8GHaW5PY+aiJCjWJfqiAssfXLN1JhWn799ehVXlwOj0
SvY9tTydcL3yR2TvWyAakA1LLZkpaL11t/sB0mfoXFvjejbWn6TEVr+Q4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLutgGRlLbcok+Od1uihDyWNN7NVMB8GA1UdIwQY
MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt
MmIyYTZlMjdmOTZmLzEvdTYyQVpHVXR0eWlUNDUzVzZLRVBKWTAzczFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm
LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbojMA0G
CSqGSIb3DQEBCwUAA4IBAQA//e8OOZ93jrDRQh0udymDQR8Dj91R9AY/K63Ectm0
LNh2QOLUlRC8GZJvhV1BrvfXtSZJJgCZRMd74pzB218XTy23f9ykdPMgcwjj0jMo
8x0PXTLlrIZVmFCRGYLUx79PYxovAEuBNmHrjXHZtU+QXMK0sDRjncJVLYDouoa/
IYKAN4kEFa5Z/kO0oVvsYv0zbJqArtuZ7m/i8MZBXXbMiza/IVQQ7Cai5prgL/9y
WU67gRL3YHx69q0GqIswFECXuZAg4PfLOQePwK5AyTUe3K2XmxEutbkVIPM5QOod
yr7X3R/RYh4wkK69P/7mMd7qgcXs/D8gR+Y5ep0oRM4Y
-----END CERTIFICATE-----
Generated at Sun May 26 07:05:37 2024 by rpki-client on console-fra.rpki-client.org