Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/UZAf8A9-pMDfvYbHB760wm3mim8.roa
File: UZAf8A9-pMDfvYbHB760wm3mim8.roa (raw, json)
Hash identifier: j34ASxN7++MCsv3IXa3rAjo5KvWthukAGWu5QUJzwPY=
Subject key identifier: 51:90:1F:F0:0F:7E:A4:C0:DF:BD:86:C7:07:BE:B4:C2:6D:E6:8A:6F
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 01942747B1D65F3906D5B9A8C8C45A484DB2
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/UZAf8A9-pMDfvYbHB760wm3mim8.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 185.216.13.0/24 maxlen: 24
2a13:6300::/32 maxlen: 32
2a13:6301::/32 maxlen: 32
2a13:6302::/32 maxlen: 32
2a13:6303::/32 maxlen: 32
2a13:6304::/32 maxlen: 32
2a13:6305::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b1:d6:5f:39:06:d5:b9:a8:c8:c4:5a:48:4d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51901ff00f7ea4c0dfbd86c707beb4c26de68a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:2b:88:5c:a8:cb:dc:82:d2:d2:de:ed:69:
51:ee:17:f5:21:38:f3:ac:7a:45:0a:e1:04:20:cf:
fc:17:18:6d:55:ab:be:5b:df:c8:bc:db:20:31:14:
cf:b5:db:61:ee:37:42:20:24:2e:8c:a2:99:0a:0e:
1c:18:c7:d9:01:cb:95:d5:3c:2a:be:2c:da:78:44:
5f:e6:8b:57:e3:0e:6c:4a:25:34:36:39:eb:3e:67:
d0:c7:91:56:e9:4e:b2:8d:d1:15:a8:58:47:d3:8e:
ca:12:b6:11:c3:73:05:da:0c:ba:94:3d:5e:c1:3c:
ce:30:5e:5d:01:c1:e8:b2:0a:ef:56:6a:8b:6d:21:
0f:46:4f:32:bf:7f:db:9f:da:0a:b7:29:31:d2:e5:
af:94:b8:5a:91:1c:51:4e:3e:96:fc:af:e7:af:e9:
af:d4:7e:65:15:ec:95:80:1e:de:20:ae:0d:f6:b9:
94:6d:bf:a0:7b:80:74:76:7f:ea:e7:3c:be:61:37:
7f:38:4b:d7:de:1a:2d:25:10:5a:d7:be:e3:0f:95:
c7:f0:06:32:5b:d9:13:45:45:05:b8:2f:ab:85:68:
2d:0b:3a:5d:e5:02:71:59:2f:45:59:29:36:64:b6:
cf:b7:67:45:f7:91:9a:67:65:21:76:60:d2:0a:22:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:90:1F:F0:0F:7E:A4:C0:DF:BD:86:C7:07:BE:B4:C2:6D:E6:8A:6F
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/UZAf8A9-pMDfvYbHB760wm3mim8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.13.0/24
IPv6:
2a13:6300::-2a13:6305:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:af:65:ce:f9:f7:08:92:df:63:c0:14:8e:8f:58:dd:c2:31:
c6:5a:51:80:81:7f:33:77:ae:74:1a:08:78:fe:fb:15:3d:43:
c5:d4:d1:4c:06:ea:b8:1c:4d:12:69:89:11:93:19:61:19:e1:
7f:2e:f8:ad:fb:2f:fd:ea:3d:08:ff:fc:99:ce:f7:e3:c7:8b:
a9:d7:ea:b5:a6:6b:82:70:9e:b6:c1:e0:e6:d8:87:38:ea:c8:
1f:a5:ca:f5:97:03:eb:ee:95:8d:a6:85:2c:c9:1e:34:5b:e4:
8c:db:aa:d7:fd:d4:53:f1:65:5e:e0:db:e3:13:bd:e6:e6:f1:
18:5c:95:f4:62:25:0a:5b:39:a0:db:12:bc:42:7f:4e:86:0d:
93:cf:24:a1:e4:24:c6:f3:11:56:ae:5d:2b:21:42:d6:74:87:
2a:35:c3:7c:cb:7e:3d:fc:56:2e:cc:f4:80:0f:7b:8f:db:7c:
de:1e:ea:cf:68:ba:a5:c3:49:c4:cf:a9:1c:47:7c:d7:ea:68:
22:05:6a:5e:2f:3c:c5:fb:5f:35:12:40:65:f2:60:14:36:d1:
26:4a:c8:dd:0a:e8:14:19:05:57:8a:fe:dd:bc:16:b3:fd:e6:
88:c5:43:85:19:f3:e7:b7:b2:14:2f:d8:b7:6d:dc:ab:75:2a:
d6:57:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:47 2025 by rpki-client