Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/3uSBRyWYKWFXh6fJBh05eSD-NPU.roa
File: 3uSBRyWYKWFXh6fJBh05eSD-NPU.roa (raw, json)
Hash identifier: Dmiovbs0P8NPsrWA6ocpp2+fAbq0ynsSfysA/ZSoY4Q=
Subject key identifier: DE:E4:81:47:25:98:29:61:57:87:A7:C9:06:1D:39:79:20:FE:34:F5
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019476902804FA10CA90831ECEA71F1E0C94
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/3uSBRyWYKWFXh6fJBh05eSD-NPU.roa
Signing time: Fri 17 Jan 2025 23:19:06 +0000
ROA not before: Fri 17 Jan 2025 23:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47526
IP address blocks: 185.55.80.0/24 maxlen: 24
2a13:ccc0::/29 maxlen: 29
2a13:ccc0::/32 maxlen: 48
2a13:ccc1::/32 maxlen: 32
2a13:ccc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:76:90:28:04:fa:10:ca:90:83:1e:ce:a7:1f:1e:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Jan 17 23:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dee48147259829615787a7c9061d397920fe34f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:98:dc:52:8b:64:71:32:76:ee:a0:3c:ed:
20:80:22:3f:db:2a:d4:07:a9:32:09:6b:de:d7:2e:
1c:07:64:13:be:00:fb:b3:b3:0b:64:e3:9c:09:44:
b7:a9:0a:fd:1b:2d:1c:87:31:5e:6f:fa:bc:c9:ab:
f2:0d:c3:86:2c:c6:11:bf:ec:14:f6:8d:3a:c8:8b:
3c:d1:6b:f2:a4:9a:26:e0:be:0d:18:e5:1d:ec:b0:
99:6c:3a:57:59:54:10:b0:87:18:24:4e:6c:d6:21:
1e:a4:dd:f4:86:ac:fe:ed:de:cb:2f:69:ea:b4:88:
83:cd:01:44:bc:58:f0:9b:0c:e7:d4:89:94:49:59:
e2:85:15:df:27:16:a4:86:d2:da:c3:c4:74:a6:2c:
8c:c1:6d:cd:ac:1c:f2:79:81:15:c6:48:5c:3d:1c:
a7:2d:06:51:bb:a2:c1:8e:0e:9e:d0:fe:76:24:74:
fc:40:28:6c:03:0f:2b:5c:69:0d:5e:9c:a3:33:a3:
b6:c4:93:42:19:bb:44:1a:31:9b:bc:ab:b2:32:c4:
46:f5:7e:ab:e2:a3:b8:f5:9e:41:11:e0:64:88:b8:
67:cd:53:a9:10:77:6b:6c:08:c1:55:21:d5:89:d2:
f7:ce:99:92:e4:6e:2d:62:bc:65:ae:d1:25:76:18:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E4:81:47:25:98:29:61:57:87:A7:C9:06:1D:39:79:20:FE:34:F5
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/3uSBRyWYKWFXh6fJBh05eSD-NPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.80.0/24
IPv6:
2a13:ccc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:e3:7b:a9:7f:aa:13:cb:56:90:b5:04:01:c6:6d:6d:58:d2:
14:9d:c9:5f:93:58:7f:51:d9:76:ec:97:e7:ce:a4:f1:77:61:
ec:9e:db:10:a1:e3:04:65:d9:67:21:c9:18:73:36:e7:5a:c0:
92:d5:4d:50:e7:ce:0b:04:2e:a7:3a:3a:a9:28:0d:c3:99:0e:
34:40:44:ac:88:8e:3a:3b:8d:52:58:85:18:c6:cb:38:bd:b8:
4d:61:04:39:36:c8:1c:93:28:e1:f7:43:3b:54:05:d3:38:50:
00:d6:8f:e6:72:a1:46:0a:b9:25:b4:28:87:6d:38:22:9e:10:
9e:28:07:67:01:8f:4c:bb:ff:1f:48:b5:ff:cd:51:4d:73:a8:
a4:a2:5c:75:ef:24:b7:5c:c0:b7:51:5b:fa:32:a4:3f:bc:0f:
75:0f:13:e6:c9:71:1b:6e:a2:c6:66:06:a4:d2:5b:f1:ba:f0:
c3:32:71:96:5d:1f:3e:e3:59:17:08:5f:01:a3:f8:d0:da:d8:
ea:a8:df:8d:9e:1b:11:69:82:b8:34:62:0d:a9:7b:91:82:01:
06:4d:fc:fc:85:35:7b:80:0f:58:3f:96:e2:0c:74:24:d8:95:
b8:11:05:ef:6a:f3:85:b0:ee:ac:39:a8:f3:17:2b:95:f2:6c:
9c:40:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:26:39 2025 by rpki-client