Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/at-uzm8cDHh5AIa1LJdRT9W8Wh4.roa
File: at-uzm8cDHh5AIa1LJdRT9W8Wh4.roa (raw, json)
Hash identifier: H5l0QXxMa+Vawhghd7+XDKzjHO1k7D4xJ4O0j6Jb8BM=
Subject key identifier: 6A:DF:AE:CE:6F:1C:0C:78:79:00:86:B5:2C:97:51:4F:D5:BC:5A:1E
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5B3E428C4522454067F73643F4442
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/at-uzm8cDHh5AIa1LJdRT9W8Wh4.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 103.216.175.0/24 maxlen: 24
188.66.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b3:e4:28:c4:52:24:54:06:7f:73:64:3f:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6adfaece6f1c0c78790086b52c97514fd5bc5a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:7c:cd:9d:68:b2:fb:e3:f3:6e:a6:7c:63:
4b:cf:49:e3:ff:e3:1c:8b:f5:7b:2a:83:f9:e3:89:
1e:3b:c4:81:a7:8f:b2:2f:9e:a1:fc:e1:75:32:00:
a0:09:84:9b:33:84:96:64:e4:8d:d7:bd:c2:62:48:
e1:41:38:79:fd:a5:d5:7f:b6:cc:af:15:8c:94:12:
06:f9:af:44:13:63:dd:3e:cc:00:29:19:e0:c0:88:
e7:39:ac:f7:78:00:2f:50:73:50:fa:00:81:57:cc:
86:49:df:3a:8c:f7:3c:b7:d1:3a:04:70:d4:b8:0c:
04:2c:51:ea:73:94:93:61:7a:98:18:54:e7:0a:52:
5f:6d:72:ee:85:9d:ec:b6:6a:d3:6d:d0:7b:56:7d:
23:77:f1:3d:4e:e4:75:20:4f:d4:90:00:90:a9:72:
7c:10:e7:02:8f:ff:f1:81:ec:8a:3b:a1:7d:7c:9a:
ae:b3:2e:15:6e:1c:53:14:54:3c:7d:1e:34:bd:8b:
ab:a5:25:4f:69:a5:ac:3f:9d:50:46:09:60:d7:f2:
c4:2f:46:75:53:90:7b:42:4e:90:c3:c0:6b:a3:7f:
ce:e1:28:25:7c:b5:77:7d:9a:4d:8c:30:1f:23:12:
11:9b:d1:54:24:a4:d1:60:c9:b9:6c:28:49:d5:8f:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:AE:CE:6F:1C:0C:78:79:00:86:B5:2C:97:51:4F:D5:BC:5A:1E
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/at-uzm8cDHh5AIa1LJdRT9W8Wh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.175.0/24
188.66.24.0/24
Signature Algorithm: sha256WithRSAEncryption
82:56:50:b5:b8:99:65:e7:8f:f1:ac:6e:49:ce:8b:6f:35:87:
9e:d3:b6:56:f3:34:ad:1f:3e:82:1b:36:75:e9:8e:5c:fc:ab:
d6:4d:84:58:c4:38:d1:59:9e:e4:a7:14:0b:54:3c:22:80:b1:
c5:9e:88:5f:b0:c8:3f:a9:dc:d4:1f:94:11:57:1b:1d:bc:7f:
6c:30:d6:cc:e0:89:29:29:cf:18:53:9a:fd:72:ad:17:7f:5e:
17:2c:2f:40:2e:15:da:0a:4b:44:0c:89:55:b4:db:d9:75:8b:
c1:dc:fd:45:31:15:08:6b:09:16:4d:61:a1:25:3a:6d:7f:c2:
43:43:64:bb:7b:11:a0:1a:43:be:59:5c:b7:0d:45:ea:b0:5b:
a9:16:85:84:c0:2b:33:64:f4:df:b4:f6:ce:07:80:de:4c:86:
e6:1f:0a:99:67:85:2e:a2:93:07:6c:0a:49:d1:68:82:64:33:
90:f0:92:4d:a1:7e:b8:5f:c6:5e:e5:23:84:3c:34:e6:ef:5c:
cd:74:dc:c7:70:b8:1a:62:61:4d:f0:c5:bf:a0:8c:a7:62:1b:
8d:44:f8:d4:84:3c:4f:04:cb:bf:fa:c8:8b:e4:39:8a:f4:6c:
09:ac:10:2e:73:41:eb:c9:9b:4c:02:83:bf:5e:29:d2:b2:d0:
ee:ab:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:22 2025 by rpki-client