Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/UDoseI4zszDcDoPnMdfmZguRd1g.roa
File: UDoseI4zszDcDoPnMdfmZguRd1g.roa (raw, json)
Hash identifier: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=
Subject key identifier: 50:3A:2C:78:8E:33:B3:30:DC:0E:83:E7:31:D7:E6:66:0B:91:77:58
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019426D95B70D333527AA9E58B433421A177
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/UDoseI4zszDcDoPnMdfmZguRd1g.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60064
IP address blocks: 91.132.225.0/24 maxlen: 24
176.116.13.0/24 maxlen: 24
185.155.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5b:70:d3:33:52:7a:a9:e5:8b:43:34:21:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=503a2c788e33b330dc0e83e731d7e6660b917758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:f6:67:f2:6c:52:fd:fa:68:11:58:8d:2e:
3f:a1:98:08:af:ff:23:4e:7e:f4:54:3a:c2:c0:fd:
ef:c8:e9:34:ac:c4:f7:b7:62:7e:5f:a1:f6:6c:a8:
6e:6e:b4:0c:14:be:85:16:de:3f:86:14:83:64:af:
b9:a0:0e:34:1d:9a:b5:ce:e3:b3:53:73:ac:71:05:
45:78:43:88:8c:2e:2d:06:09:8a:0f:eb:26:11:71:
2b:c9:5a:60:ca:a9:28:ce:84:43:f2:25:81:52:c0:
de:ca:22:3e:40:1d:d7:ef:e5:ef:0d:9e:e9:dc:27:
e7:fb:b0:52:44:23:17:c5:42:43:1f:0d:dd:72:52:
9b:58:90:9a:ce:cc:ee:c2:47:2c:30:e4:7e:9d:39:
8d:a5:43:45:3b:b8:03:ce:69:58:38:ec:80:b5:94:
32:f8:67:66:8a:18:7f:c1:56:c4:14:5b:12:be:12:
66:4a:ae:53:31:0c:56:cb:c5:40:a2:f0:e3:b2:fd:
d9:8c:eb:79:b6:41:ed:90:04:37:45:a7:dd:57:a6:
b1:0e:4a:32:a7:32:cc:2e:f4:1f:8b:11:57:42:23:
02:8f:04:e1:42:d7:c9:4f:02:71:0c:68:09:47:bc:
eb:b2:52:be:cf:ae:7e:92:21:b6:40:01:11:02:4d:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:2C:78:8E:33:B3:30:DC:0E:83:E7:31:D7:E6:66:0B:91:77:58
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/UDoseI4zszDcDoPnMdfmZguRd1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.225.0/24
176.116.13.0/24
185.155.103.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c2:0c:49:40:d1:06:e7:1c:1a:13:98:68:fb:38:55:61:2b:
8d:ba:00:f6:02:e3:58:ea:e4:9e:55:70:77:9a:91:83:e1:ee:
15:40:01:e1:ff:40:0b:92:7d:2b:f3:9f:2c:78:af:b0:92:11:
8e:79:ff:62:b4:74:67:07:f4:dd:36:ca:27:57:8c:56:92:50:
09:73:b2:cd:a3:31:d9:0d:5b:ef:70:d3:e9:cf:04:9c:96:c5:
6d:96:45:31:59:f2:0f:00:1a:97:66:6b:f6:bf:3f:3f:d7:0e:
05:50:e1:eb:6a:bc:67:87:6b:8d:c6:1c:d3:3a:1f:42:38:9f:
1c:e6:96:78:82:1d:7c:67:4e:15:0d:68:ad:1c:b0:74:60:65:
48:8a:eb:d5:63:77:19:fa:89:93:69:5c:f8:05:10:a7:54:50:
cd:a1:48:c3:92:c3:21:ce:04:2c:39:44:2d:2b:5e:ae:3e:5d:
b7:7a:ae:9e:5d:66:92:80:3e:46:cb:d8:2d:69:70:30:d1:1c:
c0:f1:fb:84:e1:5a:f5:9e:b5:4a:c2:81:69:31:28:c8:0b:91:
78:7b:4e:69:67:95:d7:df:b1:71:ee:c1:9a:aa:23:5d:74:cc:
08:a1:0c:e2:e4:f4:90:a0:e1:6c:db:ba:58:3b:6a:c0:92:54:
4f:9f:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:53 2025 by rpki-client