Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/uWu70YWPDZk5y1uAH3rn1Jlwf6M.roa
File: uWu70YWPDZk5y1uAH3rn1Jlwf6M.roa (raw, json)
Hash identifier: +bw2r4Vz/QM+Nin/2/MM0KOFQnm40xip7EznIgPaIUM=
Subject key identifier: B9:6B:BB:D1:85:8F:0D:99:39:CB:5B:80:1F:7A:E7:D4:99:70:7F:A3
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019087A6E0302EABA7887CD5595C097C11FB
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/uWu70YWPDZk5y1uAH3rn1Jlwf6M.roa
Signing time: Sat 06 Jul 2024 10:46:18 +0000
ROA not before: Sat 06 Jul 2024 10:46:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58325
IP address blocks: 93.118.40.0/22 maxlen: 24
94.177.17.0/24 maxlen: 24
2a01:4020:40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:87:a6:e0:30:2e:ab:a7:88:7c:d5:59:5c:09:7c:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jul 6 10:46:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b96bbbd1858f0d9939cb5b801f7ae7d499707fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:14:a1:d1:f0:c2:f0:f9:a9:4d:33:a4:a6:
ed:4e:14:ec:cb:e9:d7:d6:12:aa:80:ef:ca:7b:04:
4a:5b:58:0e:b4:43:af:29:c6:de:de:91:0b:84:f3:
4c:7c:93:53:c9:cc:6c:06:b9:98:cd:04:df:67:49:
e8:22:7f:7c:10:a5:b0:5e:00:76:a3:62:bd:ff:80:
8e:2f:96:c7:c6:7c:f8:e0:be:cc:e2:b5:9c:3b:f4:
19:fb:c8:f6:41:d9:a9:1a:8a:a7:77:88:25:31:cf:
38:7e:da:46:21:12:31:c3:10:93:6e:37:70:55:1e:
47:f7:c5:41:82:88:d1:dd:7f:11:e0:a4:16:35:02:
7c:51:05:6b:ec:08:ac:b7:c7:30:ab:09:9e:9a:96:
7a:1c:e1:95:b5:01:24:20:15:49:3a:80:93:c6:6b:
cf:7e:6f:58:3f:0e:24:10:55:c0:28:77:2b:2f:60:
d1:5f:57:79:54:cf:47:39:52:07:90:34:63:ab:2a:
4e:ea:dc:ba:67:b4:05:3c:c5:f6:a4:21:ff:99:68:
20:6b:49:ed:a9:0e:2d:57:6b:cb:ae:b1:e7:ad:4c:
d7:60:d2:96:d0:3a:b7:98:7b:59:e2:fe:b0:bc:c9:
27:16:e0:f8:8c:d3:22:87:77:b2:b2:29:d0:10:ab:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:BB:D1:85:8F:0D:99:39:CB:5B:80:1F:7A:E7:D4:99:70:7F:A3
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/uWu70YWPDZk5y1uAH3rn1Jlwf6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.118.40.0/22
94.177.17.0/24
IPv6:
2a01:4020:40::/44
Signature Algorithm: sha256WithRSAEncryption
af:1f:64:55:d7:6a:6a:82:34:e3:5c:d7:49:9c:c5:b8:bf:c1:
ea:1d:13:4f:fb:58:f3:74:e6:49:38:a9:e3:4a:68:3f:c6:31:
bd:5a:29:37:89:b1:60:aa:db:ff:e4:cb:2d:12:ae:8b:2d:6d:
a1:e5:a2:46:98:43:7c:43:5d:9f:33:28:92:fb:94:ca:03:af:
8a:15:23:01:77:3d:49:06:45:ae:7e:f3:9d:1e:7f:e6:80:e9:
57:0d:d5:50:b9:ea:e7:91:b6:de:99:73:cf:b3:22:a0:41:5a:
93:00:3f:58:43:b0:9e:80:47:d2:33:02:49:0e:d6:b9:b6:e8:
d1:0d:0a:5b:28:2d:ce:86:a3:a6:9b:33:5f:4c:f2:82:2f:2c:
ed:b9:30:af:3e:e8:6d:48:05:9a:8c:44:18:3e:72:3a:37:e3:
08:b9:d3:74:df:85:48:b8:81:62:53:1f:3e:56:12:5c:49:54:
70:c8:4c:d4:40:d8:70:47:b9:91:ca:0d:a7:99:86:89:f7:db:
60:4d:f1:30:35:01:65:14:0e:3e:be:a1:80:7d:0f:1f:5d:2f:
79:3c:0b:5b:83:67:d4:67:b3:62:e0:b3:94:54:32:c2:7a:3b:
e6:d4:22:b3:19:c7:75:53:fc:76:a8:c0:34:fb:66:15:7e:4a:
8c:c8:38:8f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZCHpuAwLquniHzVWVwJfBH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjQwNzA2MTA0NjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTZiYmJkMTg1OGYwZDk5MzljYjViODAxZjdhZTdkNDk5NzA3ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj4UodHwwvD5qU0zpKbtThTsy+nX
1hKqgO/KewRKW1gOtEOvKcbe3pELhPNMfJNTycxsBrmYzQTfZ0noIn98EKWwXgB2
o2K9/4COL5bHxnz44L7M4rWcO/QZ+8j2QdmpGoqnd4glMc84ftpGIRIxwxCTbjdw
VR5H98VBgojR3X8R4KQWNQJ8UQVr7Aist8cwqwmempZ6HOGVtQEkIBVJOoCTxmvP
fm9YPw4kEFXAKHcrL2DRX1d5VM9HOVIHkDRjqypO6ty6Z7QFPMX2pCH/mWgga0nt
qQ4tV2vLrrHnrUzXYNKW0Dq3mHtZ4v6wvMknFuD4jNMih3eysinQEKuQjQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLlru9GFjw2ZOctbgB9659SZcH+jMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvdVd1NzBZV1BEWms1eTF1QUgzcm4xSmx3ZjZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCXXYoAwQA
XrERMA8EAgACMAkDBwQqAUAgAEAwDQYJKoZIhvcNAQELBQADggEBAK8fZFXXamqC
NONc10mcxbi/weodE0/7WPN05kk4qeNKaD/GMb1aKTeJsWCq2//kyy0SrostbaHl
okaYQ3xDXZ8zKJL7lMoDr4oVIwF3PUkGRa5+850ef+aA6VcN1VC56ueRtt6Zc8+z
IqBBWpMAP1hDsJ6AR9IzAkkO1rm26NENClsoLc6Go6abM19M8oIvLO25MK8+6G1I
BZqMRBg+cjo34wi503TfhUi4gWJTHz5WElxJVHDITNRA2HBHuZHKDaeZhon322BN
8TA1AWUUDj6+oYB9Dx9dL3k8C1uDZ9Rns2Lgs5RUMsJ6O+bUIrMZx3VT/HaowDT7
ZhV+SozIOI8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:07:29 2024 by rpki-client on console-fra.rpki-client.org