Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/uvPplKjHKvCFBy8Bsu21sHe9pe0.roa
File: uvPplKjHKvCFBy8Bsu21sHe9pe0.roa (raw, json)
Hash identifier: Zz++S+0aAilXTw5j+xsMwkuFfTmmSy8INlMXC8zfBXc=
Subject key identifier: BA:F3:E9:94:A8:C7:2A:F0:85:07:2F:01:B2:ED:B5:B0:77:BD:A5:ED
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 018CC9BC0CD3978414B4C404BE379EDD175A
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/uvPplKjHKvCFBy8Bsu21sHe9pe0.roa
Signing time: Tue 02 Jan 2024 10:33:13 +0000
ROA not before: Tue 02 Jan 2024 10:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206642
IP address blocks: 185.179.143.0/24 maxlen: 24
185.179.140.0/24 maxlen: 24
185.179.141.0/24 maxlen: 24
185.179.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0c:d3:97:84:14:b4:c4:04:be:37:9e:dd:17:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baf3e994a8c72af085072f01b2edb5b077bda5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:d1:ea:f3:01:6a:2b:60:a9:6f:80:b9:8b:
68:6d:79:f0:99:69:58:7d:a0:56:e8:5e:e0:67:86:
fb:85:65:81:a2:a6:dc:ff:01:ca:de:64:79:a4:94:
86:ea:f3:81:2f:7d:a1:ff:64:c6:38:8a:d1:6a:61:
27:7f:79:75:95:d0:d6:93:4d:6f:e4:46:db:42:05:
90:d6:a8:38:d3:ac:ce:1d:c0:10:a6:6d:f2:3f:48:
1e:8c:ee:3e:c5:ca:47:a8:52:fe:28:89:2c:32:bb:
5b:7f:59:26:98:07:50:0c:e1:76:09:cb:fc:28:32:
6c:90:d4:ef:ec:56:68:11:08:14:4c:30:de:12:64:
38:cc:81:e5:d8:f3:06:db:fb:a3:2e:06:83:72:1f:
00:7a:36:ed:0a:a9:cb:1a:25:71:31:93:9c:d3:97:
8b:d1:79:72:a8:89:30:4b:b4:cd:a8:1c:07:ec:8d:
dd:be:30:df:44:e0:ee:4a:ff:93:20:03:02:c0:7d:
33:b7:94:6e:10:8b:f1:bf:7f:5d:82:52:df:ef:50:
57:9c:8c:da:30:b9:1c:b4:c4:a2:17:c0:9d:88:ae:
c9:3b:34:b7:74:42:a9:63:e3:94:d6:97:35:a0:82:
ad:d8:7e:a3:1a:20:35:ef:9a:b6:29:95:20:ba:84:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:E9:94:A8:C7:2A:F0:85:07:2F:01:B2:ED:B5:B0:77:BD:A5:ED
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/uvPplKjHKvCFBy8Bsu21sHe9pe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.140.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:e9:23:b7:6b:83:c9:f7:cb:aa:9a:c6:8d:dc:66:0e:90:c8:
61:b0:82:9a:44:a2:bd:b4:ca:a6:8c:4d:e6:b9:56:27:8e:fd:
cb:7e:17:1e:44:0f:7a:7c:bb:81:21:60:fb:33:98:0f:08:e8:
6a:1a:78:c3:ee:57:47:26:81:0a:52:3d:fd:71:8d:64:de:46:
57:dd:e3:d1:0d:19:02:31:9d:ad:27:fc:33:a4:97:79:e8:ce:
a5:6c:22:cc:5d:e7:5c:da:c8:83:d7:e6:09:b7:5c:96:25:c3:
f2:fe:c1:81:44:b3:79:fd:d7:b0:1a:eb:ff:31:d4:7b:93:c6:
2b:3a:17:02:27:e4:6e:0d:e9:24:39:b7:d2:1a:c8:39:0e:7b:
d7:4b:ac:6b:dd:80:aa:aa:3b:e5:83:32:a7:67:cf:5c:de:4a:
22:2b:25:81:9d:aa:0e:a0:de:e1:3f:b6:17:b8:fc:aa:e4:02:
64:35:a2:6a:8b:5c:a0:6b:8e:10:f2:b9:da:ea:fb:34:aa:af:
df:ef:e2:9b:59:35:bf:a1:d3:85:a8:98:13:bf:0e:a3:6c:c3:
e2:93:99:f6:97:b8:a8:44:5a:1f:fd:32:6e:9d:94:ab:34:c4:
5f:5e:ba:92:4d:02:7c:28:31:7a:13:07:dd:fe:0d:e0:3f:04:
8a:87:96:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvAzTl4QUtMQEvjee3RdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx
Zjg4OTUwHhcNMjQwMTAyMTAzMzEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWYzZTk5NGE4YzcyYWYwODUwNzJmMDFiMmVkYjViMDc3YmRhNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6HR6vMBaitgqW+AuYtobXnwmWlY
faBW6F7gZ4b7hWWBoqbc/wHK3mR5pJSG6vOBL32h/2TGOIrRamEnf3l1ldDWk01v
5EbbQgWQ1qg406zOHcAQpm3yP0gejO4+xcpHqFL+KIksMrtbf1kmmAdQDOF2Ccv8
KDJskNTv7FZoEQgUTDDeEmQ4zIHl2PMG2/ujLgaDch8AejbtCqnLGiVxMZOc05eL
0XlyqIkwS7TNqBwH7I3dvjDfRODuSv+TIAMCwH0zt5RuEIvxv39dglLf71BXnIza
MLkctMSiF8CdiK7JOzS3dEKpY+OU1pc1oIKt2H6jGiA175q2KZUguoQt3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLrz6ZSoxyrwhQcvAbLttbB3vaXtMB8GA1UdIwQY
MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt
MWU1OGFjODc5MjRhLzEvdXZQcGxLakhLdkNGQnk4QnN1MjFzSGU5cGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh
LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubOMMA0G
CSqGSIb3DQEBCwUAA4IBAQCb6SO3a4PJ98uqmsaN3GYOkMhhsIKaRKK9tMqmjE3m
uVYnjv3LfhceRA96fLuBIWD7M5gPCOhqGnjD7ldHJoEKUj39cY1k3kZX3ePRDRkC
MZ2tJ/wzpJd56M6lbCLMXedc2siD1+YJt1yWJcPy/sGBRLN5/dewGuv/MdR7k8Yr
OhcCJ+RuDekkObfSGsg5DnvXS6xr3YCqqjvlgzKnZ89c3koiKyWBnaoOoN7hP7YX
uPyq5AJkNaJqi1yga44Q8rna6vs0qq/f7+KbWTW/odOFqJgTvw6jbMPik5n2l7io
RFof/TJunZSrNMRfXrqSTQJ8KDF6Ewfd/g3gPwSKh5bN
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:22:42 2024 by rpki-client on console-fra.rpki-client.org