Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa
File: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (raw, json)
Hash identifier: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=
Subject key identifier: 50:AB:28:8C:C2:50:2A:3C:2A:10:18:E5:43:48:6F:67:33:CB:E5:F3
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 019425220D0902413C1A56C7400106C59673
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12593
IP address blocks: 94.125.120.0/21 maxlen: 21
94.176.196.0/22 maxlen: 22
185.151.104.0/22 maxlen: 22
212.90.160.0/19 maxlen: 19
2a04:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0d:09:02:41:3c:1a:56:c7:40:01:06:c5:96:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50ab288cc2502a3c2a1018e543486f6733cbe5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:d7:78:75:74:c0:12:c6:47:a1:f3:96:d1:
93:9d:65:55:31:9f:b4:eb:f2:21:df:a2:a9:2c:cb:
4e:01:25:a6:68:86:e5:d1:74:d9:57:d4:3d:a4:3f:
86:d2:ce:8b:46:f6:b1:81:d1:35:ed:6b:17:9f:c0:
ac:11:bb:cf:dd:75:8f:2d:07:cf:60:63:76:37:5f:
24:14:83:d0:9e:68:69:8a:ee:6f:f4:f0:a9:f1:f7:
57:ac:cd:c4:01:31:1e:5c:e3:0f:86:e1:33:50:05:
22:86:08:b9:b1:81:2f:e7:95:38:29:20:c1:54:bd:
98:d3:8e:c8:e3:e0:b8:71:1e:57:e2:63:5a:41:59:
07:c1:70:67:0b:ae:a8:69:b0:b9:a5:1f:f8:32:85:
e7:f4:a5:74:b0:63:60:46:66:a4:d8:1b:a9:45:b4:
03:07:be:28:01:48:1a:16:fc:d9:13:f0:c4:5a:6d:
e4:a2:c4:16:e6:c8:02:89:fb:02:7d:49:3d:4a:83:
4f:95:fe:b5:10:58:9f:28:b3:ef:3a:1e:7b:dd:8f:
1e:46:3d:28:3b:df:2e:4f:b3:9a:31:7f:89:fe:a2:
f7:18:5a:12:d6:04:a8:27:be:2b:7d:09:17:e5:44:
3f:c7:58:f3:0b:cd:51:5f:c2:2e:cd:0a:0b:db:04:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AB:28:8C:C2:50:2A:3C:2A:10:18:E5:43:48:6F:67:33:CB:E5:F3
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.120.0/21
94.176.196.0/22
185.151.104.0/22
212.90.160.0/19
IPv6:
2a04:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:4a:4f:35:82:31:f0:25:a7:43:77:d2:4e:48:c8:1b:d8:47:
d3:79:ba:5e:5b:d6:05:97:50:5d:bf:21:74:b9:58:11:52:95:
d2:8c:cc:07:eb:64:ae:04:84:e7:9e:7d:50:c3:3e:52:54:71:
61:4c:c8:96:ab:2a:35:b0:a8:01:5e:90:fc:c5:db:ee:76:59:
e0:5c:c8:7f:38:2e:c6:b2:65:02:e7:8c:0c:b4:20:44:a2:ef:
e4:13:aa:31:51:c6:ae:0d:91:26:83:cc:63:aa:dd:36:6d:84:
14:0e:6d:3a:d0:11:98:4a:9a:d0:ec:e2:24:1f:e6:a8:56:33:
a1:f5:b7:28:45:fa:47:bf:21:90:b0:c2:62:99:91:0e:5b:3b:
12:68:6a:43:9b:01:1b:07:21:33:89:62:5b:a9:89:f0:24:ea:
af:d7:07:8e:33:66:b7:12:b5:fd:cd:b1:7b:ab:22:9e:c3:5b:
66:10:8c:3a:77:5b:87:d3:b8:8b:a3:fc:7d:c6:11:c9:a7:2f:
10:3a:52:9f:5b:ff:ac:e6:27:d1:ba:9d:0f:64:e1:80:6c:3e:
01:4e:3e:93:b6:a3:1c:4f:c4:76:b5:9d:f8:87:81:e3:6b:e6:
8d:8b:ab:b7:91:49:65:02:75:ae:01:24:e2:eb:53:23:10:e4:
6a:81:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:11 2025 by rpki-client