Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa
File: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (raw, json)
Hash identifier: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=
Subject key identifier: 50:3E:1C:42:AE:D2:C8:20:01:2C:26:47:1C:2D:4E:BB:F1:1E:2F:A3
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 01946AA948E37B021C5551B3A6BB82D960BA
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa
Signing time: Wed 15 Jan 2025 15:51:06 +0000
ROA not before: Wed 15 Jan 2025 15:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216463
IP address blocks: 185.241.207.0/24 maxlen: 24
2a02:f680::/29 maxlen: 29
2a02:f680::/48 maxlen: 48
2a02:f680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:a9:48:e3:7b:02:1c:55:51:b3:a6:bb:82:d9:60:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Jan 15 15:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=503e1c42aed2c820012c26471c2d4ebbf11e2fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:2d:09:49:b7:3f:af:f1:7d:91:9b:07:40:
56:a2:14:18:17:8f:05:a0:7e:ea:27:e6:36:e7:d2:
cd:f3:71:a5:df:6b:7a:78:7a:dc:76:cc:2b:7a:d5:
a1:60:34:3f:8c:22:f9:91:79:e4:db:03:ea:a2:c1:
32:d8:1e:4f:3d:aa:3f:f2:bf:ba:8f:26:f7:47:54:
44:ee:32:15:bb:3e:ee:ae:98:44:48:b4:60:a6:7d:
e4:bf:93:60:42:c0:85:b7:77:a3:a3:42:84:4e:2b:
79:41:ac:a1:20:bc:3a:f5:d1:d7:fc:3b:d0:65:30:
c9:7a:4a:f4:48:b5:e9:4a:09:bf:fa:fa:41:92:d1:
c6:4a:ec:4b:e3:14:bf:01:8c:97:63:17:ac:87:86:
a7:d5:a1:82:74:b0:17:86:54:b4:63:0e:c9:49:31:
01:b7:4f:45:49:e4:69:41:a5:6e:8c:8f:3e:c9:29:
ff:c6:bc:3d:8b:e5:0c:17:3c:9f:cb:00:d9:4e:26:
6f:73:4c:15:49:5b:6a:23:c9:f0:04:ad:26:72:d3:
6c:3d:dd:a3:19:68:4c:c8:63:65:d0:7c:c1:85:88:
0e:71:90:69:1a:b5:8d:2b:cb:aa:52:44:4c:01:d4:
fa:21:17:37:e3:00:bc:40:ec:67:f0:74:e8:ab:17:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3E:1C:42:AE:D2:C8:20:01:2C:26:47:1C:2D:4E:BB:F1:1E:2F:A3
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.207.0/24
IPv6:
2a02:f680::/29
Signature Algorithm: sha256WithRSAEncryption
39:ff:bb:6a:53:ee:44:5e:81:78:02:06:5a:d4:f1:e9:cc:4b:
de:30:62:30:b8:49:17:8d:9f:aa:1d:6c:1a:c8:03:de:2f:51:
8d:e4:98:30:63:34:09:f1:7c:5c:fa:69:cf:31:71:4f:b9:1b:
16:61:0f:14:a3:b9:27:16:f5:9a:1c:b7:a9:6e:b2:86:a0:c9:
10:71:10:01:60:85:4b:67:c1:a9:18:7e:e3:72:57:de:71:0d:
fa:94:c2:88:79:6a:04:27:00:62:8a:0b:df:ac:31:13:cc:db:
52:91:72:aa:5d:67:93:6b:7b:4c:82:c4:24:51:9e:7f:84:b6:
16:b3:5c:f3:b8:7c:70:8a:16:00:56:39:35:99:db:0d:55:1e:
fe:ae:b3:05:8b:c0:2d:55:18:9a:4e:94:b6:8b:b4:40:9e:8c:
03:a9:7e:87:8a:a7:7d:64:60:d3:be:3c:2a:2e:7b:31:1d:6b:
29:09:cf:2d:83:e7:25:87:09:c0:b1:d7:5f:1e:ed:85:0b:a0:
2c:9a:20:b7:2c:93:01:c0:9f:2f:4c:da:f3:52:94:5d:b1:c8:
1b:6e:85:e5:a7:e4:0e:a0:bb:b2:99:af:7f:50:a5:ce:06:d3:
66:82:00:37:a8:61:cb:2e:37:0b:6e:83:69:48:6a:97:e8:c3:
88:d0:97:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:12 2025 by rpki-client