Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/uSJCC3kYWjg7i4fxLtygovLThwU.roa
File: uSJCC3kYWjg7i4fxLtygovLThwU.roa (raw, json)
Hash identifier: YIJsbHaRjQVvABrjQc39hlyffm/xi8unzp8VNRhOFjg=
Subject key identifier: B9:22:42:0B:79:18:5A:38:3B:8B:87:F1:2E:DC:A0:A2:F2:D3:87:05
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825C412224A3BFF914D29FF20C58EF9
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/uSJCC3kYWjg7i4fxLtygovLThwU.roa
Signing time: Thu 02 Jan 2025 17:52:31 +0000
ROA not before: Thu 02 Jan 2025 17:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33908
IP address blocks: 94.125.8.0/24 maxlen: 24
185.42.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:c4:12:22:4a:3b:ff:91:4d:29:ff:20:c5:8e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b922420b79185a383b8b87f12edca0a2f2d38705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:48:cd:7a:7c:e5:11:84:9a:2c:8f:9f:b9:
d5:a2:75:4b:8d:4f:da:47:2e:1b:01:cf:21:cf:c9:
84:e7:eb:be:2e:bb:cd:21:23:9e:35:2e:2c:7b:a8:
d7:13:6b:56:f7:b0:72:56:c9:a6:39:a5:b8:00:7e:
4e:60:e1:7a:c7:cc:e5:75:43:6d:92:06:99:bd:b6:
e9:e5:a5:6c:89:80:73:a2:53:a1:8d:6c:0e:38:16:
15:e5:9c:67:83:b3:91:b6:f1:4f:0c:5e:96:25:c4:
ef:31:ab:7f:c6:b4:4a:ed:97:ae:d3:82:9f:80:15:
74:b8:60:c4:fb:de:1f:0e:76:a8:97:f6:74:7e:6a:
1c:62:2b:14:63:55:c9:be:d3:7d:6d:81:44:8f:d4:
46:35:2a:6b:2d:da:a6:b4:73:22:41:2b:a7:67:aa:
bb:0b:ea:ca:44:a1:6b:69:0d:6e:bb:50:cb:57:4d:
5a:b6:3a:84:5e:8e:4f:60:d9:e3:11:6b:ad:37:a1:
b5:fd:32:0d:48:e1:9f:a3:e3:ef:b7:2e:00:1d:07:
37:40:75:c9:05:8b:7c:ed:66:4a:d9:37:c7:f3:d8:
79:6d:33:7a:f9:92:2a:7c:97:97:7e:66:2b:27:b2:
c1:d4:17:38:34:d2:5e:18:f1:ce:2f:2d:5d:9c:c8:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:42:0B:79:18:5A:38:3B:8B:87:F1:2E:DC:A0:A2:F2:D3:87:05
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/uSJCC3kYWjg7i4fxLtygovLThwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.8.0/24
185.42.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ab:3a:88:c0:e9:9e:bb:93:2a:f7:9c:d6:17:1c:68:0d:8f:
e8:7a:32:14:30:c7:a5:6c:fa:85:8f:65:6b:ae:06:fb:f4:5b:
a8:2b:d8:aa:14:8e:08:2f:33:e4:18:3b:3c:a4:8d:8f:e6:8e:
d4:16:15:ec:ee:2d:15:ae:1d:2d:d9:3f:91:94:4e:79:35:eb:
ce:22:46:b4:cb:5f:6f:aa:c9:c1:91:a3:6f:31:ee:d6:08:c2:
5d:7c:71:de:eb:28:44:7b:8d:fe:de:7d:75:20:68:d3:2e:ee:
2c:1f:10:85:ea:d8:8f:0b:e3:1a:c0:39:00:70:c1:08:cc:07:
8a:2b:39:f0:7a:f4:1f:b1:ea:34:fe:58:63:ec:73:77:85:f3:
15:bd:ca:23:1b:58:b4:12:37:40:91:c4:34:ad:da:ab:86:a1:
87:32:26:07:6e:ee:df:59:7c:25:5d:6f:e7:26:0a:c3:04:8a:
a0:23:4a:48:85:ab:a4:49:0d:7f:4c:0a:55:1f:6f:a1:08:e8:
9e:95:81:ce:7f:00:a8:49:5a:8d:31:97:c6:9a:48:6d:ba:23:
d9:c4:68:50:8d:12:01:1f:5b:47:1f:53:1c:d2:37:11:75:02:
4f:ec:af:c5:c8:06:c0:f3:aa:b7:18:9b:a2:7c:bc:76:06:ad:
fb:6e:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:28:12 2025 by rpki-client