Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Uu3u_BNgLYgUsowSJ5GUy0AQUYc.roa
File: Uu3u_BNgLYgUsowSJ5GUy0AQUYc.roa (raw, json)
Hash identifier: 7yfDCZ3siy97pkyHwogP3jhl+yHkmfCPVbF8pd1DtQ0=
Subject key identifier: 52:ED:EE:FC:13:60:2D:88:14:B2:8C:12:27:91:94:CB:40:10:51:87
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D986949553763602C369BCEAEE471B
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Uu3u_BNgLYgUsowSJ5GUy0AQUYc.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205232
IP address blocks: 2a03:5840:270::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:86:94:95:53:76:36:02:c3:69:bc:ea:ee:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52edeefc13602d8814b28c12279194cb40105187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:4c:7d:4b:ed:5e:62:65:02:13:48:a4:1a:
d8:cf:f4:46:c7:0e:15:97:5d:5c:68:76:2c:28:38:
06:0c:75:1d:64:af:92:8b:4a:f4:65:98:6e:37:a8:
c0:95:7d:d1:ca:eb:ce:7f:de:89:bc:5d:66:4f:31:
cc:25:da:3b:9d:ec:eb:bc:b6:27:06:53:08:31:c1:
b9:73:db:fa:0a:52:5c:3b:00:a4:47:54:d1:0e:86:
75:93:0d:7e:7c:00:79:13:3e:34:14:58:e5:bf:3c:
7a:ef:ec:99:20:35:38:f3:b3:04:ef:e3:dd:96:11:
c0:41:ea:1a:54:2c:a3:74:03:1d:ab:6b:ba:31:5c:
29:6d:33:39:53:66:12:0c:a4:7c:d8:46:62:bb:3f:
9f:30:81:01:b6:4b:b0:72:aa:2b:84:b8:9f:0b:c8:
06:04:ee:cd:5a:b8:8b:1e:33:52:71:77:00:9a:0d:
c3:55:46:aa:de:97:3f:43:a9:7f:d2:a5:62:c8:dc:
a7:8a:e2:61:d7:bf:6e:e9:28:ca:3c:7a:9b:05:e6:
31:a9:c3:61:ac:29:79:fa:3b:0c:14:c4:c6:c4:a4:
10:ad:f9:54:07:15:6b:30:f6:f6:bc:23:e0:96:9e:
ed:52:8f:9b:4b:8f:1a:9c:d7:90:41:9a:b5:d9:da:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:EE:FC:13:60:2D:88:14:B2:8C:12:27:91:94:CB:40:10:51:87
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Uu3u_BNgLYgUsowSJ5GUy0AQUYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:270::/44
Signature Algorithm: sha256WithRSAEncryption
56:33:c9:ce:76:2d:d4:42:ba:31:18:59:5a:ee:a9:c5:03:ca:
ef:6d:83:22:d2:de:c0:3f:8a:05:78:7f:0b:fd:04:14:29:8a:
90:82:71:b5:80:77:44:0a:a1:4d:73:07:c4:53:f8:4c:16:c3:
b0:80:5b:70:df:f7:d2:4d:59:4f:8f:b1:3e:56:56:53:7c:21:
60:2d:0c:45:0f:f6:9c:4f:3c:e8:e4:32:44:77:5b:a3:67:32:
6f:be:c7:a7:cd:66:a3:d1:8b:f2:cd:7e:4b:1a:50:9f:c3:8d:
bd:1a:3f:31:c3:37:58:43:e2:c5:22:cc:ab:6e:be:e3:60:8c:
af:10:60:d2:0b:97:eb:90:df:55:09:87:01:bb:36:bd:3a:ad:
26:97:b0:c5:75:84:05:d0:1b:85:d8:52:be:a6:23:19:25:0c:
b8:29:3e:6d:c0:79:ea:40:79:21:13:dc:08:e0:47:8d:2e:4e:
60:35:bb:91:02:a9:04:8b:72:91:99:59:ba:5e:a2:9b:fa:9b:
bf:39:6c:8c:26:26:0c:7b:c1:ae:b5:9f:a4:00:46:bd:07:28:
5d:da:f8:d7:d9:22:bc:a7:60:ed:c1:b3:9e:c4:28:34:ed:ef:
24:ca:93:76:37:cb:e3:3c:3a:db:7a:2e:ef:93:dc:91:05:f1:
b6:7d:f5:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2YaUlVN2NgLDabzq7kcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjUwMTAyMTE0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmVkZWVmYzEzNjAyZDg4MTRiMjhjMTIyNzkxOTRjYjQwMTA1MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbVMfUvtXmJlAhNIpBrYz/RGxw4V
l11caHYsKDgGDHUdZK+Si0r0ZZhuN6jAlX3RyuvOf96JvF1mTzHMJdo7nezrvLYn
BlMIMcG5c9v6ClJcOwCkR1TRDoZ1kw1+fAB5Ez40FFjlvzx67+yZIDU487ME7+Pd
lhHAQeoaVCyjdAMdq2u6MVwpbTM5U2YSDKR82EZiuz+fMIEBtkuwcqorhLifC8gG
BO7NWriLHjNScXcAmg3DVUaq3pc/Q6l/0qViyNyniuJh179u6SjKPHqbBeYxqcNh
rCl5+jsMFMTGxKQQrflUBxVrMPb2vCPglp7tUo+bS48anNeQQZq12do/kQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFLt7vwTYC2IFLKMEieRlMtAEFGHMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvVXUzdV9CTmdMWWdVc293U0o1R1V5MEFRVVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAJw
MA0GCSqGSIb3DQEBCwUAA4IBAQBWM8nOdi3UQroxGFla7qnFA8rvbYMi0t7AP4oF
eH8L/QQUKYqQgnG1gHdECqFNcwfEU/hMFsOwgFtw3/fSTVlPj7E+VlZTfCFgLQxF
D/acTzzo5DJEd1ujZzJvvsenzWaj0YvyzX5LGlCfw429Gj8xwzdYQ+LFIsyrbr7j
YIyvEGDSC5frkN9VCYcBuza9Oq0ml7DFdYQF0BuF2FK+piMZJQy4KT5twHnqQHkh
E9wI4EeNLk5gNbuRAqkEi3KRmVm6XqKb+pu/OWyMJiYMe8GutZ+kAEa9Byhd2vjX
2SK8p2DtwbOexCg07e8kypN2N8vjPDrbei7vk9yRBfG2ffWz
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:36:38 2025 by rpki-client