Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/uJcwClz6uJRHIAqaB4c6iwo2p2k.roa
File: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (raw, json)
Hash identifier: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=
Subject key identifier: B8:97:30:0A:5C:FA:B8:94:47:20:0A:9A:07:87:3A:8B:0A:36:A7:69
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 0194236A11BA3605961B18C3F27681E3490A
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/uJcwClz6uJRHIAqaB4c6iwo2p2k.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57152
IP address blocks: 185.121.124.0/24 maxlen: 24
185.121.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:11:ba:36:05:96:1b:18:c3:f2:76:81:e3:49:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b897300a5cfab89447200a9a07873a8b0a36a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:22:f2:92:27:d8:87:3c:3a:71:11:af:81:
ac:91:93:a8:4f:69:b7:3a:65:6a:5f:b4:4c:df:41:
f9:e6:79:2f:20:07:01:36:61:7b:00:e0:49:fe:50:
ba:49:44:7b:30:ce:a6:a5:19:d3:4e:cc:6a:1e:e0:
14:53:13:e4:64:b3:d5:96:51:c0:5d:4a:b7:1f:d2:
3a:d7:e6:bf:80:d8:6b:39:d1:52:b2:63:5c:50:86:
df:7a:c7:3f:22:cf:e3:27:7e:96:48:25:12:25:e3:
93:90:bf:e3:cf:c6:7c:ce:66:b9:ac:b6:b1:5d:fd:
21:96:14:02:57:6e:8e:44:1d:78:0e:86:57:d6:90:
06:cc:0f:bd:7c:ef:15:57:fb:30:a7:6c:79:83:51:
14:42:e2:62:a7:ed:5c:60:3f:1d:63:55:18:b0:54:
3c:fa:50:80:fd:26:14:af:cc:b7:dc:0a:03:93:3c:
fd:e3:c1:7a:d0:f8:56:a3:bd:4e:9c:fe:58:16:06:
f3:8c:50:22:cd:8b:01:14:f6:97:12:c9:b5:9e:05:
ac:31:a4:2a:d4:17:3a:9a:c6:36:2c:0f:39:42:cb:
ea:45:bd:55:9c:1e:f8:be:b9:f5:05:89:b5:92:48:
bb:0f:23:23:90:0c:fc:03:0b:b7:e7:3a:01:a4:e9:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:30:0A:5C:FA:B8:94:47:20:0A:9A:07:87:3A:8B:0A:36:A7:69
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/uJcwClz6uJRHIAqaB4c6iwo2p2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:10:c6:38:31:8d:6e:2a:86:b4:d8:23:b1:78:71:63:67:9f:
e5:ee:17:8c:fe:e2:be:e3:d7:6c:37:ab:4c:eb:ba:fa:95:3d:
8b:9d:d4:04:3a:2a:9f:9e:af:9d:24:27:5b:65:46:7d:a4:b7:
43:2c:69:47:55:69:3f:ea:f1:b7:cf:12:01:d1:2b:96:91:0d:
24:1f:47:c5:ff:4a:08:c4:be:66:d7:c2:0a:32:1f:fe:22:76:
26:db:d7:99:fe:34:30:f1:61:26:72:16:b1:69:88:ee:f2:79:
95:26:20:be:6e:88:e8:49:dd:61:5d:8a:62:00:cc:04:ff:76:
36:77:f5:1c:62:98:9b:5d:8c:ad:37:43:f9:92:81:6c:23:de:
8b:7a:a6:d6:38:bd:c0:6e:0c:0d:84:61:18:e7:1e:a9:17:40:
a9:29:ec:45:fb:ad:ca:a8:9c:e1:2d:13:b8:76:43:c3:6d:df:
f7:9f:6c:17:2b:8b:48:e8:d1:bf:3c:49:eb:ab:f2:36:f2:6b:
72:96:8b:e6:eb:40:18:82:1b:e9:a5:4c:1a:c0:4b:af:a5:16:
aa:57:83:e0:94:72:ce:42:f0:d7:ac:f8:49:52:f7:8f:4e:1c:
63:12:d2:94:6d:86:75:ed:2c:39:46:81:92:e8:c7:e8:3a:76:
e1:f6:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:02 2025 by rpki-client