Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa
File: UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa (raw, json)
Hash identifier: FNzQh/BeexAfdXsFTyP2FKgRjYQQ55iXr7qpb2vEEQQ=
Subject key identifier: 51:B3:E1:BF:F2:C0:54:0D:2B:C0:A8:26:1E:B2:DC:A0:6E:0E:C2:A8
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0194236A3880C4D1182C13D33022E9D2FACE
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21107
IP address blocks: 62.101.144.0/21 maxlen: 21
81.93.92.0/24 maxlen: 24
89.111.225.0/24 maxlen: 24
94.250.37.0/24 maxlen: 24
94.250.38.0/24 maxlen: 24
94.250.40.0/22 maxlen: 22
94.250.44.0/22 maxlen: 22
94.250.48.0/21 maxlen: 24
94.250.56.0/22 maxlen: 24
94.250.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:38:80:c4:d1:18:2c:13:d3:30:22:e9:d2:fa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51b3e1bff2c0540d2bc0a8261eb2dca06e0ec2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5b:ff:2c:b9:e5:93:05:6a:57:e9:d0:d6:64:
ef:07:ca:53:de:17:76:69:22:18:3b:88:2a:c7:dc:
35:48:1e:86:08:40:83:bd:24:34:6d:ee:59:30:c5:
e8:65:63:2e:87:cf:88:fe:b5:14:be:18:b1:61:ee:
83:9b:47:32:d1:4c:e6:f4:00:6d:d3:05:4b:3a:c0:
2a:28:0c:66:f7:01:33:4d:a6:ed:d7:e8:f9:05:57:
7f:8a:db:be:53:9a:f1:1f:a6:e0:a4:9a:9e:9e:c1:
a8:1a:3e:1c:29:36:65:14:6a:05:64:1a:02:c1:29:
db:a9:c7:e8:3e:c0:d4:43:0a:e0:b3:6d:4e:32:55:
3e:f2:9a:91:07:1e:46:06:55:e8:2d:5e:a3:db:c9:
a8:65:7a:bb:2b:f8:10:94:9e:bd:8d:90:5c:b8:13:
54:2e:cd:75:0b:21:02:93:36:36:01:d3:36:7a:69:
a6:6e:a2:67:58:78:78:2c:4c:4d:a5:65:65:b5:fb:
2a:77:b5:ac:24:a9:b9:32:ff:4b:8a:42:cf:22:50:
cc:fb:e5:d9:04:f0:f9:3b:70:36:8b:80:6c:2f:c4:
9f:1c:52:10:e7:13:d4:2e:38:4f:71:38:81:6d:5a:
de:7f:1b:a9:70:d7:51:8b:60:ff:b7:c6:c7:b1:8e:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B3:E1:BF:F2:C0:54:0D:2B:C0:A8:26:1E:B2:DC:A0:6E:0E:C2:A8
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.144.0/21
81.93.92.0/24
89.111.225.0/24
94.250.37.0-94.250.38.255
94.250.40.0-94.250.59.255
94.250.88.0/21
Signature Algorithm: sha256WithRSAEncryption
60:74:13:0f:0a:5c:57:f9:3a:bc:2f:96:c8:ad:e6:3a:23:1e:
b4:57:e7:0a:65:fa:6c:a4:8e:ce:42:ca:3b:01:da:7c:9e:66:
fb:2d:87:65:eb:c2:5d:48:35:c2:f0:13:45:d4:e6:c7:a3:89:
cc:4c:4e:43:9a:ed:4e:89:93:63:e1:1d:1e:36:59:d7:77:77:
46:ff:35:1a:a5:26:90:a6:fb:68:65:55:e4:7f:eb:a2:ba:17:
9a:a0:e8:c7:85:af:40:e0:6d:31:96:06:43:23:43:b3:74:cf:
9d:c8:f7:25:90:ed:14:96:8c:9c:3d:84:77:fb:f7:d7:ec:11:
e1:7c:51:56:76:3b:e1:1b:06:c4:af:ff:d3:57:4a:33:62:06:
20:1a:01:13:e6:bb:71:a0:e6:3c:8c:8d:5c:81:d2:c3:4e:26:
02:1e:c1:c6:cd:5a:d5:a7:83:ad:d7:66:62:d3:ef:82:61:ff:
53:e0:0e:86:03:7a:1b:e8:a7:69:6b:ad:43:73:ff:04:dc:97:
97:3e:0f:73:44:a1:8f:31:69:2e:bc:90:13:ae:6d:53:dc:86:
6a:f6:d8:d4:6d:37:4a:5c:cb:7c:c9:5f:4b:fb:a1:02:bc:c3:
1b:f8:3c:16:24:17:00:07:45:16:01:90:da:94:a9:3d:a5:7b:
07:ec:9c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:28:20 2025 by rpki-client