Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/UAMozedMddnvbaHXdpt5f_TDvZE.roa
File: UAMozedMddnvbaHXdpt5f_TDvZE.roa (raw, json)
Hash identifier: C7OBU+9hOWyvCkQ42eXork8FUbOcNdFjL8raQWMxSpw=
Subject key identifier: 50:03:28:CD:E7:4C:75:D9:EF:6D:A1:D7:76:9B:79:7F:F4:C3:BD:91
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 0194244503AE3616CE7182AB6B3B6628261E
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/UAMozedMddnvbaHXdpt5f_TDvZE.roa
Signing time: Wed 01 Jan 2025 23:48:10 +0000
ROA not before: Wed 01 Jan 2025 23:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205418
IP address blocks: 185.155.181.0/24 maxlen: 24
185.155.183.0/24 maxlen: 24
2a00:8c40:235::/48 maxlen: 48
2a00:8c40:243::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:03:ae:36:16:ce:71:82:ab:6b:3b:66:28:26:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Jan 1 23:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=500328cde74c75d9ef6da1d7769b797ff4c3bd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:e6:aa:1f:95:71:d2:aa:b3:cc:f4:06:6a:
60:55:50:7a:42:50:f6:17:18:26:a9:e2:d3:20:61:
a3:4a:6b:af:f0:ef:11:1f:7e:90:92:80:97:9a:ac:
15:f5:ec:d3:6c:39:df:76:9c:a4:4d:59:cf:ee:c3:
48:06:96:8b:80:d8:1d:8a:64:00:d8:0a:6d:60:fc:
8a:5c:ad:e4:27:e1:33:62:ab:9a:a8:cf:62:bc:9f:
4c:c1:69:d6:6d:89:88:24:fb:d6:46:26:99:c9:27:
e4:aa:b9:b2:72:ef:e0:40:24:af:ff:eb:29:cc:55:
28:23:22:9b:0d:b1:95:7d:42:43:3f:a2:6d:11:44:
f0:0e:f3:78:2e:0c:b4:59:e7:3e:a5:a7:32:c3:52:
c5:c7:bd:3c:b0:e4:c0:fb:df:72:1d:7e:cd:b8:b1:
a7:fd:5b:93:64:da:a9:32:89:87:b0:bd:22:e0:ef:
66:96:1b:98:94:2e:fa:98:4a:7a:a2:03:48:be:04:
15:7a:93:de:85:f6:d1:67:d7:6d:42:8d:38:76:b3:
05:0d:9a:57:6b:14:c9:69:76:96:3e:23:90:b4:b8:
b4:97:1d:1a:ef:d0:c0:d3:89:46:b7:ee:00:30:80:
d2:3f:5e:2d:31:7e:14:e2:3b:75:9f:32:7a:da:24:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:03:28:CD:E7:4C:75:D9:EF:6D:A1:D7:76:9B:79:7F:F4:C3:BD:91
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/UAMozedMddnvbaHXdpt5f_TDvZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.181.0/24
185.155.183.0/24
IPv6:
2a00:8c40:235::/48
2a00:8c40:243::/48
Signature Algorithm: sha256WithRSAEncryption
bc:17:a2:09:d8:d8:00:f3:ba:15:95:be:d8:53:97:76:8f:9f:
5a:dc:23:86:d4:e2:c7:a8:0f:b4:13:58:01:58:d6:d5:d5:82:
99:98:b1:26:e7:5d:70:ea:4e:55:3a:0d:c2:fc:37:2c:ce:63:
6b:5f:1e:d7:78:92:b9:13:3d:d2:09:3b:e3:40:31:79:c7:48:
c6:e3:a6:93:4c:2f:f0:70:9e:8d:03:38:aa:31:13:6c:4d:0f:
82:90:de:4e:40:f0:6f:6e:1b:f7:4e:ba:15:d2:66:be:d8:8d:
37:79:27:52:4e:4e:78:ba:5d:0b:23:a6:07:f7:f5:ed:e8:b5:
7f:5c:c1:f4:ef:0b:05:ca:0e:23:91:08:61:7f:12:db:c6:6e:
2a:59:47:64:3a:5c:be:e1:89:a7:17:a6:08:cd:a9:23:7a:a2:
87:9b:2f:6e:25:6d:0c:9c:84:3b:ac:2c:fa:d0:07:fa:7a:17:
d7:65:f2:37:f5:af:15:0f:d8:59:f0:d4:d2:3c:6c:d3:f8:66:
ad:bd:19:2a:95:d4:16:6d:49:90:b0:bf:28:41:1d:78:20:6f:
2c:79:05:cb:f3:c9:5d:3e:64:6e:5e:8c:f3:4a:47:67:49:66:
de:9d:d5:49:d0:d5:12:15:1f:e9:d1:b3:6d:81:ca:37:86:d1:
d0:b6:21:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:26 2025 by rpki-client