Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/uLY7R20m1_heAxActPUiDlUOF_k.roa
File: uLY7R20m1_heAxActPUiDlUOF_k.roa (raw, json)
Hash identifier: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=
Subject key identifier: B8:B6:3B:47:6D:26:D7:F8:5E:03:10:1C:B4:F5:22:0E:55:0E:17:F9
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 01942368E26E801F0A3B6229255BD8F130CF
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/uLY7R20m1_heAxActPUiDlUOF_k.roa
Signing time: Wed 01 Jan 2025 19:47:43 +0000
ROA not before: Wed 01 Jan 2025 19:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21388
IP address blocks: 85.119.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e2:6e:80:1f:0a:3b:62:29:25:5b:d8:f1:30:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Jan 1 19:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8b63b476d26d7f85e03101cb4f5220e550e17f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:8b:85:25:a1:4f:b1:c7:47:7f:32:ca:54:
e6:d4:fc:89:2f:12:95:2f:b7:57:0f:9f:03:4d:94:
5b:90:ea:d9:fa:0c:e8:7e:50:e2:54:f4:0c:26:44:
52:f8:46:bc:f8:0a:e6:ed:10:33:c7:0f:36:c7:d1:
fe:ba:f2:1b:c5:94:99:57:01:21:b8:18:77:3b:c7:
6b:9a:a9:15:7e:53:85:bd:2c:44:19:06:fd:45:57:
29:c2:2f:97:0d:c1:04:1a:cb:9e:8c:d2:e9:2b:07:
60:7e:9b:19:9f:75:ae:9b:20:3a:b5:51:15:e6:bd:
ef:97:13:a8:b7:a6:b6:46:30:25:f8:ef:05:f8:8f:
98:92:e8:90:d0:81:9c:01:d7:2a:da:81:a6:a7:49:
32:dc:47:86:f0:17:9b:cb:a1:a3:64:31:f6:c3:12:
15:ea:3e:dc:ed:03:1b:74:81:6f:39:ef:8e:77:d7:
9c:47:da:f6:44:78:b0:6d:82:78:b6:ad:a1:74:83:
a3:83:e8:19:3d:41:3f:b5:2d:1d:c7:4f:d5:d8:cd:
0e:15:52:b3:30:f6:78:b6:b5:53:0e:60:49:1e:a1:
ca:74:a1:8e:eb:99:27:0a:ac:0f:b0:ab:ad:14:eb:
05:8a:4d:0e:7b:8c:55:81:6f:30:ba:bf:33:23:46:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B6:3B:47:6D:26:D7:F8:5E:03:10:1C:B4:F5:22:0E:55:0E:17:F9
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/uLY7R20m1_heAxActPUiDlUOF_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.53.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b2:08:dc:a8:fd:10:01:13:ed:43:da:16:c1:74:fd:11:97:
40:f3:b7:66:fa:b1:89:e0:33:98:98:1e:37:63:04:43:7a:ae:
dc:37:d0:b3:81:0e:9f:ee:79:31:1f:a2:93:3b:95:85:bc:70:
6c:5b:a1:b0:ab:e6:d6:e1:1d:0f:ec:31:36:3f:89:f3:08:d5:
cf:3b:6c:b1:c3:a8:ee:76:17:fc:e3:9f:f1:f7:bd:91:dd:3f:
cb:12:ed:d4:1a:d3:22:8b:6a:f6:04:f4:0a:c9:fa:3c:8d:16:
a2:11:ad:c7:2a:51:9d:d3:af:82:4b:a7:f5:b2:31:33:09:f8:
b1:9e:69:0a:9c:b5:a1:9c:0c:10:7c:17:4e:fa:f2:e0:34:3c:
ac:68:f8:1d:05:9a:66:77:33:60:fd:3f:af:3c:71:c0:40:f6:
eb:ed:1d:3f:82:da:f9:5b:30:87:57:ad:f9:59:90:8f:39:b2:
bd:19:33:9f:d5:ee:74:bb:11:23:ec:63:57:b3:e0:b1:65:83:
c8:de:ca:2d:b4:6b:7b:98:b0:90:f5:01:39:4e:39:72:6a:ba:
01:1a:bf:87:b4:85:36:f7:67:b4:cf:a9:05:58:ac:3f:48:2a:
31:f8:cc:1a:40:80:b6:eb:65:ca:ed:25:78:14:6b:90:4e:80:
98:ac:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:37:16 2025 by rpki-client