Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa
File: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (raw, json)
Hash identifier: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=
Subject key identifier: B8:CC:C0:19:C6:06:C8:57:D8:83:4C:51:1A:0C:44:13:52:DF:F8:E8
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194975C755CCDAA44EBAD04A7BB0CF27B46
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa
Signing time: Fri 24 Jan 2025 08:10:06 +0000
ROA not before: Fri 24 Jan 2025 08:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 176.103.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:5c:75:5c:cd:aa:44:eb:ad:04:a7:bb:0c:f2:7b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 24 08:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8ccc019c606c857d8834c511a0c441352dff8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:2b:0f:45:de:12:ef:48:2d:d4:01:3a:f2:
a8:7c:f5:68:99:4c:6c:92:f5:94:d8:5b:6b:0f:88:
19:6d:5c:c1:2e:bf:c2:0d:5c:c9:cc:76:b0:22:30:
d5:60:d8:a6:6b:37:b1:6d:70:50:de:dd:53:c2:5e:
1d:04:90:8f:81:29:bb:b1:3f:f5:26:e8:3a:f0:3d:
39:86:49:61:86:dd:92:5e:e0:de:c6:e3:56:97:c3:
27:ca:a9:bc:25:2c:c8:d2:48:2e:8f:f2:54:03:eb:
c3:4d:12:42:17:cf:f7:c6:11:cb:06:e6:6f:62:bf:
d9:49:89:30:11:2c:74:31:e0:24:53:c0:b8:05:9e:
71:fe:e9:d6:40:82:e7:a0:ce:35:d6:21:1b:aa:9d:
7d:cc:c6:8a:ab:3c:e5:8b:47:9a:2c:1f:49:13:58:
53:38:3b:50:13:d3:d9:00:f3:77:31:04:cc:b8:0a:
0f:03:9d:11:b6:86:6b:aa:43:44:54:bd:a9:1d:0c:
5a:3d:74:87:1b:bd:55:79:05:b0:ff:62:ba:f3:47:
3f:bf:fc:48:6a:1c:13:af:1f:27:7f:95:a4:8c:52:
d3:42:3e:45:12:4f:10:ce:66:7e:63:b6:7e:c6:70:
42:76:ff:08:cc:45:b4:10:fe:77:76:92:30:53:d4:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:C0:19:C6:06:C8:57:D8:83:4C:51:1A:0C:44:13:52:DF:F8:E8
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.192.0/21
Signature Algorithm: sha256WithRSAEncryption
83:c5:c8:de:e7:92:74:cd:67:db:57:36:e1:29:a4:2b:eb:e3:
9f:29:65:b5:f1:41:d0:b1:89:31:87:89:31:46:a4:e2:c7:2d:
21:94:0b:4d:71:d5:93:f1:a2:b9:9a:ab:ce:24:a9:d3:82:77:
6c:65:a3:3f:c8:fc:7a:ae:c6:75:b8:b9:03:7d:6a:72:bc:5f:
f8:0d:7f:cd:99:4a:ec:db:45:e1:8f:e1:b8:f0:95:51:66:01:
98:59:ad:a9:75:7a:82:10:c3:e3:12:eb:7e:d9:fc:7d:0c:ce:
84:51:fc:24:db:29:0c:66:48:51:df:d8:d3:ed:40:73:4b:5c:
89:ac:70:71:ae:5f:ff:2c:e5:06:b3:17:1f:7e:77:67:7e:3e:
b2:52:cb:54:37:69:dd:cb:60:be:2d:9c:ed:6e:b9:ce:00:6a:
2e:8e:ff:69:85:dd:6d:0d:ce:2b:f6:1b:1b:72:d3:59:54:18:
12:0a:81:5d:c4:4d:8e:49:82:38:56:c9:31:64:d5:9a:ef:61:
2a:41:c2:6b:19:56:7d:03:4b:82:b8:d8:b7:c9:64:b6:e4:d0:
8a:68:24:ac:c6:56:77:ee:93:10:b1:df:0f:dd:70:17:d9:30:
c2:e6:b0:7e:ba:3f:6a:d8:34:b4:a5:57:bc:70:27:2c:8e:74:
fa:95:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:20 2025 by rpki-client