Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa
File: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (raw, json)
Hash identifier: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=
Subject key identifier: B8:B9:C8:3B:04:64:1B:1A:EC:05:B0:E8:D2:04:04:E3:E8:42:67:8F
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 01942C1889EC158B44AB0F3079CC915B5922
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa
Signing time: Fri 03 Jan 2025 12:16:33 +0000
ROA not before: Fri 03 Jan 2025 12:16:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 193.201.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:18:89:ec:15:8b:44:ab:0f:30:79:cc:91:5b:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Jan 3 12:16:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8b9c83b04641b1aec05b0e8d20404e3e842678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:89:60:60:cd:78:d6:17:27:65:63:95:bd:
05:55:59:10:df:9b:a1:84:1a:d8:3a:dd:54:bf:54:
b5:25:8d:ba:65:6d:17:8b:45:71:91:1a:92:ff:71:
84:84:b3:f7:8b:90:d5:86:f3:fd:d5:c2:48:5e:d8:
e6:d6:0c:fc:cf:88:c2:b8:61:9d:d0:d6:c9:39:4f:
2e:69:cd:04:c0:59:66:d9:09:ab:6f:38:a3:31:73:
6e:7f:e0:84:54:f3:d8:d2:93:c7:c0:aa:61:2b:d9:
9e:4d:8b:0a:90:29:28:0a:98:16:56:3a:63:d4:9f:
74:b0:26:c5:bf:3f:3c:0b:3a:f7:e5:af:d6:a0:e6:
76:6a:e0:8b:d7:de:08:8b:5b:29:87:ac:37:2c:ad:
1f:54:20:a4:de:b3:ab:86:2f:3b:1f:c7:5d:e3:16:
b7:96:ae:f1:c5:35:ff:64:94:d9:3e:0e:7b:df:2c:
c7:ab:ba:98:61:49:42:d1:35:54:2d:db:19:21:93:
03:3c:4e:e6:3c:d4:a4:1b:ff:98:86:76:37:c4:d9:
81:ab:d3:00:43:24:d1:74:f8:90:3e:de:13:a1:c7:
56:cf:00:ee:ab:68:f2:b2:19:3f:6f:d9:c9:b0:9a:
fa:c6:17:4a:0a:2a:22:40:3c:8e:b4:bb:32:7a:b6:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:C8:3B:04:64:1B:1A:EC:05:B0:E8:D2:04:04:E3:E8:42:67:8F
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ff:2b:03:1d:1e:4c:d2:9c:d3:74:da:97:6a:82:fe:e2:bf:
a3:42:8b:38:c7:49:0a:e0:38:91:37:bb:81:62:6b:e5:6d:f6:
59:e7:6f:bd:6f:36:cd:c4:d5:00:46:76:46:84:4a:de:ea:01:
f0:0e:f5:ee:57:a6:f9:7e:10:34:d5:59:9e:1f:10:d9:9f:8b:
e4:92:db:a2:41:c2:a9:99:63:3b:5e:64:67:2d:e6:d1:74:15:
b5:16:9b:db:e4:17:7c:6c:e6:65:38:0e:ad:26:a8:2c:99:d0:
c4:52:dc:33:e3:b4:b6:cc:18:59:53:bc:97:1b:f3:81:be:83:
69:19:c0:18:f3:d8:2c:39:5a:06:21:35:bb:2f:d9:fe:e6:dc:
b8:be:9c:35:e0:21:d0:8c:35:70:2c:8e:16:58:3d:95:8b:7c:
bf:f2:cf:de:4c:6d:f9:3d:e1:b4:9d:b0:dc:04:8a:e7:78:5e:
0b:48:e2:e8:75:6b:4b:d8:7a:43:d2:49:7d:7c:13:8a:0b:f6:
0b:cd:87:ea:fa:a1:a5:21:54:87:9e:9a:d8:a7:ea:e1:0d:57:
9b:2b:14:d6:11:d2:1f:e4:55:83:35:76:0b:3f:ce:ed:4b:29:
f1:ef:4b:f1:55:af:64:62:5e:6d:55:ed:f5:c5:52:99:e9:34:
86:4d:9e:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQsGInsFYtEqw8wecyRW1kiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Mjc3N2YzYWJlNzY1ZmY4OGIzZThlNmRiODNkMjdjM2M2
MjYxMzgwHhcNMjUwMTAzMTIxNjMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGI5YzgzYjA0NjQxYjFhZWMwNWIwZThkMjA0MDRlM2U4NDI2NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuymJYGDNeNYXJ2Vjlb0FVVkQ35uh
hBrYOt1Uv1S1JY26ZW0Xi0VxkRqS/3GEhLP3i5DVhvP91cJIXtjm1gz8z4jCuGGd
0NbJOU8uac0EwFlm2QmrbzijMXNuf+CEVPPY0pPHwKphK9meTYsKkCkoCpgWVjpj
1J90sCbFvz88Czr35a/WoOZ2auCL194Ii1sph6w3LK0fVCCk3rOrhi87H8dd4xa3
lq7xxTX/ZJTZPg573yzHq7qYYUlC0TVULdsZIZMDPE7mPNSkG/+YhnY3xNmBq9MA
QyTRdPiQPt4TocdWzwDuq2jyshk/b9nJsJr6xhdKCioiQDyOtLsyeraCFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLi5yDsEZBsa7AWw6NIEBOPoQmePMB8GA1UdIwQY
MBaAFIcnd/Or52X/iLPo5tuD0nw8YmE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjIt
NDFiNDY4ZjNhYWIwLzEvdUxuSU93UmtHeHJzQmJEbzBnUUU0LWhDWjQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjItNDFiNDY4ZjNhYWIw
LzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwclCMA0G
CSqGSIb3DQEBCwUAA4IBAQCb/ysDHR5M0pzTdNqXaoL+4r+jQos4x0kK4DiRN7uB
YmvlbfZZ52+9bzbNxNUARnZGhEre6gHwDvXuV6b5fhA01VmeHxDZn4vkktuiQcKp
mWM7XmRnLebRdBW1Fpvb5Bd8bOZlOA6tJqgsmdDEUtwz47S2zBhZU7yXG/OBvoNp
GcAY89gsOVoGITW7L9n+5ty4vpw14CHQjDVwLI4WWD2Vi3y/8s/eTG35PeG0nbDc
BIrneF4LSOLodWtL2HpD0kl9fBOKC/YLzYfq+qGlIVSHnprYp+rhDVebKxTWEdIf
5FWDNXYLP87tSynx70vxVa9kYl5tVe31xVKZ6TSGTZ7p
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:36:13 2025 by rpki-client