Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/u-dAmjX4oqcf2iXVI7lxfelsBMA.roa
File: u-dAmjX4oqcf2iXVI7lxfelsBMA.roa (raw, json)
Hash identifier: XLlmaFeeXeZeIUJOi3DmWDwWe9ndlrrcSMKKooeEWD4=
Subject key identifier: BB:E7:40:9A:35:F8:A2:A7:1F:DA:25:D5:23:B9:71:7D:E9:6C:04:C0
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 019427B643160D1C47873D35AAFF9085835B
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/u-dAmjX4oqcf2iXVI7lxfelsBMA.roa
Signing time: Thu 02 Jan 2025 15:50:43 +0000
ROA not before: Thu 02 Jan 2025 15:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60157
IP address blocks: 185.54.168.0/22 maxlen: 22
185.54.168.0/23 maxlen: 23
185.54.168.0/24 maxlen: 24
185.54.169.0/24 maxlen: 24
185.54.170.0/24 maxlen: 24
185.54.171.0/24 maxlen: 24
2a02:4560::/32 maxlen: 32
2a02:4560::/48 maxlen: 48
2a02:4560:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:43:16:0d:1c:47:87:3d:35:aa:ff:90:85:83:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Jan 2 15:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbe7409a35f8a2a71fda25d523b9717de96c04c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:4a:f0:70:d1:86:b8:2a:7d:48:c2:b1:be:
8f:cc:1e:45:79:f7:34:c8:37:da:aa:a3:23:96:0e:
a9:2b:8e:86:ec:35:49:a2:2f:07:20:6f:fa:e2:ba:
c7:05:cd:bd:a8:ce:72:ff:89:5f:5d:53:0d:3f:35:
ae:6e:46:bc:a3:6b:d3:be:84:68:af:1b:c6:46:b9:
7c:e0:87:3e:b2:61:6c:ec:42:90:a0:31:66:22:84:
98:47:50:a1:bc:2b:04:63:ba:77:17:ba:f9:42:d5:
0f:7f:15:11:27:68:10:2c:9c:4d:27:3c:0c:ff:cc:
f4:f6:32:a4:09:a5:20:27:ee:a0:cc:10:66:b2:53:
f3:21:6a:6e:66:fe:4b:74:bb:1b:8b:57:5a:1f:c8:
21:b1:08:f2:75:2c:ad:34:99:ec:c5:f1:84:d1:42:
41:8f:55:56:12:9e:2a:2c:b7:1a:c0:59:80:14:37:
3c:82:f4:77:e0:29:b3:47:be:12:23:df:6c:d5:0d:
aa:0b:14:0e:c8:2e:e9:c1:16:f5:97:8b:e6:84:cf:
0d:18:b6:60:8c:a6:3f:57:4a:b6:b9:b5:86:75:62:
ca:b2:a4:a9:11:df:f9:29:9f:e1:2c:52:74:5d:d5:
1f:b2:6a:a8:66:bb:e7:69:98:e3:b0:87:54:fe:a7:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:40:9A:35:F8:A2:A7:1F:DA:25:D5:23:B9:71:7D:E9:6C:04:C0
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/u-dAmjX4oqcf2iXVI7lxfelsBMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.168.0/22
IPv6:
2a02:4560::/32
Signature Algorithm: sha256WithRSAEncryption
d0:98:65:04:f9:9a:f1:ec:a5:d6:49:a5:31:41:0f:da:6d:03:
04:aa:70:2b:1c:b3:9b:f5:1e:47:d1:57:13:6c:33:17:c1:fd:
16:72:e0:66:68:ff:44:2f:3d:7e:b0:08:21:7b:58:14:be:09:
63:c6:14:14:72:ce:44:9f:d0:57:25:36:7e:71:91:cf:b0:7a:
5b:26:79:fe:70:9f:73:4d:85:c0:8f:9a:be:3a:2e:0f:ed:86:
ee:56:23:bc:9f:ea:ac:3b:5a:58:35:bf:f9:89:8f:4c:31:97:
24:63:8d:4a:c4:28:b9:74:43:62:33:36:e2:64:c6:15:45:1a:
96:49:c5:e7:31:bd:73:47:0f:2e:78:67:4e:26:f2:55:13:33:
86:e8:b3:01:c9:77:4b:b1:f6:16:89:0c:34:73:6f:00:63:23:
6b:a6:c2:b1:1f:ff:0e:72:0b:79:24:cd:a8:71:62:40:09:38:
7b:79:c3:27:27:76:41:6a:48:1d:8b:8a:b1:ca:0b:0d:87:e6:
56:a8:76:ac:59:09:7e:59:09:51:04:18:d9:df:0f:d7:5c:a0:
61:91:7c:46:30:e7:9b:c5:c4:db:13:f4:48:6c:1e:99:24:bd:
6e:9b:d9:d3:63:b3:32:9c:37:fc:69:bd:cc:4c:75:81:d6:8a:
60:c9:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:33 2025 by rpki-client