Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa
File: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (raw, json)
Hash identifier: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=
Subject key identifier: 51:87:70:50:CD:C3:7D:E1:E6:16:66:42:79:6B:4E:9F:7C:A8:34:6E
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 019428257D80D728892DBBA7DBBD9CFD0D1C
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa
Signing time: Thu 02 Jan 2025 17:52:13 +0000
ROA not before: Thu 02 Jan 2025 17:52:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3333
IP address blocks: 193.0.0.0/21 maxlen: 21
193.0.10.0/23 maxlen: 23
193.0.12.0/23 maxlen: 23
193.0.18.0/23 maxlen: 23
193.0.20.0/23 maxlen: 23
193.0.22.0/23 maxlen: 23
2001:67c:2e8::/48 maxlen: 48
2a13:27c0::/29 maxlen: 48
2a13:27c0:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:7d:80:d7:28:89:2d:bb:a7:db:bd:9c:fd:0d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 2 17:52:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51877050cdc37de1e6166642796b4e9f7ca8346e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:73:ca:29:a2:55:7a:a4:85:82:05:b7:bd:
1a:79:71:78:55:67:5f:d0:2e:20:8d:a8:50:de:b6:
ed:f5:38:3a:7c:42:05:9b:7e:1f:5f:f0:77:3c:ad:
2b:da:86:4b:c6:c4:10:b3:82:4d:c8:a1:3a:10:9b:
63:ee:f8:32:2f:c7:a9:87:e8:cf:1a:fd:89:64:52:
3e:dc:a7:bc:a2:7c:d5:08:ce:50:1c:8b:d3:2f:2f:
25:df:50:0d:89:4b:fe:46:90:b2:c6:80:d6:22:5d:
b7:8e:a2:8a:66:6d:9c:17:67:06:de:ec:9f:45:72:
25:3b:ce:fb:b0:be:26:96:ea:57:53:b2:cd:78:da:
ba:a0:3c:61:23:4a:01:1c:69:54:9d:e7:98:66:58:
f1:f4:83:34:47:b5:e4:68:22:6e:ca:b5:74:7a:40:
48:b5:b0:81:07:52:6a:76:3b:7a:cf:0d:39:16:a8:
f0:c8:1c:c4:ca:cd:eb:d1:31:fe:79:34:23:85:b3:
93:68:0d:a8:82:84:ef:e8:80:1d:f7:02:75:b5:00:
a8:d4:fa:46:0b:2b:ae:c2:3e:23:f0:72:b8:e8:8d:
85:04:f9:da:4a:e1:ed:8e:4d:5a:77:bb:59:b7:97:
78:11:d7:49:4d:66:56:a8:ac:f9:9a:d1:5f:9e:a2:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:70:50:CD:C3:7D:E1:E6:16:66:42:79:6B:4E:9F:7C:A8:34:6E
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.0.0/21
193.0.10.0-193.0.13.255
193.0.18.0-193.0.23.255
IPv6:
2001:67c:2e8::/48
2a13:27c0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:b0:9c:7a:77:17:a0:f2:3a:cc:50:e9:e7:23:c9:ce:ff:a2:
4f:10:ea:f9:d3:7b:82:73:ac:71:35:e9:c9:cc:3f:6c:0f:95:
94:95:5f:2c:c8:57:78:7a:91:84:4c:ba:1d:34:9a:ed:b5:b2:
b0:a1:4b:67:77:df:d4:6f:fe:d9:43:59:c4:32:fa:40:b6:1c:
a8:44:e5:0d:69:d3:90:5c:8c:4b:6c:13:b9:03:2e:67:c8:2a:
67:89:bd:0d:81:69:88:21:47:85:66:4d:07:2e:19:29:27:4e:
d3:27:dd:14:77:24:8e:97:9a:41:d1:9e:81:99:12:89:62:22:
ee:03:f1:65:d7:77:eb:b3:40:14:69:27:40:80:51:e2:21:f3:
e7:30:1d:df:29:8f:bb:94:e8:a0:e6:a4:8a:43:c7:79:e9:8c:
f0:d4:2f:13:a0:02:12:40:4c:0c:8f:5b:d2:0d:86:8d:8e:06:
cd:0c:d3:53:b7:29:98:32:c5:7a:d2:0d:ab:ce:4a:11:c4:35:
e6:20:fe:ca:28:3e:6b:7e:64:55:ba:97:53:32:6d:cb:2c:f8:
38:36:98:53:90:83:66:85:2b:d0:ea:f1:4b:55:54:29:aa:f1:
bb:e6:68:87:14:c9:5b:5d:48:7d:25:bd:0d:31:8b:9c:1a:4a:
0b:be:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:38:11 2025 by rpki-client