Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/uFe0wHxAH2UJDFtywnXN56bE3x8.roa
File: uFe0wHxAH2UJDFtywnXN56bE3x8.roa (raw, json)
Hash identifier: 9rxLZS+5H9kGmYpmtTMn6ZZUIBXYa1LvDlimXlk6PXU=
Subject key identifier: B8:57:B4:C0:7C:40:1F:65:09:0C:5B:72:C2:75:CD:E7:A6:C4:DF:1F
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 0194BBBA75C9302344793A18E7EC8AE03401
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/uFe0wHxAH2UJDFtywnXN56bE3x8.roa
Signing time: Fri 31 Jan 2025 09:39:06 +0000
ROA not before: Fri 31 Jan 2025 09:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215452
IP address blocks: 185.54.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ba:75:c9:30:23:44:79:3a:18:e7:ec:8a:e0:34:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Jan 31 09:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b857b4c07c401f65090c5b72c275cde7a6c4df1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:1f:f0:a7:e2:77:2e:ac:8c:aa:4a:21:5d:
25:d0:48:73:28:3c:9e:ba:1d:9f:95:bc:65:f2:32:
12:4c:cb:45:6f:73:08:94:55:e9:f1:e5:fc:e3:0e:
78:f9:60:35:46:3e:37:48:5b:b3:c4:b0:46:35:4d:
2c:d0:3c:49:d8:7f:83:ab:50:49:cd:94:87:3d:c8:
9d:99:8a:a7:10:80:34:56:ce:8b:6a:f4:47:22:92:
2a:31:9c:54:ae:37:af:cd:f2:e3:ed:f3:78:d3:cb:
1c:2f:63:4d:21:ea:e0:a6:dc:b2:a9:b9:f5:ea:52:
41:d3:af:ec:6a:03:63:9c:6e:14:29:02:af:ad:96:
83:45:5f:cd:d4:19:58:25:db:a0:ec:63:44:5e:fd:
60:e2:35:63:ac:31:37:d9:b7:86:80:85:50:a0:b9:
d0:65:8b:b8:6c:48:7e:67:60:08:ca:bd:11:0a:b3:
4a:f4:cb:76:4a:b0:ec:f9:2e:4d:f8:62:bf:b6:40:
29:88:e9:9d:bb:f6:fd:f1:a7:64:9c:09:14:84:cd:
e1:77:ab:2a:35:bc:b4:03:d7:3d:e9:88:23:97:2a:
27:0d:66:7a:52:67:27:7b:5b:4e:de:6b:28:cd:42:
64:cd:84:92:54:88:7e:61:64:86:8e:63:49:1f:3e:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:57:B4:C0:7C:40:1F:65:09:0C:5B:72:C2:75:CD:E7:A6:C4:DF:1F
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/uFe0wHxAH2UJDFtywnXN56bE3x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.103.0/24
Signature Algorithm: sha256WithRSAEncryption
09:40:f1:40:b6:36:7c:c2:db:eb:6d:01:6a:d7:d2:85:52:db:
28:10:68:84:e4:8c:87:f7:94:7f:87:40:56:91:ef:5b:64:76:
70:15:97:29:08:bb:1c:81:3c:db:02:1d:2e:db:c2:80:37:03:
12:80:98:1a:af:fb:39:31:3d:fd:d9:b7:29:45:93:d8:6a:9e:
f0:79:17:f8:95:bc:c6:d8:38:78:7a:49:54:bd:b7:38:f0:88:
e3:42:9f:6e:09:10:83:19:03:11:87:83:25:64:11:c6:21:1d:
f1:d1:17:ac:b0:1d:32:7c:e4:5b:69:4e:18:a5:68:06:9e:fe:
31:94:e0:01:a8:8e:10:4d:3f:ea:2c:ce:a0:8e:6d:56:af:a9:
15:3d:ea:7b:cd:e7:a4:72:98:a3:0c:16:07:72:9f:cb:e6:ef:
dc:57:2d:25:3c:63:c3:c8:6b:e7:58:3a:3d:37:58:55:f1:d5:
ce:75:b6:2f:34:da:b6:48:fd:e0:a4:f9:7b:80:83:a3:20:a9:
5d:5a:20:58:d0:74:51:f4:17:8a:15:c6:5d:7b:73:d8:7f:1c:
f6:2b:3a:a3:e8:6a:9a:8a:da:26:6b:8b:aa:6c:ac:58:e0:c6:
87:b2:f2:98:a5:06:e1:c9:26:78:80:e0:dc:e7:90:d2:8e:3c:
76:72:84:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:55:49 2025 by rpki-client