Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/uSldu0-A3d7ktHLOGE3dm-cK6VA.roa
File: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (raw, json)
Hash identifier: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=
Subject key identifier: B9:29:5D:BB:4F:80:DD:DE:E4:B4:72:CE:18:4D:DD:9B:E7:0A:E9:50
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194FEA43774872C6824419523F2ABE9D219
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/uSldu0-A3d7ktHLOGE3dm-cK6VA.roa
Signing time: Thu 13 Feb 2025 09:29:22 +0000
ROA not before: Thu 13 Feb 2025 09:29:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 217.177.73.0/24 maxlen: 24
217.180.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:a4:37:74:87:2c:68:24:41:95:23:f2:ab:e9:d2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 13 09:29:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9295dbb4f80dddee4b472ce184ddd9be70ae950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:0c:b5:10:61:eb:7c:0c:e6:15:48:81:ab:
2c:46:6a:78:b2:8f:9e:14:41:e0:d6:43:c1:6b:33:
ba:56:41:e4:c1:da:02:1b:8f:a6:4f:83:fe:f7:d3:
74:28:0d:4b:f2:d5:4b:b1:8f:51:d1:f0:75:aa:4a:
d8:27:ed:fe:1d:bb:9b:68:ce:92:37:77:37:c9:3b:
bf:7f:bf:e8:2c:29:38:91:95:20:ca:7f:98:73:23:
ab:13:3b:13:ad:49:c2:58:00:59:f8:f2:87:bd:1f:
b6:a4:9b:c5:ad:7c:f8:74:09:a3:81:f0:dd:89:c1:
e1:04:3f:78:cc:43:0e:f7:08:9f:70:18:50:f3:6c:
4e:92:32:06:1b:75:8f:d7:fd:03:77:d5:88:25:54:
f7:a2:90:9e:1c:87:ae:e2:40:94:02:3a:e8:11:a6:
62:af:a3:73:fd:9a:d9:d5:6c:1a:3d:ac:9b:c6:f8:
8a:5c:26:a2:2f:d5:4a:54:5f:2e:5f:d8:fb:03:e2:
7b:75:a7:63:56:6c:9c:97:12:8f:d3:7c:db:32:a0:
24:14:53:8a:98:18:80:b7:f0:2f:cd:b2:d0:2f:75:
8c:13:d5:cb:60:63:7d:06:48:ad:7a:a9:a5:4d:61:
e0:10:c6:c7:1a:76:29:32:44:9c:88:43:8b:0f:d1:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:5D:BB:4F:80:DD:DE:E4:B4:72:CE:18:4D:DD:9B:E7:0A:E9:50
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/uSldu0-A3d7ktHLOGE3dm-cK6VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.73.0/24
217.180.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f4:f3:1a:a7:f5:33:7d:1f:02:9f:fd:2c:55:8c:06:28:59:
b9:b4:03:a7:09:1a:fc:0d:57:a9:85:db:08:e3:4d:55:c6:fe:
cf:21:fc:91:c5:d9:74:d0:86:90:e3:e2:1a:1e:58:8e:8e:48:
53:02:dd:d6:b2:6b:00:ff:98:78:f8:bc:1f:aa:a7:48:99:43:
91:62:c6:68:e7:b1:8d:b0:18:16:f7:b8:88:83:9e:16:6f:a2:
f6:ce:4a:86:d6:cb:be:af:35:8c:fd:df:cf:d3:b0:17:5f:50:
a8:7f:61:78:77:6d:6f:44:99:f0:44:c1:a8:c3:58:9a:58:48:
a4:7c:31:a9:6e:33:e9:de:89:de:33:6a:82:3e:2d:42:3f:b8:
3c:b5:bf:ac:59:91:a1:16:b3:12:f9:67:d3:da:d2:4a:8b:0d:
78:26:00:b8:e7:96:3d:63:16:56:c6:b1:dc:a2:72:9d:22:10:
fd:53:b9:90:b4:57:30:3a:61:8b:74:da:f0:11:0b:15:f5:44:
2c:44:f6:ec:3c:20:c8:f4:b8:85:e1:1c:b9:e5:97:02:ed:2b:
f7:ce:1c:8a:06:5c:27:42:51:cd:c2:15:0e:b9:40:88:3c:3c:
03:2a:4c:b4:00:65:8a:7f:1b:a9:e6:e8:f0:7c:72:65:29:48:
de:aa:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:49 2025 by rpki-client