Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/ujiBo0ZMn8HZHk6XiAtUjj27oBw.roa
File: ujiBo0ZMn8HZHk6XiAtUjj27oBw.roa (raw, json)
Hash identifier: 6pwZz0N+RWGCnPxCzoJegCbH7w0PemUKcz6iq2EQKR4=
Subject key identifier: BA:38:81:A3:46:4C:9F:C1:D9:1E:4E:97:88:0B:54:8E:3D:BB:A0:1C
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 01941F8CA0810A776B18A65E35501C67D0B6
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/ujiBo0ZMn8HZHk6XiAtUjj27oBw.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.104.169.0/24 maxlen: 24
195.200.230.0/23 maxlen: 23
2001:67c:b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a0:81:0a:77:6b:18:a6:5e:35:50:1c:67:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba3881a3464c9fc1d91e4e97880b548e3dbba01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:b0:50:5e:ee:41:ab:1b:3d:3f:ed:0b:9a:
5a:dc:98:ab:bb:0f:e3:de:cc:4d:fc:b6:a9:a3:a9:
f1:ca:41:ad:29:3f:a8:e5:40:c9:82:60:42:4d:3c:
4e:38:83:49:9e:cc:c2:c1:85:32:45:6c:6a:81:60:
28:2f:9f:c1:0e:c5:e3:a4:50:33:f6:f3:eb:c0:80:
48:d4:4d:40:8e:27:b0:52:55:b6:8f:c2:2c:de:cd:
a0:05:07:d0:ad:ee:53:8d:29:f8:b4:db:aa:e5:25:
e4:b6:5a:d1:48:f8:9e:1e:db:25:05:0c:87:af:6a:
fa:9e:63:d8:84:35:f2:29:97:98:b4:67:48:82:44:
49:66:77:5c:e1:6c:37:09:3a:95:0b:06:a5:ef:41:
0f:4a:3f:4f:5f:9c:4a:32:6e:01:22:aa:60:53:05:
20:52:dd:00:41:dc:0c:f6:67:0e:ee:07:6b:4b:6d:
03:12:09:50:43:4d:fd:cf:30:b7:ff:ec:82:42:5a:
88:d1:72:e4:37:e7:cd:55:8d:da:80:cb:5a:71:14:
ed:c5:92:e5:50:d9:b1:95:fb:87:9a:b3:88:7e:4b:
3b:2e:d2:dc:cc:d7:47:bb:6a:ea:64:d2:de:5e:d2:
87:fa:73:2a:45:45:f7:d7:7a:43:a2:02:30:f2:0b:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:81:A3:46:4C:9F:C1:D9:1E:4E:97:88:0B:54:8E:3D:BB:A0:1C
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/ujiBo0ZMn8HZHk6XiAtUjj27oBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.169.0/24
195.200.230.0/23
IPv6:
2001:67c:b4::/48
Signature Algorithm: sha256WithRSAEncryption
74:e3:b9:e4:bc:e4:c7:69:49:f6:87:75:b4:b5:76:e7:25:6f:
e3:fb:1e:04:fe:d2:3b:62:b6:f5:12:2c:0b:39:af:16:26:bf:
76:d1:2b:3f:0b:9f:d1:e4:62:c1:a4:87:35:cb:72:4c:74:f5:
fc:3e:95:10:18:63:94:ab:03:bc:14:1e:0d:99:4f:49:43:88:
e7:79:95:f8:25:74:97:9b:d8:9c:86:17:bf:3c:62:cf:06:50:
da:62:bc:1c:48:25:38:5f:c0:53:7d:0d:fc:ca:14:1b:c9:8d:
44:fb:46:a5:60:3e:ac:ba:0e:11:10:d4:77:2d:af:de:ae:fa:
27:9e:37:0f:0c:76:ae:6e:60:4f:66:e0:ac:15:ed:58:7e:c1:
22:6d:5e:ee:eb:b4:09:f9:7b:a2:93:f3:56:75:c9:7a:7f:c8:
36:dc:5f:a4:49:24:a8:5c:23:b3:6a:ce:2b:3e:fd:be:00:ea:
2a:17:f0:48:f1:7b:a7:2b:de:2c:af:62:34:19:6c:b8:d8:f5:
3a:76:b7:20:9c:8f:68:6a:b3:70:0c:6b:b8:d1:43:79:62:05:
24:f4:39:e1:e4:8f:48:68:92:7e:86:ad:0a:7c:8e:a8:6c:81:
d7:66:cf:8c:ea:7d:4c:64:a5:7a:86:ba:4a:3a:eb:b2:04:86:
3f:c5:d4:ff
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQfjKCBCndrGKZeNVAcZ9C2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjhmOGZiZWE0OWJhZjU5ZmNlYzIyZTQ4YTlmZTIxNTdk
ODY0ODMwHhcNMjUwMTAxMDE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTM4ODFhMzQ2NGM5ZmMxZDkxZTRlOTc4ODBiNTQ4ZTNkYmJhMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRuwUF7uQasbPT/tC5pa3Jiruw/j
3sxN/Lapo6nxykGtKT+o5UDJgmBCTTxOOINJnszCwYUyRWxqgWAoL5/BDsXjpFAz
9vPrwIBI1E1AjiewUlW2j8Is3s2gBQfQre5TjSn4tNuq5SXktlrRSPieHtslBQyH
r2r6nmPYhDXyKZeYtGdIgkRJZndc4Ww3CTqVCwal70EPSj9PX5xKMm4BIqpgUwUg
Ut0AQdwM9mcO7gdrS20DEglQQ039zzC3/+yCQlqI0XLkN+fNVY3agMtacRTtxZLl
UNmxlfuHmrOIfks7LtLczNdHu2rqZNLeXtKH+nMqRUX313pDogIw8guOMwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLo4gaNGTJ/B2R5Ol4gLVI49u6AcMB8GA1UdIwQY
MBaAFBq4+PvqSbr1n87CLkip/iFX2GSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JqNC0tcEp1dldmenNJdVNLbi1JVmZZWklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lY2MxMDItYWQ3ZS00MTAxLWE3Mjct
NTgwMThhMDMzMzBhLzEvdWppQm8wWk1uOEhaSGs2WGlBdFVqajI3b0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lY2MxMDItYWQ3ZS00MTAxLWE3MjctNTgwMThhMDMzMzBh
LzEvR3JqNC0tcEp1dldmenNJdVNLbi1JVmZZWklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwWipAwQB
w8jmMA8EAgACMAkDBwAgAQZ8ALQwDQYJKoZIhvcNAQELBQADggEBAHTjueS85Mdp
SfaHdbS1duclb+P7HgT+0jtitvUSLAs5rxYmv3bRKz8Ln9HkYsGkhzXLckx09fw+
lRAYY5SrA7wUHg2ZT0lDiOd5lfgldJeb2JyGF788Ys8GUNpivBxIJThfwFN9DfzK
FBvJjUT7RqVgPqy6DhEQ1Hctr96u+ieeNw8Mdq5uYE9m4KwV7Vh+wSJtXu7rtAn5
e6KT81Z1yXp/yDbcX6RJJKhcI7Nqzis+/b4A6ioX8Ejxe6cr3iyvYjQZbLjY9Tp2
tyCcj2hqs3AMa7jRQ3liBST0OeHkj0hokn6GrQp8jqhsgddmz4zqfUxkpXqGuko6
67IEhj/F1P8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:36 2025 by rpki-client