Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa
File: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (raw, json)
Hash identifier: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=
Subject key identifier: BA:26:14:C9:35:96:13:83:D9:A6:4A:4A:37:92:C1:D8:42:A9:3E:ED
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B20A24EEED47ECFA7B29EE4474D52A
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201671
IP address blocks: 95.181.151.0/24 maxlen: 24
95.181.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0a:24:ee:ed:47:ec:fa:7b:29:ee:44:74:d5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba2614c935961383d9a64a4a3792c1d842a93eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:31:1d:27:10:a1:f0:ed:d2:fd:6d:c5:80:
3c:f9:19:20:c4:e4:79:b4:82:d1:70:24:b1:b2:ab:
b8:2f:62:70:68:db:da:2f:0a:7f:6f:1d:20:0d:42:
b4:c2:31:52:b2:33:6b:6f:f1:87:94:85:f9:8a:61:
41:60:a0:98:92:bb:f4:05:3f:96:a3:64:e0:bb:5f:
5b:64:ed:b4:9c:4b:23:69:12:4e:5f:14:fa:6e:79:
09:1a:c5:83:6a:e1:e0:5e:52:e5:30:05:6a:a4:41:
0c:a7:30:81:53:22:55:eb:eb:47:bb:74:f0:c1:a0:
f5:bd:24:90:83:10:b4:79:d7:6f:4a:ae:80:d2:fa:
47:18:fd:5b:78:5f:8d:61:5d:93:54:5c:22:aa:c4:
69:a1:c9:4e:d4:87:a2:12:f3:6d:1d:df:a5:87:fd:
b5:20:bc:47:d7:6d:53:d6:51:d7:c8:ad:f2:39:0f:
a0:d0:37:5a:57:2f:e4:58:9f:60:07:b1:b7:3e:9e:
1a:f2:45:00:aa:5a:6c:d3:a8:fe:72:52:31:d0:25:
0e:07:ce:51:e6:09:dc:3c:08:ca:45:d3:a4:39:24:
3c:96:bf:5e:71:4d:18:b7:52:cb:87:40:14:1f:6a:
72:5c:67:3f:39:95:79:f3:eb:37:c6:be:56:a9:e3:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:26:14:C9:35:96:13:83:D9:A6:4A:4A:37:92:C1:D8:42:A9:3E:ED
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.151.0/24
95.181.161.0/24
Signature Algorithm: sha256WithRSAEncryption
12:de:cc:8e:6d:9b:b9:7d:5f:f9:79:9a:ac:c9:38:f7:e1:e7:
0a:3c:d7:81:6a:57:17:41:05:f5:61:99:e4:cf:d0:32:59:0e:
07:cb:a0:2f:43:77:60:51:fe:6f:10:c9:2e:59:52:a3:fc:db:
2a:dc:7a:ae:fd:09:ef:34:b1:92:6a:8f:55:74:5f:ee:a0:2d:
ef:b7:6e:6a:8c:eb:03:aa:36:c9:19:2d:26:b6:5c:85:dd:d3:
22:fb:d3:31:7f:3b:e0:74:42:04:7a:2d:43:83:1f:21:1d:a8:
37:98:c4:38:88:6c:d3:70:73:02:81:f9:88:bf:ae:50:8c:07:
5c:71:0e:42:69:63:a3:2e:f0:1b:f0:f4:6c:d0:72:53:df:7c:
8d:8d:e5:b9:9e:e2:9a:1b:dc:d2:c5:d3:7d:fc:51:81:c0:23:
0c:53:39:06:1c:67:63:19:73:ad:11:ca:ed:4b:5d:cc:fe:0c:
20:84:d5:2e:35:75:b4:b9:c4:04:81:90:ea:d7:b5:00:6d:b2:
0b:82:c8:1d:f3:06:8d:60:ba:ef:de:ea:b5:8b:cf:7b:9f:08:
6a:59:0f:db:90:e3:17:52:99:5e:61:29:18:41:41:62:bd:bd:
16:c3:08:d9:99:29:02:e1:52:c2:1d:19:7e:21:d7:5c:f0:e8:
89:a4:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:42 2025 by rpki-client