Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/v3UNc2uLxbw1W395JPUfkX1XdHM.roa
File: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (raw, json)
Hash identifier: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=
Subject key identifier: BF:75:0D:73:6B:8B:C5:BC:35:5B:7F:79:24:F5:1F:91:7D:57:74:73
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 01942444A259EAF80455C84751F48925AF97
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/v3UNc2uLxbw1W395JPUfkX1XdHM.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.105.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a2:59:ea:f8:04:55:c8:47:51:f4:89:25:af:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf750d736b8bc5bc355b7f7924f51f917d577473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:b8:55:52:0f:35:92:01:57:61:22:f7:d0:
a1:c2:11:15:40:69:45:bb:ac:e8:7a:0a:18:92:8e:
55:65:ee:a0:7d:da:72:5d:53:30:90:9b:b6:96:c7:
fa:93:4c:e4:fc:2f:d8:fc:a1:0f:3e:54:cd:10:e0:
21:4e:ea:cc:01:06:10:f5:2d:14:26:a9:d9:12:ae:
5f:d3:74:5e:e2:8f:3e:97:1e:58:bd:93:da:ff:b0:
e7:b7:73:79:22:d4:6c:a4:fc:ca:ea:3e:81:7c:d5:
82:db:69:3b:60:87:65:0b:0c:57:64:83:d8:f8:4e:
28:03:b0:5d:90:15:38:0a:7a:50:c2:ac:66:7a:80:
bc:07:b0:8c:41:5f:1d:e4:eb:f2:61:e5:e1:8b:93:
33:d8:3f:07:62:52:e3:a4:f5:2f:84:28:6c:dc:4a:
37:12:7b:1b:84:89:d7:65:ff:2f:9c:e7:7c:9e:3f:
4c:a2:d9:21:59:90:b0:96:cf:48:36:4a:ae:1b:74:
55:de:9f:11:37:f8:ff:1c:c8:a1:f4:2d:36:ee:97:
41:d8:2f:8e:35:dd:be:50:d8:5f:13:28:1f:ca:4f:
6a:4c:31:8c:d1:2d:77:cb:82:62:cc:c5:4d:5d:cf:
f4:05:05:b1:4c:fd:8e:f2:f6:08:c9:95:5a:68:4a:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:0D:73:6B:8B:C5:BC:35:5B:7F:79:24:F5:1F:91:7D:57:74:73
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/v3UNc2uLxbw1W395JPUfkX1XdHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2e:81:0d:eb:d7:9e:d2:b9:02:2c:35:b2:eb:d6:5a:89:7b:
8d:aa:b0:ac:cd:80:80:e6:3b:7a:eb:55:d3:34:4d:ce:a0:40:
58:ff:a5:6c:aa:1c:8e:c7:b9:40:f3:da:e1:42:17:6f:fc:b4:
ef:a5:e7:a6:30:ed:4c:0d:c3:b6:5c:e6:18:65:f0:6f:5f:a3:
a2:f2:84:b8:f5:42:1f:21:ca:93:c9:70:db:0a:9e:ce:06:00:
d3:3f:7e:8f:3e:58:e6:e0:02:f3:b6:24:68:12:52:ac:86:d9:
40:54:1e:65:a6:1a:2f:c6:87:0a:0c:b2:b9:47:2c:f7:1c:f2:
e8:a1:ab:68:f9:d3:1f:5b:4d:30:d5:7c:ab:0e:c3:1b:ac:cc:
50:4e:ea:e9:71:de:cd:c9:3d:a6:fd:10:26:38:e9:5b:eb:db:
b3:d5:da:4e:01:6c:14:75:a3:b3:1f:3b:88:13:d2:65:df:b0:
76:53:3c:93:54:42:b8:2a:bc:39:43:a8:c8:c2:ef:83:b4:6f:
b1:5f:a9:f7:03:8a:72:9b:81:cd:c0:38:a7:dd:a5:9a:ff:09:
bc:b8:46:e7:bf:c2:50:c4:33:9a:19:97:df:d9:31:8f:1c:8d:
d1:34:ef:e0:52:aa:20:36:74:80:50:61:4c:d8:87:9f:2a:6e:
53:e0:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:17 2025 by rpki-client