Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nUDWIUL27t19_z9LtkAeyOF2CZE.roa
File: nUDWIUL27t19_z9LtkAeyOF2CZE.roa (raw, json)
Hash identifier: AuV6oMrXMZhz5TxIlKDfOs1JdPVuHutsuj3cAbrQgM0=
Subject key identifier: 9D:40:D6:21:42:F6:EE:DD:7D:FF:3F:4B:B6:40:1E:C8:E1:76:09:91
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521E0A4823895A6D126090E7519AB45
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nUDWIUL27t19_z9LtkAeyOF2CZE.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.132.0/24 maxlen: 24
2a0e:97c0:b33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e0:a4:82:38:95:a6:d1:26:09:0e:75:19:ab:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d40d62142f6eedd7dff3f4bb6401ec8e1760991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:75:3c:dc:83:c1:f0:e9:65:11:da:d7:1f:
fd:90:33:fc:54:cd:8c:c1:00:e9:07:a7:09:9e:1d:
7d:70:7b:c0:51:49:7a:4a:a8:6b:3f:b0:57:2c:8f:
f1:77:fe:af:18:1d:82:66:cb:cb:56:55:17:90:00:
8b:07:9f:59:eb:bb:ff:a5:dc:5c:c0:36:07:62:07:
1a:f2:7f:d7:03:ed:a9:5c:bd:25:4e:c6:e6:0c:00:
c6:47:7b:ff:d5:43:f6:a4:a1:2e:b4:c7:45:a6:50:
95:83:e3:9a:e6:93:86:54:b6:79:40:82:a9:b1:59:
ce:31:7c:7c:4c:76:f1:a7:fd:df:bd:0e:87:32:fc:
b0:d4:35:cd:a1:98:c0:f7:1a:10:d1:18:85:55:13:
21:ad:b1:82:8f:57:89:a7:55:e6:b1:e7:18:8d:da:
fc:77:f5:11:1d:9c:77:45:2f:15:19:bd:bb:ba:d1:
b9:5a:e5:10:63:3d:5b:37:46:0a:c1:1a:1b:a0:3b:
5a:17:d4:db:88:fd:5c:32:1a:21:04:f1:bb:f3:5c:
e8:88:dd:63:bb:02:5d:29:3f:7a:74:a6:94:b7:5c:
29:bb:dd:b7:d2:bd:32:25:8f:40:1c:da:8f:74:58:
af:ec:cb:17:13:f1:5c:5b:bf:8b:b0:3a:80:f5:ec:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:40:D6:21:42:F6:EE:DD:7D:FF:3F:4B:B6:40:1E:C8:E1:76:09:91
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nUDWIUL27t19_z9LtkAeyOF2CZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.132.0/24
IPv6:
2a0e:97c0:b33::/48
Signature Algorithm: sha256WithRSAEncryption
78:06:25:fc:11:32:97:5f:0a:9b:96:d1:d1:8e:d2:05:fc:4b:
ad:dc:ab:e1:e6:42:85:50:b7:5a:0d:6d:50:24:c5:f3:78:f4:
bf:a6:da:b9:31:54:67:37:56:d5:14:7c:7f:6c:7c:56:eb:9f:
5f:7a:3f:2d:7e:c4:d4:a2:39:3f:15:81:5a:81:3f:ee:17:b7:
69:84:db:3a:8d:5b:97:39:f4:60:3c:5b:06:85:ac:09:b4:19:
b7:35:32:3c:c3:f8:73:a3:b2:9b:28:50:63:eb:f1:ac:12:c0:
12:51:d7:a4:5d:50:79:7a:d0:74:c7:ba:22:7d:ab:e4:0c:86:
b3:a5:4a:91:8b:39:36:79:2a:83:79:85:0f:76:17:46:68:4a:
41:98:99:e9:72:f9:07:8e:6e:a3:45:d5:1b:77:be:38:1b:a6:
99:50:bc:e9:f7:b1:d5:e2:43:c6:ff:96:62:70:81:58:80:6d:
77:c0:e7:26:d2:8b:8c:c6:6b:ea:aa:fd:39:53:fc:fc:9e:ed:
28:5f:7c:c5:71:4c:f0:df:46:e6:d7:4f:d4:2a:b9:6a:2a:5c:
fc:86:09:83:bb:fe:53:1d:b7:53:dc:73:bf:19:cb:0b:92:9c:
b6:46:7e:78:4d:98:f8:d7:6a:1e:45:9e:01:3f:ce:48:12:75:
ff:65:91:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:21 2025 by rpki-client