Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/USGB4EfibArvmHzd6YayMlE_4Ts.roa
File: USGB4EfibArvmHzd6YayMlE_4Ts.roa (raw, json)
Hash identifier: QP2OBD46ZcKAmd7iDiZKVRRwOA0LwH3cIZJcmun1SiE=
Subject key identifier: 51:21:81:E0:47:E2:6C:0A:EF:98:7C:DD:E9:86:B2:32:51:3F:E1:3B
Certificate issuer: /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial: 0194258FC35AC57C14CF7F3ED3156285F705
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/USGB4EfibArvmHzd6YayMlE_4Ts.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56410
IP address blocks: 193.120.22.0/24 maxlen: 24
193.120.40.0/23 maxlen: 23
193.120.55.0/24 maxlen: 24
193.120.164.0/23 maxlen: 23
194.125.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c3:5a:c5:7c:14:cf:7f:3e:d3:15:62:85:f7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=512181e047e26c0aef987cdde986b232513fe13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:9e:70:02:77:81:3a:38:4d:e4:bd:85:7b:
8f:fa:46:ce:2e:52:ce:28:40:16:3d:ed:d9:54:7b:
c1:a2:f1:fe:07:90:b1:4b:19:66:ff:30:46:ca:0f:
31:5a:00:35:8b:25:9c:33:c6:07:69:5f:1c:ad:46:
ea:52:81:89:12:43:98:34:f1:ed:38:e6:44:48:f4:
c2:63:80:a5:4d:fe:44:88:d7:13:ff:9f:56:b3:2b:
ac:2f:99:bf:6b:04:f2:f7:0b:21:da:8d:cf:b8:a9:
86:32:de:b8:5f:0e:1e:9f:84:69:9b:a4:c6:4e:00:
02:cc:9a:46:a4:de:57:02:72:6b:94:dc:ec:fd:58:
0f:f1:4d:90:e0:d9:3d:e2:47:b5:34:75:41:52:59:
31:b5:39:66:18:bc:96:53:4a:d8:59:48:fa:60:85:
a6:67:d5:c7:b8:5b:62:11:02:cc:8b:19:3b:8e:56:
7d:81:d7:70:1e:a4:ff:02:da:57:fd:11:1d:8e:f6:
c9:d8:a7:bc:c7:62:f3:dd:f7:23:5a:a4:0c:61:74:
61:77:c3:a0:1b:a0:88:00:cf:58:43:89:ca:19:92:
40:44:b7:c0:58:df:bd:c3:5a:da:29:7b:0f:e7:e5:
6a:c4:e0:85:a2:5c:a5:aa:05:b9:ac:d5:8f:6c:2f:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:21:81:E0:47:E2:6C:0A:EF:98:7C:DD:E9:86:B2:32:51:3F:E1:3B
X509v3 Authority Key Identifier:
keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/USGB4EfibArvmHzd6YayMlE_4Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.120.22.0/24
193.120.40.0/23
193.120.55.0/24
193.120.164.0/23
194.125.118.0/24
Signature Algorithm: sha256WithRSAEncryption
59:77:aa:ad:e3:a9:ff:71:68:e6:57:b0:e2:85:4d:c2:ab:cb:
36:d2:96:27:c1:17:0d:da:44:47:e9:2e:18:73:5f:74:c2:1d:
2f:78:a4:cf:f9:14:1c:f0:41:49:2a:fc:68:f0:a4:69:48:51:
1a:b0:2a:0f:14:6f:58:3d:8b:3d:8d:08:69:4c:c2:ee:79:98:
f8:de:58:32:70:06:7e:c0:46:ff:9c:9d:45:6b:d1:1c:f0:45:
80:4c:6a:7f:52:87:29:71:65:86:d6:b4:ea:16:6f:f9:8a:e7:
bd:6f:04:de:33:d2:fe:a1:72:ba:23:7e:5b:c3:cf:6d:c4:85:
50:31:fe:d5:17:61:e5:77:18:ee:df:7a:3b:09:e8:ec:bf:05:
f1:82:5f:e3:51:29:67:fe:44:0b:fb:a0:69:a7:ec:a2:a0:cf:
72:e6:cb:d5:a9:df:4f:ac:7b:b6:63:d8:86:fa:4f:77:1d:2c:
48:5c:44:f9:9f:74:b6:e4:05:e0:f4:e4:44:64:43:d3:1c:8b:
b7:13:0b:df:81:fd:82:a9:e2:ff:bd:d8:a4:bf:78:b7:57:b2:
98:30:c2:ef:87:6b:1f:3d:a3:53:72:39:42:89:49:56:74:ab:
81:51:e2:c3:1a:4e:1c:bc:1c:b5:ee:c8:d7:d2:ae:7c:a4:cc:
81:23:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:20:31 2025 by rpki-client