Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa
File: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (raw, json)
Hash identifier: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=
Subject key identifier: 51:64:94:EC:1F:02:4D:02:7A:E1:62:F5:9B:76:3A:0F:D9:BE:E7:E2
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194274729992720F85AF919B4C9DEEA74D3
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa
Signing time: Thu 02 Jan 2025 13:49:22 +0000
ROA not before: Thu 02 Jan 2025 13:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 185.185.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:29:99:27:20:f8:5a:f9:19:b4:c9:de:ea:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=516494ec1f024d027ae162f59b763a0fd9bee7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:cc:6c:ab:82:dd:27:1c:07:5b:cf:ad:aa:
78:dc:03:30:31:cc:0f:1b:a6:a8:27:3d:be:bc:c3:
75:df:1e:f1:2b:3d:36:6c:fb:a2:b0:e4:c7:03:b7:
6d:9b:4b:40:55:37:80:33:a8:b1:a0:34:ae:c8:ce:
68:0e:cf:9b:24:97:d1:10:ab:ad:1f:cb:1f:c3:62:
3d:d6:32:e5:fb:73:76:78:3f:78:bc:2c:ca:6f:e8:
7e:7a:08:fe:39:8e:9c:8c:ab:a6:70:70:e9:e1:ca:
98:e7:af:f8:40:c5:98:1d:27:bf:a1:fc:62:ba:5f:
c1:a5:cd:71:67:ba:5e:20:4f:7f:5e:66:36:2b:1b:
f0:75:0c:34:59:ba:8d:99:1f:b8:04:9a:32:a8:83:
39:86:e0:bf:5e:45:08:db:d1:62:e5:88:a4:59:ed:
e1:cd:83:29:61:1d:fb:c8:3a:eb:51:50:e7:10:01:
2d:f5:c9:9c:04:95:96:bd:90:63:3d:57:92:24:a9:
0f:19:23:1f:3f:df:a4:ed:c3:44:31:ae:80:89:8a:
3f:cb:52:ff:0f:8c:49:7e:e2:66:3e:8b:17:5e:db:
02:97:e4:c8:fc:46:70:0d:e6:48:5c:23:70:ae:04:
71:31:72:4f:4d:88:c3:05:b1:06:33:40:fb:6c:57:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:94:EC:1F:02:4D:02:7A:E1:62:F5:9B:76:3A:0F:D9:BE:E7:E2
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
37:79:85:9c:2f:02:87:77:8a:7e:bc:e9:1e:6d:c0:ae:7a:20:
9e:db:d6:1c:bd:80:7f:dd:89:d9:73:32:c5:13:b6:64:0e:92:
fe:4a:41:88:7e:9e:ce:0d:7a:20:7d:73:23:f8:2c:58:9b:b4:
ab:a2:53:78:9a:29:f4:5a:a9:8f:a8:fd:d4:52:0c:d2:a2:f3:
bb:fd:ac:c9:5a:79:f2:85:07:01:10:5a:b4:ba:4d:ca:de:9e:
f6:61:28:c8:47:65:08:dc:46:25:aa:9f:ad:23:37:0f:40:c7:
57:22:53:fd:88:68:3c:9c:95:bb:ed:82:b6:05:dd:cc:6a:7d:
0c:f0:0e:08:3d:35:8d:5f:a7:11:6f:9b:02:27:89:43:f9:a8:
5b:13:a0:52:3d:00:a2:b5:d3:4d:f8:e7:e9:1d:4f:5b:d1:1b:
29:91:1e:f8:66:30:ae:63:78:bd:25:c7:10:e5:c1:fa:48:04:
d2:a2:f1:e7:b8:71:aa:7c:73:a4:ff:af:4d:bb:ea:d2:e6:e8:
1c:be:d8:e7:ac:32:c9:33:37:4a:b8:c6:ed:07:52:dd:76:2e:
cd:2c:98:22:18:68:e5:7c:fd:0d:88:cc:ed:52:45:09:f4:7b:
68:08:04:81:3e:da:7c:30:36:c2:bd:e9:55:ef:16:a4:06:50:
88:c6:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:34 2025 by rpki-client