Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wUTMMVSTWGU82dV6TVhYn1hP_pU.roa
File: wUTMMVSTWGU82dV6TVhYn1hP_pU.roa (raw, json)
Hash identifier: SRGaPgo4BAOxRnf4TqKlsJUXrnSAKyq/FYnGk2vmsfM=
Subject key identifier: C1:44:CC:31:54:93:58:65:3C:D9:D5:7A:4D:58:58:9F:58:4F:FE:95
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2FB533BFAF16F9C8ADFBEF90CD019
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wUTMMVSTWGU82dV6TVhYn1hP_pU.roa
Signing time: Thu 02 Jan 2025 01:48:16 +0000
ROA not before: Thu 02 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202589
IP address blocks: 85.254.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:fb:53:3b:fa:f1:6f:9c:8a:df:be:f9:0c:d0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c144cc31549358653cd9d57a4d58589f584ffe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:2d:7a:2b:9d:09:30:d0:9b:f6:03:4a:ea:
94:78:b7:1f:8e:86:c5:ee:7d:bc:f1:db:d5:77:41:
6a:8c:e7:34:f5:95:4c:fb:6e:01:cf:02:f0:a7:7f:
13:d4:07:03:79:0d:a4:fb:36:3c:b9:c2:fa:1f:f4:
af:d6:dd:5c:04:c3:f6:59:10:24:d7:e7:4d:94:7e:
c3:97:ba:bd:ed:60:f7:e9:1e:be:8f:f1:08:92:99:
c2:99:85:34:9f:3d:92:38:af:d5:cf:0b:7a:58:10:
2a:b4:8b:e4:83:07:01:a7:aa:72:97:bb:cf:50:bf:
bb:8b:02:f8:2c:79:63:9c:29:26:cc:ab:7b:74:3c:
3d:ea:f0:59:dd:4b:c6:35:f2:71:67:22:d1:b6:da:
c3:56:e9:72:1c:26:e4:93:3b:90:ac:72:f6:7e:94:
04:64:d8:4d:2a:b2:09:27:1f:b7:67:56:d7:68:ef:
87:a2:80:30:8d:72:7d:ce:10:02:48:b6:dd:3a:b9:
99:04:9e:d5:14:62:3f:8f:8d:87:7a:92:cd:b5:ea:
bf:38:b0:43:6a:76:35:0d:8a:e1:ea:1e:8d:df:d3:
ea:fd:a8:bf:c2:bf:02:d9:c0:76:73:26:3f:85:fc:
31:c2:5f:59:5d:1e:06:7a:92:9f:35:df:80:89:51:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:CC:31:54:93:58:65:3C:D9:D5:7A:4D:58:58:9F:58:4F:FE:95
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wUTMMVSTWGU82dV6TVhYn1hP_pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.58.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:a7:b1:34:ca:a7:09:7a:82:39:90:6d:76:66:d4:31:e4:
0c:33:28:a3:3c:81:0e:47:09:83:84:1c:64:cb:7a:40:f2:16:
b2:a2:e2:0f:f9:8e:0f:71:ab:da:bd:ca:2f:97:f8:14:e3:e0:
bb:38:11:64:cd:fe:7e:ad:58:0e:82:2b:b8:b1:30:d5:a0:be:
db:d0:1c:5d:9b:3f:1d:8a:ef:f1:bd:f2:82:1e:2d:92:73:da:
5a:98:bf:73:d1:83:0a:84:b6:5a:42:97:22:7f:56:55:eb:61:
a5:bc:f2:68:a9:9f:4f:ec:f0:6d:40:26:3f:a3:09:75:c2:56:
07:c4:26:db:27:f6:31:83:2f:37:8a:ec:e7:ad:c4:4c:2c:e5:
50:0a:b7:47:12:3f:c0:db:a1:ad:40:bb:0b:1a:41:3b:1a:fb:
a1:fa:4f:8b:2c:38:9d:81:ed:67:25:95:9e:5d:33:4f:48:94:
8d:d4:c4:5c:c2:da:96:db:c5:87:50:8f:38:ab:74:fa:9b:88:
ca:dd:ae:18:21:40:41:c2:51:d6:67:91:de:ff:46:f3:77:cd:
2c:95:fc:85:1e:57:c3:40:ac:67:37:a8:bd:9b:13:00:49:1d:
d0:52:03:72:50:d4:ed:d6:58:08:27:51:f5:9f:b3:90:37:d3:
63:d5:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:47 2025 by rpki-client