Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa
File: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (raw, json)
Hash identifier: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=
Subject key identifier: BB:25:47:82:F2:9B:83:28:48:24:FF:6B:E5:A1:9F:5E:34:C7:14:94
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 01942220055E43B207374D9C12ACA5EC7249
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212415
IP address blocks: 193.104.187.0/24 maxlen: 24
194.153.85.0/24 maxlen: 24
2001:67c:28d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:05:5e:43:b2:07:37:4d:9c:12:ac:a5:ec:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb254782f29b83284824ff6be5a19f5e34c71494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:c9:86:97:22:29:d9:2d:87:f9:39:cf:c8:
30:03:b5:61:aa:31:9f:bd:93:88:f2:52:45:89:ea:
7d:a5:2d:e0:6a:b6:04:b4:fd:6c:73:22:d9:10:43:
8d:7f:9f:a8:0f:ce:14:9c:41:dc:a4:ef:39:83:8e:
30:9e:34:82:02:3f:d4:72:42:fd:fd:f6:4e:3f:4e:
19:d0:95:0f:fd:b6:e8:d7:22:8d:9a:a4:46:b6:2d:
01:d0:ba:98:ea:d8:7a:34:27:c1:48:35:27:79:c0:
37:52:18:3e:48:fa:f3:03:36:20:99:86:c9:95:df:
85:2a:70:38:17:a7:a7:f7:a9:27:e6:21:45:02:51:
72:74:19:0f:9a:cb:c5:96:02:2a:45:ae:b8:ff:a6:
73:a5:ee:84:93:09:12:14:37:01:85:92:5a:0a:39:
ab:8d:af:46:25:83:88:77:24:39:dd:4c:b4:c9:57:
4c:9b:9c:c1:87:23:ee:54:86:dd:90:8d:7b:99:20:
a9:d7:f8:90:ad:fc:0b:20:de:09:82:0f:0b:7a:68:
63:cd:c0:1c:ee:28:e1:71:d0:7c:96:06:53:7f:d0:
23:c7:f1:44:35:a4:5d:20:6f:55:2a:58:5a:9e:7a:
54:16:c0:56:02:25:b4:e4:a9:e7:00:d9:df:8c:ef:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:25:47:82:F2:9B:83:28:48:24:FF:6B:E5:A1:9F:5E:34:C7:14:94
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.187.0/24
194.153.85.0/24
IPv6:
2001:67c:28d0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:64:f8:74:ef:20:b1:d0:8f:47:9e:17:12:4f:e1:a1:71:7c:
71:88:11:b0:dc:66:24:d2:c3:ec:94:6d:a7:b7:a2:35:f1:65:
ea:31:ce:46:78:3b:29:d2:ef:b8:e0:a2:29:1c:95:28:2c:7f:
7e:30:7a:9e:52:fd:c7:36:30:2a:68:4d:a6:df:1b:a8:c5:bb:
e2:85:73:98:9a:a1:35:c9:ec:99:e9:e0:36:f1:de:e2:19:d8:
0b:e3:9d:94:74:03:05:e9:3d:8e:23:4f:60:0b:8a:9a:8e:fa:
aa:65:0e:3d:45:3d:d7:86:cf:97:3b:c5:de:58:60:a8:83:d3:
24:ca:d1:29:34:23:c3:72:46:fd:fa:1a:90:17:d9:da:41:e1:
2f:8f:79:c0:4d:2e:87:9b:57:83:79:6c:b6:bf:85:6b:97:89:
67:73:16:2d:87:12:76:1f:42:a1:9d:6c:7e:c6:55:0d:cd:6d:
a2:f0:32:bd:86:7a:c4:9e:7d:2d:bb:29:ac:ca:86:59:a9:3a:
2b:09:b0:5a:a9:92:19:ec:55:2a:90:d1:23:29:35:9a:0d:d1:
46:2f:37:c5:84:dd:05:ba:73:78:5c:dc:4e:53:48:db:75:97:
3a:dc:08:5f:69:fc:29:4f:91:8c:d1:43:c7:bc:bd:85:5d:99:
5f:bc:13:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:46 2025 by rpki-client