Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/UAmBaPfRxh1WkNPxD7uTu4XaIgU.roa
File: UAmBaPfRxh1WkNPxD7uTu4XaIgU.roa (raw, json)
Hash identifier: 1EAW6HIPjECH2TE4ZL4WUIb5JaVxWeaXeK/6ii8nmQQ=
Subject key identifier: 50:09:81:68:F7:D1:C6:1D:56:90:D3:F1:0F:BB:93:BB:85:DA:22:05
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019421440DEAE1302ED78B90ABC390F10A9F
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/UAmBaPfRxh1WkNPxD7uTu4XaIgU.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58152
IP address blocks: 185.187.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0d:ea:e1:30:2e:d7:8b:90:ab:c3:90:f1:0a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50098168f7d1c61d5690d3f10fbb93bb85da2205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:d7:47:66:dc:aa:79:c4:6e:d2:7f:e8:dd:
e1:d3:44:c8:2d:15:9c:be:24:b2:c9:04:77:36:44:
94:01:3e:a1:d8:ea:4b:d9:6f:68:6d:b6:ef:55:5d:
d0:9e:88:3c:3f:99:f1:32:1b:34:12:16:c9:46:36:
6a:7d:85:e0:3b:3a:e9:66:7c:78:3c:03:07:95:a5:
4b:1f:72:55:1a:e2:b4:82:ab:aa:0e:4c:c1:84:24:
a5:49:1f:a0:be:e6:9c:6d:1d:82:67:8d:45:be:a1:
f2:51:66:7a:e1:3b:eb:ec:a2:13:fb:ed:ea:ee:ce:
14:9a:b4:04:cb:b6:1e:c5:9f:95:59:75:3b:e3:ff:
e8:ca:5a:5f:66:2e:80:de:ff:1c:de:50:76:ba:a7:
05:97:78:a1:b4:14:5b:c2:ce:5b:fd:8b:ff:e3:76:
68:4a:9e:3b:bc:f3:a5:37:e8:c8:5c:49:e6:d7:e8:
b1:c9:fc:27:36:72:a7:38:08:2f:43:f2:52:66:82:
bc:a6:01:51:bb:79:be:ed:02:0b:e6:c4:08:c3:98:
52:f9:2f:2a:a5:d3:7c:51:b6:50:6a:e0:bc:13:dd:
68:e0:38:bf:92:06:14:bf:44:bf:77:2f:2e:64:2e:
b3:e2:7e:8a:be:f0:f1:73:86:5c:ef:35:09:46:3d:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:81:68:F7:D1:C6:1D:56:90:D3:F1:0F:BB:93:BB:85:DA:22:05
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/UAmBaPfRxh1WkNPxD7uTu4XaIgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ff:68:18:29:71:f4:24:5d:89:49:b9:a6:5e:97:10:88:6d:
a3:fb:9a:2c:1a:15:7f:0a:e8:01:31:49:16:78:6e:f9:2b:1e:
72:f5:9b:a0:c9:c4:c6:2d:e6:c1:af:2c:86:a6:d2:5a:1c:06:
91:78:f4:71:f6:20:e3:4f:c2:b1:0b:d6:f4:ca:d1:56:5a:1b:
43:f1:44:36:e9:e3:c4:41:e7:5e:ba:9b:18:d9:73:7f:2a:72:
a6:c2:bc:49:98:49:c9:e4:3e:83:2d:4a:31:0a:3c:12:9b:59:
de:77:2a:c7:15:b5:a9:e4:aa:8c:e0:b7:db:24:19:0d:74:e9:
3f:c0:6a:84:11:65:5f:ab:45:54:5a:02:64:b9:64:5e:3b:47:
5b:7e:42:2b:bc:f2:c5:79:4d:94:c9:6f:b5:26:e9:e3:06:ba:
0c:0f:27:cd:66:2f:2f:1f:f7:32:c7:57:5b:06:10:2a:00:23:
5d:13:6f:5a:7d:92:2f:12:f6:36:4d:04:e7:85:69:b7:6a:eb:
96:51:8c:52:f3:72:8c:d8:32:40:a8:f4:9e:55:44:68:52:50:
b3:96:0d:b4:42:64:02:f1:4d:56:9f:3b:8c:98:09:d2:e8:13:
19:87:b8:cd:8f:70:0b:35:8a:b0:20:4a:69:1e:ac:1b:82:1a:
81:d6:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:39:35 2025 by rpki-client