Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1ufctCDUnIAm8_K0vTpfsX5T7l4.roa
File: 1ufctCDUnIAm8_K0vTpfsX5T7l4.roa (raw, json)
Hash identifier: h5rV3Jx59f1kVwg5UDCeJBscGDXJK5v9zvUWortTb14=
Subject key identifier: D6:E7:DC:B4:20:D4:9C:80:26:F3:F2:B4:BD:3A:5F:B1:7E:53:EE:5E
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 018CC5013C0C3163E1D37124C77EA691525B
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1ufctCDUnIAm8_K0vTpfsX5T7l4.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211254
IP address blocks: 78.159.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3c:0c:31:63:e1:d3:71:24:c7:7e:a6:91:52:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6e7dcb420d49c8026f3f2b4bd3a5fb17e53ee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f5:4a:56:65:c6:90:d2:07:3c:07:cb:82:4f:
a9:c3:25:0c:c6:2f:a5:ec:30:3b:32:61:ad:3d:04:
58:6f:d9:04:fb:4a:d5:31:64:87:36:1f:5a:40:7d:
4f:18:80:e8:08:e1:8e:26:7d:a7:91:18:61:ab:ce:
17:6f:6e:2d:0f:3a:73:d2:b2:9e:3b:76:2e:25:50:
b7:3c:e6:30:10:af:d6:e2:c2:de:65:e0:b0:41:70:
05:8e:b2:9e:a7:f5:a0:a7:67:d7:f8:ba:f5:a4:79:
c7:c9:70:28:69:de:26:59:1b:46:f2:d6:f9:16:61:
fb:52:be:39:50:1a:47:14:76:b7:cd:fd:1f:38:1a:
fa:40:0d:30:80:40:7d:e7:0f:37:51:4f:9b:df:6b:
32:26:92:02:34:7e:b3:17:32:a5:9a:22:47:ef:99:
17:9f:ae:9e:a9:94:70:af:b7:5f:9f:0b:a5:b4:76:
9e:8f:66:23:4f:b3:6b:0c:55:de:6e:26:09:d3:03:
04:1b:de:be:9d:bf:c7:66:64:a7:1e:03:02:9f:11:
da:e5:cb:d5:28:69:40:0f:ae:35:6e:25:35:87:b2:
70:6c:d9:25:41:9b:9f:68:ea:c2:2f:54:bb:df:ff:
35:38:2d:02:e4:4d:e0:a8:e7:48:f3:1f:7c:80:b4:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:DC:B4:20:D4:9C:80:26:F3:F2:B4:BD:3A:5F:B1:7E:53:EE:5E
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1ufctCDUnIAm8_K0vTpfsX5T7l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4b:35:d4:7e:ae:14:cb:cb:c6:fc:56:04:24:c4:6c:97:5b:
e4:92:53:35:3c:ed:58:58:7c:b2:43:f1:bf:40:ce:b4:a3:ec:
12:4a:0e:e9:da:28:44:79:0f:fb:8d:53:25:7b:ec:fe:73:9d:
3f:04:58:28:bd:85:88:95:63:80:9d:fa:32:14:a6:01:5c:c5:
92:79:73:f8:9f:2f:5c:65:14:d7:09:12:8b:a3:47:c8:d7:67:
71:40:1a:27:94:e7:7a:9c:44:e2:5f:8d:8a:77:16:9b:38:aa:
c3:08:40:ef:58:56:3f:49:22:35:99:ab:81:0b:8f:c7:41:f9:
e0:a1:9a:4c:6d:49:3f:19:a7:6c:d0:f1:8d:94:95:be:d3:91:
38:20:05:9a:75:c9:27:98:89:33:7e:98:3a:71:dd:5b:de:8c:
a4:6e:67:a1:e2:4f:97:f4:e1:d4:70:10:6f:6c:81:31:5d:ca:
a9:5f:aa:7a:ae:49:d7:92:b9:cd:cb:2a:d4:0e:00:a0:bd:9c:
4d:3c:44:20:dc:e2:4b:03:0e:45:44:b2:09:0b:67:12:b1:91:
c2:db:83:49:a6:6a:32:20:d0:5c:9d:cd:85:70:47:bf:55:ff:
19:b9:0f:4b:d7:96:f1:0a:ce:a4:59:67:00:55:f1:06:6d:af:
03:dd:82:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFATwMMWPh03Ekx36mkVJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjQwMTAxMTIzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmU3ZGNiNDIwZDQ5YzgwMjZmM2YyYjRiZDNhNWZiMTdlNTNlZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfVKVmXGkNIHPAfLgk+pwyUMxi+l
7DA7MmGtPQRYb9kE+0rVMWSHNh9aQH1PGIDoCOGOJn2nkRhhq84Xb24tDzpz0rKe
O3YuJVC3POYwEK/W4sLeZeCwQXAFjrKep/Wgp2fX+Lr1pHnHyXAoad4mWRtG8tb5
FmH7Ur45UBpHFHa3zf0fOBr6QA0wgEB95w83UU+b32syJpICNH6zFzKlmiJH75kX
n66eqZRwr7dfnwultHaej2YjT7NrDFXebiYJ0wMEG96+nb/HZmSnHgMCnxHa5cvV
KGlAD641biU1h7JwbNklQZufaOrCL1S73/81OC0C5E3gqOdI8x98gLQX+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNbn3LQg1JyAJvPytL06X7F+U+5eMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvMXVmY3RDRFVuSUFtOF9LMHZUcGZzWDVUN2w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9QMA0G
CSqGSIb3DQEBCwUAA4IBAQANSzXUfq4Uy8vG/FYEJMRsl1vkklM1PO1YWHyyQ/G/
QM60o+wSSg7p2ihEeQ/7jVMle+z+c50/BFgovYWIlWOAnfoyFKYBXMWSeXP4ny9c
ZRTXCRKLo0fI12dxQBonlOd6nETiX42KdxabOKrDCEDvWFY/SSI1mauBC4/HQfng
oZpMbUk/Gads0PGNlJW+05E4IAWadcknmIkzfpg6cd1b3oykbmeh4k+X9OHUcBBv
bIExXcqpX6p6rknXkrnNyyrUDgCgvZxNPEQg3OJLAw5FRLIJC2cSsZHC24NJpmoy
INBcnc2FcEe/Vf8ZuQ9L15bxCs6kWWcAVfEGba8D3YLh
-----END CERTIFICATE-----
Generated at Sat Jun 8 11:23:27 2024 by rpki-client on console-ams.rpki-client.org