Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/u3aPvQHUdRieoRVF28WOZt9mLQo.roa
File: u3aPvQHUdRieoRVF28WOZt9mLQo.roa (raw, json)
Hash identifier: PDordO8/8+sph0bFvNWnUtFV/6l3XdBo7SdIkRY7SSY=
Subject key identifier: BB:76:8F:BD:01:D4:75:18:9E:A1:15:45:DB:C5:8E:66:DF:66:2D:0A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE9AB11DEE344948CFB677AF23960
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/u3aPvQHUdRieoRVF28WOZt9mLQo.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200289
IP address blocks: 85.31.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e9:ab:11:de:e3:44:94:8c:fb:67:7a:f2:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb768fbd01d475189ea11545dbc58e66df662d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:a4:2d:6d:39:72:29:ed:7a:cb:2e:07:d1:
8f:ee:62:9d:d1:90:2d:cd:6c:e4:1c:11:09:64:68:
94:d3:95:39:f3:11:4e:3a:f1:31:a8:62:83:5b:a0:
b7:3a:f4:89:ca:55:34:a0:11:c0:d5:36:70:86:f5:
5d:02:66:a1:b5:b6:70:58:0f:29:9b:cc:6e:74:42:
c8:7a:46:09:64:05:90:21:f2:a3:4b:d9:a4:11:08:
f5:81:be:7f:22:fe:d5:6f:bf:09:fe:fc:6c:8b:e5:
83:6d:33:90:d8:4b:4d:65:54:b4:da:fc:7d:7a:6e:
f5:01:8d:ec:b6:6b:9c:ac:55:42:f3:51:f7:2e:ac:
73:dd:8f:bf:b2:20:8f:52:83:b2:ef:03:2f:70:04:
f8:ea:16:2a:97:7b:96:ab:a3:6c:7b:96:88:79:0e:
c4:3a:c8:07:d5:0b:dd:a8:85:18:b3:2b:97:97:76:
09:10:e5:86:f0:7e:fe:91:2b:9f:bc:42:46:58:b4:
33:0b:25:dc:bf:f5:ce:e6:d1:ef:73:64:30:f3:4e:
2a:51:87:b4:6c:46:99:8c:45:3d:2f:9b:3a:ba:e2:
38:0a:2c:2a:d6:be:5c:d5:25:b6:d3:c6:94:2a:94:
82:78:04:e7:a8:8d:ea:a5:f6:b0:62:43:99:a3:67:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:8F:BD:01:D4:75:18:9E:A1:15:45:DB:C5:8E:66:DF:66:2D:0A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/u3aPvQHUdRieoRVF28WOZt9mLQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.245.0/24
Signature Algorithm: sha256WithRSAEncryption
19:86:22:87:e8:a2:03:7b:62:2d:3b:44:71:d5:70:11:2d:22:
0d:66:5e:5e:2c:56:e5:f6:9a:d9:0d:9f:cf:87:50:63:5c:6e:
e0:d0:32:b1:67:b0:fa:b3:22:46:ad:2a:59:8e:20:f7:48:a7:
84:01:68:a4:6b:6c:37:d6:35:9d:57:f2:35:27:c6:5c:26:ec:
d8:3a:d4:dc:26:bf:7f:5e:65:3f:6b:97:3f:ea:11:a1:f5:3a:
02:c4:79:c3:a8:5a:be:f8:59:81:f9:51:8b:c3:8b:1e:89:d4:
9e:5b:cd:00:19:d1:4e:d0:94:a7:72:46:13:29:de:d3:96:af:
81:86:b6:b9:27:8c:c6:a9:b7:83:b9:25:65:f5:15:2f:02:e8:
ce:99:82:82:ac:68:b8:00:8c:d3:00:8e:80:1f:fd:7e:af:f3:
9f:e5:75:3b:25:52:14:8e:99:9c:23:e7:55:bf:34:80:4e:27:
fa:93:d5:e0:7e:ce:5a:ca:2a:1d:7a:98:fd:ef:46:8a:9d:7c:
ea:00:dc:4b:cf:26:3f:68:c8:d9:d6:74:8a:65:09:60:50:2a:
2f:60:8a:76:93:2b:1f:8c:9a:30:ba:e9:e1:d8:53:64:3a:9c:
55:91:e8:f4:33:31:28:68:bc:a4:01:3b:b1:b7:e3:d0:35:aa:
ed:83:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:09 2025 by rpki-client