Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/U6IOTcsnhTFlsifabHn2b_RdaPQ.roa
File: U6IOTcsnhTFlsifabHn2b_RdaPQ.roa (raw, json)
Hash identifier: PywUrq2x3o6BpZsbWJr5cAFlBaqv/6fMWzyIxfa3+1I=
Subject key identifier: 53:A2:0E:4D:CB:27:85:31:65:B2:27:DA:6C:79:F6:6F:F4:5D:68:F4
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 018CC42487EA06E07E2E8F225833296C1DE1
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/U6IOTcsnhTFlsifabHn2b_RdaPQ.roa
Signing time: Mon 01 Jan 2024 08:29:37 +0000
ROA not before: Mon 01 Jan 2024 08:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.109.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:87:ea:06:e0:7e:2e:8f:22:58:33:29:6c:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53a20e4dcb27853165b227da6c79f66ff45d68f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:ca:b3:ab:e0:9e:4a:fc:b0:e8:47:9e:e0:
21:c0:e9:83:d8:40:88:7b:34:3e:06:63:df:bb:83:
3b:02:01:40:89:8a:f7:b1:7e:83:fe:d8:de:19:1c:
7d:e4:23:44:07:8f:03:5a:3d:34:d3:e7:3d:11:ec:
e7:8e:3b:9e:0d:f3:b2:54:34:21:51:5e:b7:8c:e1:
7a:7f:c7:99:e2:55:da:31:53:96:36:97:f8:bc:85:
72:0d:45:3a:26:c1:1f:12:f8:bc:82:13:2d:cd:7b:
f0:38:06:dd:e0:1e:24:d8:70:04:31:cf:1c:37:ed:
d9:34:ae:50:7f:d6:17:d8:19:4f:3f:8a:12:29:94:
15:b7:34:da:e7:8c:0b:f5:f6:d6:09:58:c2:8e:02:
ee:f9:d1:50:d4:64:b1:14:b6:6a:bc:a0:6d:e2:42:
0f:cf:35:79:8d:2c:d6:28:b1:4f:cf:ab:df:c0:5e:
94:01:1f:73:e5:c9:4d:65:d4:55:91:86:61:f0:06:
e2:82:fa:17:32:e2:c4:9c:b1:4d:97:0c:d0:e4:83:
a9:53:11:6d:e5:bc:b1:3f:bc:eb:b7:12:d4:37:f1:
55:f3:d7:d7:4a:6d:cd:f8:bb:4f:ff:ee:52:d5:cf:
39:82:02:04:55:96:f0:5e:a5:d4:7d:48:8c:02:ee:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:0E:4D:CB:27:85:31:65:B2:27:DA:6C:79:F6:6F:F4:5D:68:F4
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/U6IOTcsnhTFlsifabHn2b_RdaPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.96.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:c3:26:fe:dd:0d:c5:b2:67:46:46:55:5f:4a:88:c2:6d:8a:
3c:a5:9a:66:12:52:ad:9f:d9:d1:e5:c5:b7:48:dc:1b:f9:03:
50:09:09:8b:fd:26:46:3a:dd:ea:8c:ef:1e:d3:4d:e1:56:16:
41:c2:95:5f:e2:7f:d2:72:37:4d:eb:d6:b8:03:86:e0:6f:0d:
17:dd:42:d6:3a:37:18:a8:f4:cf:5a:a0:7e:d5:cb:0e:05:3a:
64:3d:58:f2:54:ba:da:b1:1d:48:94:f1:23:fa:21:b8:45:93:
93:fe:fd:0a:e4:66:8d:30:de:32:5b:f0:cc:79:ca:dd:96:18:
5f:29:6b:f8:0a:52:ab:7f:84:8f:17:d8:2d:06:a5:71:d8:cd:
13:91:ec:c5:9c:40:7c:aa:81:25:5d:f8:b5:c2:83:2c:40:8c:
f6:fc:1c:8d:34:a3:14:9c:87:50:a1:37:97:04:f5:25:85:86:
b3:a8:a1:4d:dd:1e:15:7f:a4:5d:dd:14:99:44:1f:b7:56:17:
71:86:84:28:1b:32:91:f6:0e:77:ff:07:fe:e5:c4:93:14:44:
a8:e9:32:87:db:54:d3:40:9c:5d:d4:8c:f8:0f:74:69:c6:59:
85:49:4f:58:f0:05:ea:81:83:11:6a:ce:27:a7:dc:94:6e:15:
65:e1:5e:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJIfqBuB+Lo8iWDMpbB3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOGY5YzAzZTc1N2YzZGI1MTRjYTM4ZDE1YWRhNDUxZmEy
ZTk2MTUwHhcNMjQwMTAxMDgyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2EyMGU0ZGNiMjc4NTMxNjViMjI3ZGE2Yzc5ZjY2ZmY0NWQ2OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIPKs6vgnkr8sOhHnuAhwOmD2ECI
ezQ+BmPfu4M7AgFAiYr3sX6D/tjeGRx95CNEB48DWj000+c9EeznjjueDfOyVDQh
UV63jOF6f8eZ4lXaMVOWNpf4vIVyDUU6JsEfEvi8ghMtzXvwOAbd4B4k2HAEMc8c
N+3ZNK5Qf9YX2BlPP4oSKZQVtzTa54wL9fbWCVjCjgLu+dFQ1GSxFLZqvKBt4kIP
zzV5jSzWKLFPz6vfwF6UAR9z5clNZdRVkYZh8AbigvoXMuLEnLFNlwzQ5IOpUxFt
5byxP7zrtxLUN/FV89fXSm3N+LtP/+5S1c85ggIEVZbwXqXUfUiMAu6QpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOiDk3LJ4UxZbIn2mx59m/0XWj0MB8GA1UdIwQY
MBaAFL2PnAPnV/PbUUyjjRWtpFH6LpYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDct
ZWNkZDgxNzQwMDdhLzEvVTZJT1Rjc25oVEZsc2lmYWJIbjJiX1JkYVBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDctZWNkZDgxNzQwMDdh
LzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW1gMA0G
CSqGSIb3DQEBCwUAA4IBAQC8wyb+3Q3FsmdGRlVfSojCbYo8pZpmElKtn9nR5cW3
SNwb+QNQCQmL/SZGOt3qjO8e003hVhZBwpVf4n/ScjdN69a4A4bgbw0X3ULWOjcY
qPTPWqB+1csOBTpkPVjyVLrasR1IlPEj+iG4RZOT/v0K5GaNMN4yW/DMecrdlhhf
KWv4ClKrf4SPF9gtBqVx2M0TkezFnEB8qoElXfi1woMsQIz2/ByNNKMUnIdQoTeX
BPUlhYazqKFN3R4Vf6Rd3RSZRB+3VhdxhoQoGzKR9g53/wf+5cSTFESo6TKH21TT
QJxd1Iz4D3RpxlmFSU9Y8AXqgYMRas4np9yUbhVl4V5b
-----END CERTIFICATE-----
Generated at Thu May 2 02:59:46 2024 by rpki-client on console-fra.rpki-client.org