Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/uBM8xkKDMiWlyAC9isOmm2koO64.roa
File: uBM8xkKDMiWlyAC9isOmm2koO64.roa (raw, json)
Hash identifier: /CyKvmM2YRRvwwcm5j+Yf26y64D4OTHxMMF86WDXsTE=
Subject key identifier: B8:13:3C:C6:42:83:32:25:A5:C8:00:BD:8A:C3:A6:9B:69:28:3B:AE
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5ED60AEFBBE8B3230CD6ED26C7E6D
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/uBM8xkKDMiWlyAC9isOmm2koO64.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8562
IP address blocks: 188.172.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ed:60:ae:fb:be:8b:32:30:cd:6e:d2:6c:7e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8133cc642833225a5c800bd8ac3a69b69283bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:5d:a8:96:5f:54:34:c9:c2:88:67:70:c7:
36:6e:df:45:7b:71:cf:c7:06:70:b8:5d:40:c9:b4:
13:de:77:4f:2b:c9:35:99:a2:83:c8:b0:7b:33:5b:
15:09:d0:e6:d5:44:ff:7f:d0:09:30:65:e4:3f:41:
8a:75:c4:3e:d2:07:e0:7e:9c:79:47:d5:5a:f5:b9:
3b:09:65:95:7e:12:e4:9e:89:ed:6e:64:62:b5:6d:
0d:fa:01:e8:d3:1b:c8:54:84:f8:a5:62:b0:3c:32:
13:d1:1b:37:55:69:0a:3b:95:bb:6e:50:07:58:22:
1a:2d:3d:d0:97:6e:87:40:79:67:68:2c:2e:e7:28:
63:e4:cb:be:a1:92:18:6e:be:80:53:0f:c2:54:e4:
12:c6:ed:c7:6c:40:3d:85:1a:dd:a1:3d:04:ef:3b:
4d:36:77:91:dc:61:4a:ec:c2:3c:fe:c6:2e:69:38:
2b:f8:09:e0:1c:c4:eb:dc:6c:20:cc:fe:97:b9:fe:
f0:51:cd:75:60:84:b3:ea:93:17:ad:4f:51:a5:a8:
cf:57:8c:b3:80:7f:3b:48:e5:21:28:c1:2f:e4:3a:
67:d2:47:dc:70:ee:eb:61:50:40:ed:cb:35:20:0c:
7a:5d:df:65:9d:e2:35:41:f2:b2:ba:54:f9:b7:c0:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:3C:C6:42:83:32:25:A5:C8:00:BD:8A:C3:A6:9B:69:28:3B:AE
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/uBM8xkKDMiWlyAC9isOmm2koO64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.196.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ce:83:e3:e1:c2:2d:0a:7b:8d:83:52:6f:6e:71:98:b3:32:
c1:92:6b:bd:67:53:30:a3:e3:aa:c5:47:67:29:67:c9:9c:44:
8b:09:cd:10:f5:53:ce:1c:89:7e:c7:8a:5d:cc:f3:b6:ff:d9:
dd:42:36:26:de:37:c0:d8:0b:76:40:d4:ad:79:66:be:2c:d1:
3f:a4:64:83:4b:63:a2:34:cf:ce:e7:0a:73:6f:dc:13:75:26:
65:52:52:d0:b8:b4:66:6e:c8:2a:0d:a0:1b:a8:24:cf:16:97:
78:e3:dd:ef:3a:50:a4:a3:2f:40:be:c9:ad:a3:7d:3d:e6:8c:
fa:d4:4d:18:7e:72:7d:ae:c7:34:7a:83:1c:15:16:ec:78:bd:
85:2c:7d:39:7b:9e:44:14:cd:b3:8f:6d:f6:dd:d1:ed:dd:af:
7e:2d:cf:67:d2:3a:d1:25:55:e4:b4:bb:99:b5:28:7b:bc:fb:
37:f5:0f:b8:ca:2c:fd:fc:f2:9a:6d:01:d7:b3:f6:32:06:b7:
4c:88:56:22:99:f3:54:5c:83:58:2c:db:be:31:83:b0:dc:7a:
66:ef:ef:ac:4a:46:cb:ba:3b:c3:67:ee:de:1f:3c:e5:35:5d:
48:5e:61:60:5a:92:0a:6c:67:06:7e:34:86:a6:e8:3b:1b:11:
85:cb:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:51 2025 by rpki-client