Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/uBAndVEu4g2uOttKjyLkMFr3ADc.roa
File: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (raw, json)
Hash identifier: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=
Subject key identifier: B8:10:27:75:51:2E:E2:0D:AE:3A:DB:4A:8F:22:E4:30:5A:F7:00:37
Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial: 01942067F93287DA4F93DF78656994A6EA01
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/uBAndVEu4g2uOttKjyLkMFr3ADc.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199639
IP address blocks: 176.124.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f9:32:87:da:4f:93:df:78:65:69:94:a6:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8102775512ee20dae3adb4a8f22e4305af70037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:d3:22:80:3a:ac:44:7e:0c:d0:97:6f:c2:
71:2e:9c:49:fb:34:36:43:36:22:c2:07:95:2a:59:
a5:4a:6a:d6:a1:26:40:f9:ed:3c:ae:c7:54:e1:12:
da:82:70:44:10:1b:39:c1:99:8a:b2:f1:98:c9:50:
10:b9:83:6b:8c:bb:5b:0e:29:a9:b2:a9:8e:0e:71:
d4:84:15:16:32:77:33:c0:bc:21:55:cf:23:28:94:
46:19:a6:83:c7:9a:66:b6:10:87:40:81:aa:7f:06:
b4:71:cd:8c:d9:80:c7:0c:d5:56:bf:15:76:b8:e8:
92:17:a9:4c:92:d6:71:88:a2:2c:49:6d:29:06:7b:
30:13:e9:d8:2d:07:16:ce:cb:b0:f3:2a:be:2d:a3:
e1:01:9a:c7:5d:df:c4:fa:44:9a:5e:68:95:6f:2e:
c2:6f:b0:df:16:7d:18:01:7b:33:f0:ac:b6:5f:aa:
d8:d2:50:77:b7:b2:96:a7:bd:23:e9:ca:8b:df:36:
eb:4b:ba:b9:49:e9:0e:94:46:43:70:35:b3:7b:84:
0b:0d:72:65:56:eb:07:a9:92:f2:74:9d:97:f1:07:
ba:f0:df:8d:10:1d:11:31:08:b6:c0:75:c2:05:23:
d0:b8:f5:ac:ec:86:cd:8c:69:c5:59:7b:b7:45:ed:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:10:27:75:51:2E:E2:0D:AE:3A:DB:4A:8F:22:E4:30:5A:F7:00:37
X509v3 Authority Key Identifier:
keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/uBAndVEu4g2uOttKjyLkMFr3ADc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
52:83:05:7b:f5:97:59:64:d3:7c:af:17:2e:1f:e1:1a:c2:29:
e9:31:c4:61:1f:9b:2a:16:de:46:d5:c7:84:24:a3:3d:9a:e7:
e0:e7:82:3d:69:85:1b:fa:34:d3:5c:b4:d4:8e:1b:4d:e3:6b:
af:c4:02:68:28:98:fc:c4:f5:b5:95:b2:2b:2f:c6:7e:d9:98:
68:b8:fc:50:24:67:82:28:7c:c2:e0:42:91:50:f5:ba:b7:10:
9b:f1:4b:cc:c6:60:fa:b8:45:7e:83:9d:0e:1a:49:ad:c0:ec:
62:21:7e:3f:d5:21:b9:b2:47:07:80:76:d9:af:87:09:8f:e8:
04:d7:c0:73:b1:c0:c1:2d:50:1c:24:15:e3:b9:85:ab:c4:12:
21:11:c1:bd:17:23:9f:22:ab:5c:df:19:4e:99:13:27:51:94:
af:f3:92:74:97:e9:d6:87:fe:ca:0b:15:00:ba:08:c4:63:43:
fc:f6:ff:2c:b3:b4:a7:e6:80:34:39:dc:ed:30:ff:69:09:51:
cc:b2:64:33:8a:5d:5b:69:be:cd:1f:16:f5:10:9a:b7:0e:e1:
79:7e:3d:04:0d:3e:72:40:ce:4c:82:6a:db:f9:ee:72:e8:7b:
fb:86:13:23:b4:2a:7b:c0:3c:35:e2:02:e1:15:b3:51:e5:5a:
42:a4:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:24 2025 by rpki-client