Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa
File: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (raw, json)
Hash identifier: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=
Subject key identifier: 52:8C:87:DA:38:30:DD:38:D1:98:11:97:72:82:1B:8E:41:E9:5D:89
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019425FDA9B63548CFDFA1D4FAFAD030D80A
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21458
IP address blocks: 193.30.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a9:b6:35:48:cf:df:a1:d4:fa:fa:d0:30:d8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=528c87da3830dd38d198119772821b8e41e95d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:13:e8:67:d8:18:de:83:3c:fd:52:ae:63:
fd:e4:55:17:03:47:f0:5d:7b:08:f4:c1:65:60:9b:
e7:c8:43:97:63:8a:6b:ec:3d:a6:08:96:b1:77:34:
60:f7:2f:7b:55:89:af:4c:ad:b4:96:7b:56:3c:63:
0c:75:21:53:c0:36:49:8e:db:c7:c8:d4:ee:a0:56:
5f:54:63:46:1d:9e:de:1c:bf:64:3e:62:3d:11:90:
64:df:7c:bf:13:1a:ce:67:1b:59:97:31:2e:74:b0:
20:dc:3d:6c:20:8a:07:dd:4b:d4:a4:aa:46:97:f3:
44:d0:43:18:68:42:01:a6:22:53:4d:ed:f7:c7:a8:
b9:7c:0e:3d:35:13:bf:b5:4a:7c:c8:ed:ea:73:d6:
69:4c:4a:40:d4:10:b4:ec:80:fc:39:9c:6c:08:f9:
49:f4:ad:a0:15:df:04:5d:8f:8f:3c:71:36:be:03:
ff:67:1a:80:d2:2b:ac:7e:a9:fa:a8:f5:68:a2:88:
50:e4:98:ef:35:c6:ca:c6:29:ab:1b:28:cd:1e:bd:
11:62:46:00:20:75:36:ee:b2:87:99:a7:fb:69:0d:
9c:dc:fd:d1:71:d6:e3:89:4f:a2:68:e0:fd:ff:b7:
44:42:44:1c:10:01:b7:ee:b9:02:5f:f2:f7:fe:1b:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8C:87:DA:38:30:DD:38:D1:98:11:97:72:82:1B:8E:41:E9:5D:89
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3a:f1:f8:32:27:d8:48:85:3c:3d:95:2d:0a:0d:3b:31:ba:
c1:c8:88:fd:3c:30:67:29:a2:70:a2:ed:d7:9c:8d:bd:fc:f3:
35:0d:e2:8c:f9:1b:57:e8:0d:09:f0:5f:17:e4:30:01:4e:00:
89:65:70:ca:81:93:f8:55:59:f4:30:cb:13:9f:6e:90:cc:f6:
a4:f3:93:1e:3c:97:50:2f:24:7e:e6:23:34:c4:4d:61:cf:cd:
d0:6c:15:d1:5e:1b:88:0c:2d:6b:1c:66:28:4f:d5:bf:26:84:
c6:ce:4b:01:eb:7e:97:d1:7a:43:e5:a4:4c:b0:31:c3:bf:cb:
c8:1b:a5:d7:5f:f4:68:a6:37:c2:c4:df:5f:c2:53:72:22:8d:
14:e8:16:16:3b:02:0c:b7:e0:2f:21:3e:98:38:65:31:d4:c2:
e6:7e:9f:d6:a0:64:ee:64:18:63:28:46:fd:76:3c:d3:b6:79:
4b:87:8b:47:87:b8:77:07:c9:09:cf:f0:b2:25:08:8b:09:7a:
b2:2c:c3:15:c7:45:b9:6e:2a:65:70:cd:7d:e9:ec:93:7b:af:
b6:0f:4f:3c:f5:f8:9b:05:bf:9d:f7:93:e4:c1:04:e1:53:ce:
62:42:9d:06:e4:bb:80:65:43:a0:33:77:02:cd:48:26:ad:76:
86:5d:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:33:58 2025 by rpki-client