Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/Bb-UKNOnYn4MC6yhjm0JWEjUZ7c.roa
File: Bb-UKNOnYn4MC6yhjm0JWEjUZ7c.roa (raw, json)
Hash identifier: 8Ad1iWG5xsVM4XDAHCZc1oGqihzHUaQCQxye39KV8ew=
Subject key identifier: 05:BF:94:28:D3:A7:62:7E:0C:0B:AC:A1:8E:6D:09:58:48:D4:67:B7
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 018CC56E25E668997184C0AE0212709EDD26
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/Bb-UKNOnYn4MC6yhjm0JWEjUZ7c.roa
Signing time: Mon 01 Jan 2024 14:29:39 +0000
ROA not before: Mon 01 Jan 2024 14:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12125
IP address blocks: 194.38.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:25:e6:68:99:71:84:c0:ae:02:12:70:9e:dd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05bf9428d3a7627e0c0baca18e6d095848d467b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f8:56:af:95:ac:ca:45:24:f3:c5:0d:10:3b:
0c:ab:30:ef:5c:5c:50:3c:ce:ab:a5:e2:c6:31:59:
57:45:fd:d8:cb:05:e9:e3:0d:b4:d4:c1:c5:59:e3:
d5:ad:90:78:7c:f1:29:74:9f:ce:be:3c:9c:44:f4:
aa:a3:04:63:47:9b:4c:64:34:4a:81:9e:af:f0:27:
4e:da:a1:35:e0:05:ee:5f:03:ff:d5:57:9f:a4:b4:
fe:ee:86:67:4d:1c:6a:17:81:5e:22:c5:96:91:9d:
b3:03:1a:27:b0:fa:3c:1a:90:92:03:3c:6c:de:c1:
13:65:79:ef:97:6f:2d:49:d6:35:98:51:53:88:85:
2d:e0:4e:8f:51:d1:89:76:57:e8:5b:69:fd:85:4e:
d4:7e:e4:86:d2:d3:60:92:f3:c9:16:54:f5:8f:34:
3e:be:42:fa:f7:11:36:bc:4b:f1:d6:37:b9:a7:26:
71:4b:9f:b4:5f:2d:42:40:7b:c5:e3:76:57:d3:8e:
55:6c:a5:91:3f:f4:53:e7:d9:18:51:35:11:83:e3:
31:26:45:7f:4c:c1:43:4f:40:e4:16:d8:da:5e:56:
f1:73:ad:4a:08:65:11:17:6a:26:c7:ce:93:13:d7:
f2:e1:7d:4a:7a:89:f4:42:9d:76:14:fe:73:60:f9:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:94:28:D3:A7:62:7E:0C:0B:AC:A1:8E:6D:09:58:48:D4:67:B7
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/Bb-UKNOnYn4MC6yhjm0JWEjUZ7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:5d:50:f6:05:9d:9b:5b:b1:f0:f4:3b:c9:7c:ac:3f:27:27:
80:68:3b:54:52:32:6b:28:09:6d:7e:41:48:05:a4:3d:8c:7c:
0e:ca:94:a7:04:c1:38:ea:ae:95:18:20:2d:95:c8:fb:d9:8b:
73:66:c5:c4:8f:9c:fe:73:b7:a8:67:54:75:7a:c0:56:21:e9:
9a:1e:0a:f0:71:ec:13:6f:85:75:5b:98:37:d1:41:04:24:2d:
52:dc:c3:ac:28:09:3c:6a:69:4a:43:03:30:ed:37:a9:72:eb:
b1:8c:fa:d4:38:2e:c5:93:2a:22:28:1f:a4:92:d1:a2:21:f8:
50:02:5e:6d:51:f0:36:b8:05:d2:25:fc:a2:1c:3f:35:33:96:
ed:c7:a9:eb:35:aa:8f:cb:4e:a8:5f:aa:35:83:24:93:3b:61:
3f:0b:03:2d:da:12:0c:95:96:c6:a4:73:fd:e8:ef:c2:f4:ab:
75:aa:ea:88:f0:90:cb:14:d4:65:41:6e:d5:3a:05:4c:e9:57:
d0:2d:a1:35:c4:d6:63:ef:0c:44:b2:1f:4f:74:c5:7d:8d:31:
70:e7:c3:ae:3e:e3:9d:fb:36:e9:12:da:4d:90:db:d0:c5:17:
09:29:66:e3:6b:22:de:d8:9d:3d:fd:60:b6:1b:96:e8:8c:cd:
cd:6e:9d:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbiXmaJlxhMCuAhJwnt0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmYzYmQwYmFlNjAzYWI3OTA2MDJhOTZiYmJjNDJiNTMy
MmU4OGYwHhcNMjQwMTAxMTQyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWJmOTQyOGQzYTc2MjdlMGMwYmFjYTE4ZTZkMDk1ODQ4ZDQ2N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPhWr5WsykUk88UNEDsMqzDvXFxQ
PM6rpeLGMVlXRf3YywXp4w201MHFWePVrZB4fPEpdJ/OvjycRPSqowRjR5tMZDRK
gZ6v8CdO2qE14AXuXwP/1VefpLT+7oZnTRxqF4FeIsWWkZ2zAxonsPo8GpCSAzxs
3sETZXnvl28tSdY1mFFTiIUt4E6PUdGJdlfoW2n9hU7UfuSG0tNgkvPJFlT1jzQ+
vkL69xE2vEvx1je5pyZxS5+0Xy1CQHvF43ZX045VbKWRP/RT59kYUTURg+MxJkV/
TMFDT0DkFtjaXlbxc61KCGURF2omx86TE9fy4X1Keon0Qp12FP5zYPnX7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAW/lCjTp2J+DAusoY5tCVhI1Ge3MB8GA1UdIwQY
MBaAFNIvO9C65gOreQYCqWu7xCtTIuiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAt
ZDcyMWJkMmU5ZDUzLzEvQmItVUtOT25ZbjRNQzZ5aGptMEpXRWpVWjdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAtZDcyMWJkMmU5ZDUz
LzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiYEMA0G
CSqGSIb3DQEBCwUAA4IBAQCcXVD2BZ2bW7Hw9DvJfKw/JyeAaDtUUjJrKAltfkFI
BaQ9jHwOypSnBME46q6VGCAtlcj72YtzZsXEj5z+c7eoZ1R1esBWIemaHgrwcewT
b4V1W5g30UEEJC1S3MOsKAk8amlKQwMw7TepcuuxjPrUOC7FkyoiKB+kktGiIfhQ
Al5tUfA2uAXSJfyiHD81M5btx6nrNaqPy06oX6o1gySTO2E/CwMt2hIMlZbGpHP9
6O/C9Kt1quqI8JDLFNRlQW7VOgVM6VfQLaE1xNZj7wxEsh9PdMV9jTFw58OuPuOd
+zbpEtpNkNvQxRcJKWbjayLe2J09/WC2G5bojM3Nbp3+
-----END CERTIFICATE-----
Generated at Tue May 21 09:01:52 2024 by rpki-client on console-ams.rpki-client.org