Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/uNRCg8RCGt-29v-27BZf_7lsI44.roa
File: uNRCg8RCGt-29v-27BZf_7lsI44.roa (raw, json)
Hash identifier: m/0/iSBb82vllm7VEgSPbCCwHT8ih3iEdCYjt2pJKGw=
Subject key identifier: B8:D4:42:83:C4:42:1A:DF:B6:F6:FF:B6:EC:16:5F:FF:B9:6C:23:8E
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 01941FFA26597AF4F20C6E62BC96E562859A
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/uNRCg8RCGt-29v-27BZf_7lsI44.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 91.209.234.0/24 maxlen: 24
185.193.68.0/22 maxlen: 24
185.251.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:26:59:7a:f4:f2:0c:6e:62:bc:96:e5:62:85:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8d44283c4421adfb6f6ffb6ec165fffb96c238e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:ab:e6:72:2d:3a:f7:f0:c4:25:28:6a:e5:
21:97:b1:2c:10:ca:f4:bd:48:ae:b8:75:be:00:e3:
50:4c:e7:1a:8a:75:ac:9b:ac:14:3b:4c:97:60:9d:
57:99:c7:35:0b:c5:20:8d:d5:9f:96:c6:53:fd:8a:
95:81:24:ab:16:e6:ba:e4:89:a6:c6:3c:06:2c:7d:
57:f2:77:a8:ab:11:82:e9:f1:9a:fe:58:4f:fa:a5:
a1:c5:6d:66:e5:29:a3:9c:36:50:b7:a5:ed:e9:b4:
af:1c:f3:7f:fd:fd:c3:11:48:3b:28:48:2f:ab:6c:
31:74:57:1f:7a:12:1b:e1:da:01:f7:f3:94:2b:fc:
89:2f:67:b2:14:1a:6d:e7:ae:ac:66:d0:58:ae:6d:
32:30:87:ef:d9:37:93:37:c9:02:f8:ef:a0:e0:e5:
1a:a4:ec:e8:27:ae:62:83:8d:04:ad:c4:da:05:c9:
f3:1f:a0:76:21:8c:52:45:f0:3c:c4:6d:0c:8c:2a:
37:6f:fe:7b:b1:f6:4a:11:b3:c2:66:ba:03:ed:e2:
c2:e2:51:da:ec:a1:96:35:58:6e:4e:08:81:11:2f:
dc:c8:02:01:ca:8d:26:77:8c:75:a6:66:c5:79:27:
0e:fd:92:8b:b1:6a:7c:d0:27:11:52:c4:ca:d7:4b:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:42:83:C4:42:1A:DF:B6:F6:FF:B6:EC:16:5F:FF:B9:6C:23:8E
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/uNRCg8RCGt-29v-27BZf_7lsI44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.234.0/24
185.193.68.0/22
185.251.13.0/24
Signature Algorithm: sha256WithRSAEncryption
10:be:cb:1e:84:21:8a:81:bd:88:fb:c2:74:49:c5:20:e9:9d:
2c:06:a3:55:c9:e1:87:0c:f2:89:a9:1a:e3:56:3f:dd:a2:94:
22:0b:ff:97:be:79:26:32:26:dd:e9:95:29:b8:74:46:fe:5e:
0c:6a:35:00:9b:4c:28:92:81:76:61:f0:6e:76:de:16:94:9b:
44:4e:dc:5e:07:42:80:bc:f3:b0:6d:1e:b4:37:2a:16:c8:fb:
da:b7:ef:d4:ca:36:05:2e:a5:5b:c0:79:96:e3:f7:10:47:26:
ab:cd:b0:9f:50:8d:44:d2:e2:26:cc:8a:2b:00:e7:26:0e:ba:
75:5c:cb:b6:c0:91:86:3a:ec:40:5c:a5:4b:9f:55:b7:25:ec:
05:13:51:99:b8:a6:d4:dd:dd:4a:2b:6c:f8:ce:e2:dd:07:14:
f1:da:ae:c0:ab:c9:92:48:42:52:d1:57:3a:a6:4b:a1:b0:f1:
46:c0:c3:b9:94:cd:ee:f0:71:c9:82:be:cd:13:c6:0f:2b:db:
d6:7b:00:e7:dd:3b:84:7d:b4:d5:7d:fe:3a:c5:6c:84:cf:cd:
01:c9:0a:94:da:5b:4f:89:16:b7:10:df:e9:c6:9a:c1:e5:7e:
64:e0:e7:64:4d:16:07:13:e1:4e:f2:2f:4c:b6:48:d5:08:6f:
76:60:e7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:04:25 2025 by rpki-client