Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/Uz4nilC81RG4L8hCKGU1v_EVnoo.roa
File: Uz4nilC81RG4L8hCKGU1v_EVnoo.roa (raw, json)
Hash identifier: zbTIgGSaGgxDRaMWHjYeGNP569K8cSjC2uV+fBxhf/k=
Subject key identifier: 53:3E:27:8A:50:BC:D5:11:B8:2F:C8:42:28:65:35:BF:F1:15:9E:8A
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 018CC86F1DD7A01EE9A703D281EE0F4D98C3
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/Uz4nilC81RG4L8hCKGU1v_EVnoo.roa
Signing time: Tue 02 Jan 2024 04:29:34 +0000
ROA not before: Tue 02 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202509
IP address blocks: 185.220.76.0/22 maxlen: 22
2a0b:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1d:d7:a0:1e:e9:a7:03:d2:81:ee:0f:4d:98:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Jan 2 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=533e278a50bcd511b82fc842286535bff1159e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:7f:17:32:08:30:cc:47:53:b1:b0:0a:ab:
4e:7c:ab:01:07:64:cb:33:66:bb:c5:cc:09:c5:1f:
84:6e:b9:f6:2e:85:62:fe:6c:6c:9d:f6:8a:7f:00:
68:c6:5f:aa:30:dc:6c:9f:7d:3b:45:48:2f:d8:ac:
a0:01:3f:b7:83:0e:e2:f4:ba:25:1b:70:dd:63:43:
32:03:3b:4c:ef:e3:d9:af:c8:40:d7:89:4c:b0:76:
c9:ac:e8:a1:50:51:42:48:7c:1e:00:c0:70:ca:8f:
cc:12:85:5a:67:19:2f:e1:e8:8a:27:75:d2:e4:f8:
01:d8:e1:01:a4:ff:9f:55:a0:69:20:0d:c0:43:05:
54:d8:35:ff:d8:b0:d6:f2:35:4b:ac:38:d5:fb:36:
ab:29:4c:04:31:7f:05:fc:b8:2d:72:ec:32:8b:21:
91:65:39:b4:2f:df:4e:27:e0:c1:38:14:c5:58:36:
54:3f:24:5a:b5:88:ee:e5:f0:3a:dd:90:4d:92:6d:
7e:5a:6f:4e:e4:2a:27:0f:c8:92:35:66:18:4d:79:
ef:47:06:9a:9f:98:bd:b0:6e:cb:9f:d4:11:25:66:
8d:3c:2c:19:5e:3f:ec:c4:80:bd:19:fe:92:5e:26:
43:95:58:60:db:a7:20:f9:70:01:52:4e:41:c7:e6:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:27:8A:50:BC:D5:11:B8:2F:C8:42:28:65:35:BF:F1:15:9E:8A
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/Uz4nilC81RG4L8hCKGU1v_EVnoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.76.0/22
IPv6:
2a0b:f240::/29
Signature Algorithm: sha256WithRSAEncryption
6f:e6:31:19:60:34:a7:1e:80:e5:08:04:90:b3:6a:5d:60:76:
34:97:a7:ce:47:c0:a7:99:6e:08:5d:2a:dc:11:39:c7:1b:83:
c0:d8:d7:91:63:8d:5a:9c:7d:8e:f9:91:72:99:dc:22:b5:7d:
54:90:fb:c5:ed:f5:22:29:b4:51:82:45:e9:bc:1a:16:eb:df:
a2:33:65:a1:08:37:ea:4a:c8:3d:b2:3d:2c:55:56:1e:95:11:
4c:8c:90:cf:3a:41:e9:e6:d6:15:65:09:70:72:ea:64:a3:f4:
dc:d3:f0:cd:f5:ec:27:c1:87:ba:b4:40:c5:27:39:46:e0:f3:
27:aa:ee:7f:ce:d2:54:d5:46:9c:be:0c:e8:36:45:c7:f9:3d:
5e:0c:4e:9c:41:5b:7f:27:e9:bb:da:f4:33:30:cc:04:7c:b8:
d4:ad:a1:6f:10:78:a7:ef:72:04:c7:0d:59:72:b7:18:cc:f7:
8d:f1:c6:cb:18:d7:d5:f1:e5:01:bb:36:e1:da:4f:56:dd:bc:
61:94:eb:63:9c:1b:1d:25:26:4a:09:fd:c2:bf:dc:31:3e:e6:
94:44:b0:7a:43:d3:a3:e0:d8:7f:94:fe:9e:fc:6c:91:22:df:
3a:6d:2a:e7:e2:0e:0c:d0:70:d2:56:c6:e8:4c:d1:c0:a9:f9:
60:de:88:de
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIbx3XoB7ppwPSge4PTZjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OThkZjAzMDBhYWI1ZTJhNmYxYWM3OGU1OTNlY2M5NzQw
ZGFhZGIwHhcNMjQwMTAyMDQyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzNlMjc4YTUwYmNkNTExYjgyZmM4NDIyODY1MzViZmYxMTU5ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom5/FzIIMMxHU7GwCqtOfKsBB2TL
M2a7xcwJxR+Ebrn2LoVi/mxsnfaKfwBoxl+qMNxsn307RUgv2KygAT+3gw7i9Lol
G3DdY0MyAztM7+PZr8hA14lMsHbJrOihUFFCSHweAMBwyo/MEoVaZxkv4eiKJ3XS
5PgB2OEBpP+fVaBpIA3AQwVU2DX/2LDW8jVLrDjV+zarKUwEMX8F/LgtcuwyiyGR
ZTm0L99OJ+DBOBTFWDZUPyRatYju5fA63ZBNkm1+Wm9O5ConD8iSNWYYTXnvRwaa
n5i9sG7Ln9QRJWaNPCwZXj/sxIC9Gf6SXiZDlVhg26cg+XABUk5Bx+YFAQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFM+J4pQvNURuC/IQihlNb/xFZ6KMB8GA1UdIwQY
MBaAFBaY3wMAqrXipvGseOWT7Ml0DarbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYt
NmVjOWQ5ODhhNDA4LzEvVXo0bmlsQzgxUkc0TDhoQ0tHVTF2X0VWbm9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYtNmVjOWQ5ODhhNDA4
LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudxMMA0E
AgACMAcDBQMqC/JAMA0GCSqGSIb3DQEBCwUAA4IBAQBv5jEZYDSnHoDlCASQs2pd
YHY0l6fOR8CnmW4IXSrcETnHG4PA2NeRY41anH2O+ZFymdwitX1UkPvF7fUiKbRR
gkXpvBoW69+iM2WhCDfqSsg9sj0sVVYelRFMjJDPOkHp5tYVZQlwcupko/Tc0/DN
9ewnwYe6tEDFJzlG4PMnqu5/ztJU1UacvgzoNkXH+T1eDE6cQVt/J+m72vQzMMwE
fLjUraFvEHin73IExw1ZcrcYzPeN8cbLGNfV8eUBuzbh2k9W3bxhlOtjnBsdJSZK
Cf3Cv9wxPuaURLB6Q9Oj4Nh/lP6e/GyRIt86bSrn4g4M0HDSVsboTNHAqflg3oje
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:39:02 2024 by rpki-client on console-ams.rpki-client.org