Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa
File: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (raw, json)
Hash identifier: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=
Subject key identifier: BB:73:B4:03:99:1B:4B:F0:4A:3E:EC:A0:43:96:C4:B8:2B:96:12:63
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 019425FDA9603B55D7CAAA6DFCA78A6A8F52
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60860
IP address blocks: 193.107.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a9:60:3b:55:d7:ca:aa:6d:fc:a7:8a:6a:8f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb73b403991b4bf04a3eeca04396c4b82b961263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:c1:72:f2:1e:c6:4d:7e:ba:2f:f5:93:ae:
7e:eb:2a:6f:ef:af:a7:fc:ce:04:b0:d2:1f:9e:e9:
10:f9:13:8c:2d:25:8f:88:4d:f2:c4:a9:fa:24:cd:
78:f9:67:9f:1b:94:ab:dc:de:e3:1b:21:5e:1e:c5:
3b:bd:56:92:76:c8:37:7b:52:6e:ba:92:c0:cf:ea:
23:bb:75:2d:11:47:35:87:39:88:c1:62:09:a9:b2:
af:89:1c:80:7e:36:17:89:3d:0f:33:b5:ef:2c:22:
c0:49:87:ac:2f:43:f1:31:1c:eb:c3:61:3b:d1:68:
0b:b1:34:14:5d:2a:ca:a3:01:f6:b4:fe:3c:7c:dc:
de:04:91:cc:39:3f:f3:5f:a3:d6:cb:f3:97:85:21:
6a:7e:fe:80:13:36:23:22:88:b3:37:8a:c0:36:01:
b5:2c:22:54:3a:ce:78:db:1a:3e:3a:7c:31:c7:6f:
63:ad:fd:e4:cc:d5:02:b3:78:7b:4a:de:98:07:1e:
fb:e7:5f:ce:82:2b:0c:e8:07:47:b7:ce:f2:5a:b7:
0f:51:d0:1e:e7:12:cc:75:ac:72:f2:db:f4:59:49:
2a:c5:f3:64:75:95:64:c5:f6:6f:45:4d:6e:86:e7:
c6:49:ff:87:50:3c:07:1f:cc:7c:8d:df:d9:b3:ef:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:B4:03:99:1B:4B:F0:4A:3E:EC:A0:43:96:C4:B8:2B:96:12:63
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.82.0/24
Signature Algorithm: sha256WithRSAEncryption
09:08:60:bf:22:4a:3a:eb:88:93:df:f5:9c:da:a2:30:49:36:
21:0f:ed:25:ef:8d:9f:f4:c6:27:8b:f0:fd:d3:ee:c0:ef:a3:
b8:c9:50:00:46:bc:85:4d:a9:34:71:71:e3:83:1e:e2:c2:c0:
1e:bc:b5:fd:63:c5:bb:c7:01:90:a4:18:de:eb:2e:88:2e:c2:
2b:e1:8b:cf:25:c7:2c:c0:22:8a:25:f9:c0:d7:90:f8:3b:f2:
bd:4e:0f:32:fd:fa:e2:15:f9:2b:3b:f5:6a:98:cc:a7:f1:70:
59:c3:dd:85:f7:73:4d:a7:c9:d1:eb:1d:72:8b:54:eb:58:12:
f5:26:2b:e2:5e:e2:6e:d6:4d:78:5c:5e:9d:e7:5e:a9:b0:b1:
e4:33:f8:56:26:63:ee:42:a7:83:cb:09:3f:0a:3a:fc:99:3f:
d7:38:76:d6:05:84:8a:66:8a:6b:f0:84:6a:0a:d9:80:8f:bf:
84:6e:2e:9e:fa:9b:a3:ca:66:c7:14:df:41:b2:e2:bd:7b:3b:
a5:82:60:79:c8:30:ef:57:a4:56:a9:58:8e:b5:00:c5:04:d8:
54:15:da:12:4c:d5:bc:95:f2:78:b2:ca:1c:fb:26:98:16:38:
c1:b1:81:4d:10:36:03:43:4c:ec:7f:0f:b8:16:c3:51:7f:ed:
10:93:c4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:06 2025 by rpki-client