Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/uSrOots_DMPy38Ek0_9yV10Tzw8.roa
File: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (raw, json)
Hash identifier: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=
Subject key identifier: B9:2A:CE:A2:DB:3F:0C:C3:F2:DF:C1:24:D3:FF:72:57:5D:13:CF:0F
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 019420D62733C4C915E15825119FB2ECD111
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/uSrOots_DMPy38Ek0_9yV10Tzw8.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49720
IP address blocks: 91.236.224.0/24 maxlen: 24
91.236.225.0/24 maxlen: 24
91.236.226.0/24 maxlen: 24
91.236.227.0/24 maxlen: 24
185.168.128.0/22 maxlen: 22
185.168.128.0/24 maxlen: 24
185.168.129.0/24 maxlen: 24
185.168.130.0/23 maxlen: 23
185.250.20.0/22 maxlen: 22
185.250.20.0/24 maxlen: 24
185.250.21.0/24 maxlen: 24
185.250.22.0/24 maxlen: 24
185.250.23.0/24 maxlen: 24
193.107.136.0/24 maxlen: 24
193.107.138.0/24 maxlen: 24
195.182.194.0/24 maxlen: 24
195.182.195.0/24 maxlen: 24
2a0a:700::/32 maxlen: 32
2a0a:701::/32 maxlen: 32
2a0a:702::/32 maxlen: 32
2a0a:703::/32 maxlen: 32
2a0a:704::/32 maxlen: 32
2a0a:705::/32 maxlen: 32
2a0a:706::/32 maxlen: 32
2a0a:707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:27:33:c4:c9:15:e1:58:25:11:9f:b2:ec:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b92acea2db3f0cc3f2dfc124d3ff72575d13cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:9a:f9:71:7f:ad:46:83:10:e2:c0:2d:c0:
30:92:70:b8:cb:29:c8:1a:37:27:36:1b:9c:9b:c0:
e2:ec:67:32:a4:81:b7:8b:c3:3b:d2:c7:fa:fd:d4:
0b:54:ec:bd:8a:8a:fb:b1:7c:6b:f8:41:84:c7:90:
39:6f:1f:e3:e9:32:cc:b1:8a:95:4a:5a:e8:f9:0b:
4c:28:37:a6:3f:63:d8:c8:23:ed:c2:39:63:3b:cd:
82:57:2a:9c:8f:0e:3c:54:a4:26:74:e0:2a:af:9d:
13:c0:e5:6b:92:7c:6d:94:c8:98:6b:bb:05:a0:1b:
a9:43:56:3f:48:90:18:aa:cf:4e:a3:26:8e:13:77:
d6:8e:52:6c:32:6f:14:a6:02:2c:84:8c:a0:cf:3e:
93:a3:20:db:8f:b1:ce:d5:05:1b:44:a2:d3:00:67:
c7:2f:b4:aa:e4:c8:a0:d5:43:3e:a5:45:cf:a3:c0:
64:c3:93:ba:76:34:57:3a:da:5d:10:3d:9e:53:f4:
df:7e:0f:89:57:3e:47:c7:21:cf:78:d8:81:5f:72:
1c:5b:c4:9b:33:4f:62:4d:83:5a:17:97:26:cd:50:
8d:eb:23:62:ff:11:91:2e:5e:d7:e5:54:0e:e0:00:
00:79:e8:52:dd:41:7a:6c:c8:cf:fa:bc:c8:c0:fa:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:CE:A2:DB:3F:0C:C3:F2:DF:C1:24:D3:FF:72:57:5D:13:CF:0F
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/uSrOots_DMPy38Ek0_9yV10Tzw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.224.0/22
185.168.128.0/22
185.250.20.0/22
193.107.136.0/24
193.107.138.0/24
195.182.194.0/23
IPv6:
2a0a:700::/29
Signature Algorithm: sha256WithRSAEncryption
11:c1:08:6a:5d:5e:5d:0c:a2:45:55:60:b4:f5:bb:f6:29:8c:
ed:f5:1a:21:df:fe:cf:4d:74:9c:e8:ee:7a:bf:84:7c:ac:7c:
f4:02:4c:d3:f5:42:04:8a:5c:31:0e:f7:d7:c5:89:d3:d3:c4:
f4:91:fa:21:3a:b0:50:2e:f9:94:76:0b:b4:f7:27:f9:47:d7:
60:ec:a7:2e:7c:15:c7:40:9e:20:5c:be:68:ba:05:cc:5a:29:
8a:dc:3b:94:2b:81:42:09:10:b0:26:a1:d7:e5:7b:41:95:c6:
6d:c5:a0:52:56:e2:70:f6:3d:52:cc:d1:b9:71:8a:9f:a2:20:
3f:63:88:fb:bf:78:e4:bf:3d:62:af:69:3c:8c:cc:8f:31:f3:
0e:68:61:39:48:6c:e3:35:48:ba:5a:11:5e:fe:26:d6:7b:2a:
15:95:c0:d9:28:a2:88:8f:4e:9b:54:b9:92:41:07:b6:1d:ce:
48:d2:cc:a3:aa:1f:aa:79:6b:1f:07:05:da:d0:31:c2:85:16:
c7:92:e2:de:f9:b1:58:50:19:4a:a9:2d:7d:43:bd:2f:bf:c0:
c9:3b:f8:b9:25:71:8a:ea:1e:b5:58:f1:5d:a9:c3:1d:c7:98:
74:9f:da:6b:05:10:09:b9:5c:d5:83:13:4d:a4:0e:f9:d8:f1:
7f:3e:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:12:00 2025 by rpki-client