Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/uunAflW33Bdh7QAwWUnCtkSY9Zk.roa
File: uunAflW33Bdh7QAwWUnCtkSY9Zk.roa (raw, json)
Hash identifier: AYwm6foQcCedRY8TqLm6YjHohdg9d+qCvDemDsibofk=
Subject key identifier: BA:E9:C0:7E:55:B7:DC:17:61:ED:00:30:59:49:C2:B6:44:98:F5:99
Certificate issuer: /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial: 018CCA28548085D10DE69D61552948409793
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/uunAflW33Bdh7QAwWUnCtkSY9Zk.roa
Signing time: Tue 02 Jan 2024 12:31:29 +0000
ROA not before: Tue 02 Jan 2024 12:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200020
IP address blocks: 185.157.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:54:80:85:d1:0d:e6:9d:61:55:29:48:40:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Validity
Not Before: Jan 2 12:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bae9c07e55b7dc1761ed00305949c2b64498f599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:fe:85:7c:f6:ee:7b:33:d7:d7:d4:bb:7f:
bc:80:c4:15:21:a6:54:e4:b6:d4:af:65:1e:f4:fd:
03:d8:31:fa:f6:67:60:08:ff:1e:48:f5:6a:a5:24:
df:9f:a4:e4:2b:9b:c8:f8:00:13:92:d2:4e:ef:eb:
83:1e:97:bd:86:55:b0:20:5f:7a:df:a2:0f:b9:9d:
5c:de:cb:0b:b1:3d:88:b6:a0:e0:c1:3a:b0:0c:fe:
b5:81:65:d6:63:ac:10:f0:e5:d3:bb:15:cb:7c:09:
aa:48:74:03:35:ca:3f:b5:bf:fe:5e:81:81:31:b0:
f1:80:61:62:31:32:23:8a:89:22:ac:ec:4a:66:3d:
ff:15:be:ee:28:76:db:ed:f3:be:32:9c:cb:cf:b1:
96:53:c1:ba:d5:86:d9:50:04:a2:b8:62:27:ff:d7:
a0:37:aa:17:5f:55:bc:09:39:ee:90:46:22:13:ab:
25:8a:2e:01:98:a2:6a:d2:1a:ad:59:dd:a6:f6:44:
51:ef:a5:cc:14:55:70:ee:5d:23:ff:e5:4c:c7:b5:
df:1c:fd:80:6a:9f:f3:6a:c0:a3:48:4b:7b:2b:68:
4a:31:48:d9:4e:2e:0c:f7:5f:09:5e:13:15:9a:4a:
c9:e2:b9:f8:83:7f:9a:61:73:b6:30:1b:6d:75:00:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:C0:7E:55:B7:DC:17:61:ED:00:30:59:49:C2:B6:44:98:F5:99
X509v3 Authority Key Identifier:
keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/uunAflW33Bdh7QAwWUnCtkSY9Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6f:c9:48:b4:a6:71:bd:29:1d:d2:5f:e6:71:73:49:87:8f:
5e:5f:ef:64:4b:eb:92:a4:9a:cf:78:8d:88:2f:bb:9b:4c:ca:
e3:33:d0:d5:05:9f:14:28:95:47:f3:e4:94:af:7c:0f:f2:a1:
0c:15:e3:b8:60:76:e5:f4:f5:87:3c:96:f4:8a:13:b7:36:6c:
c6:22:18:22:da:f2:d7:45:d5:43:fb:fc:f2:6d:0b:c7:c9:91:
f8:71:16:21:27:35:04:2c:78:e7:a4:76:94:12:d2:55:5f:5b:
54:1c:ca:50:5a:8b:a9:a8:30:ef:d0:74:85:41:bc:cc:7b:ad:
3c:d1:8b:5f:6c:ce:4d:8e:6b:29:34:33:2e:d1:72:fe:56:db:
cc:da:c3:0d:77:7d:46:88:d2:b0:17:70:4e:ab:6a:17:0d:8e:
eb:57:ac:10:9b:99:7a:dd:7d:52:87:18:19:80:bf:7f:3d:9c:
14:62:4f:59:fa:58:38:06:d7:d6:b8:bd:74:81:ff:06:3d:41:
3f:c0:0b:95:ab:32:66:47:21:29:f6:56:a0:a2:47:49:f0:55:
f6:30:0d:52:ea:3e:f3:0a:88:2d:0e:d9:39:8f:b4:c1:5f:89:
fe:d8:fb:e5:b2:ad:10:10:fe:67:69:94:cf:f0:24:9e:1f:09:
d7:4b:eb:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKFSAhdEN5p1hVSlIQJeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MmE2ZTM3N2YxYzg4NWE2ZDczZjNmNTY5ZmQwNmQ3ZWE0
YzdhNDUwHhcNMjQwMTAyMTIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWU5YzA3ZTU1YjdkYzE3NjFlZDAwMzA1OTQ5YzJiNjQ0OThmNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFv+hXz27nsz19fUu3+8gMQVIaZU
5LbUr2Ue9P0D2DH69mdgCP8eSPVqpSTfn6TkK5vI+AATktJO7+uDHpe9hlWwIF96
36IPuZ1c3ssLsT2ItqDgwTqwDP61gWXWY6wQ8OXTuxXLfAmqSHQDNco/tb/+XoGB
MbDxgGFiMTIjiokirOxKZj3/Fb7uKHbb7fO+MpzLz7GWU8G61YbZUASiuGIn/9eg
N6oXX1W8CTnukEYiE6slii4BmKJq0hqtWd2m9kRR76XMFFVw7l0j/+VMx7XfHP2A
ap/zasCjSEt7K2hKMUjZTi4M918JXhMVmkrJ4rn4g3+aYXO2MBttdQAnCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLrpwH5Vt9wXYe0AMFlJwrZEmPWZMB8GA1UdIwQY
MBaAFAgqbjd/HIhabXPz9Wn9BtfqTHpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NwdU4zOGNpRnB0Y19QMWFmMEcxLXBNZWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xOGZlYjMtZjNkMi00OWYzLTkwZDIt
OWQ0YjE2YjU5ZGU2LzEvdXVuQWZsVzMzQmRoN1FBd1dVbkN0a1NZOVprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8xOGZlYjMtZjNkMi00OWYzLTkwZDItOWQ0YjE2YjU5ZGU2
LzEvQ0NwdU4zOGNpRnB0Y19QMWFmMEcxLXBNZWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ2RMA0G
CSqGSIb3DQEBCwUAA4IBAQB7b8lItKZxvSkd0l/mcXNJh49eX+9kS+uSpJrPeI2I
L7ubTMrjM9DVBZ8UKJVH8+SUr3wP8qEMFeO4YHbl9PWHPJb0ihO3NmzGIhgi2vLX
RdVD+/zybQvHyZH4cRYhJzUELHjnpHaUEtJVX1tUHMpQWoupqDDv0HSFQbzMe608
0YtfbM5NjmspNDMu0XL+VtvM2sMNd31GiNKwF3BOq2oXDY7rV6wQm5l63X1ShxgZ
gL9/PZwUYk9Z+lg4BtfWuL10gf8GPUE/wAuVqzJmRyEp9lagokdJ8FX2MA1S6j7z
CogtDtk5j7TBX4n+2Pvlsq0QEP5naZTP8CSeHwnXS+uG
-----END CERTIFICATE-----
Generated at Mon Jul 1 14:15:22 2024 by rpki-client on console-ams.rpki-client.org