Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa
File: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (raw, json)
Hash identifier: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=
Subject key identifier: 50:AD:E4:A7:B0:D5:4B:E7:E9:76:9F:CF:C8:A2:99:04:F0:04:91:A4
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 019421440E290A196184B856DBC65AB06A52
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211080
IP address blocks: 185.182.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0e:29:0a:19:61:84:b8:56:db:c6:5a:b0:6a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50ade4a7b0d54be7e9769fcfc8a29904f00491a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:8a:a4:f2:e4:13:b0:45:fa:f2:f8:ee:cc:
43:db:44:0d:be:04:b0:98:36:92:d6:ff:05:ee:56:
29:e4:f4:ab:11:3b:83:48:ae:fb:72:52:05:f8:fb:
36:38:30:d3:bf:fc:64:12:3a:f3:04:81:55:3a:81:
ae:d5:63:60:b7:92:b4:cb:ef:19:fb:89:95:8f:ac:
06:73:d6:ae:fa:da:69:0a:94:9d:0b:36:be:b2:63:
16:44:e4:77:94:95:10:f3:5c:c2:56:14:bd:eb:1d:
e5:03:39:7a:24:52:56:f5:2a:f8:58:cb:b3:40:fe:
27:91:73:1d:fb:97:26:f2:d0:9d:f0:3e:de:75:99:
ac:d9:91:3a:c1:b4:15:97:02:5e:b2:5f:cb:3b:eb:
6f:4b:8c:8a:1c:50:2b:fc:32:0e:f1:67:c2:b1:0c:
c3:f4:d1:57:10:c9:35:af:af:9f:05:3f:95:f5:b6:
e7:31:88:66:49:3c:a8:47:d6:47:14:dd:fd:4f:70:
e4:9f:0d:0c:4e:2e:a3:eb:ef:e4:d8:1a:ed:ae:ad:
5f:ce:64:7f:f3:91:13:0b:71:73:ad:3f:19:a5:3c:
13:85:11:3e:0b:37:45:15:5e:b3:86:25:88:a2:6f:
b4:3d:31:f7:a3:ba:52:74:e6:d8:2b:6f:27:00:ba:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AD:E4:A7:B0:D5:4B:E7:E9:76:9F:CF:C8:A2:99:04:F0:04:91:A4
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:57:5b:49:de:90:a0:2e:ad:f1:37:84:e3:fb:90:c5:a6:ab:
6e:44:6a:1d:8d:ed:4e:28:c8:95:e7:32:43:63:66:9d:e4:6d:
05:d0:ec:39:92:1d:5a:bc:9b:0e:83:6f:91:69:5d:21:0c:ae:
ce:d7:53:a1:a8:c3:fa:53:27:dd:68:70:91:f7:5f:6e:01:99:
5c:88:13:9e:20:b7:d3:c4:ca:22:8a:cb:44:d7:7b:66:e5:61:
08:0a:83:72:fd:9f:bd:dc:77:61:f1:b1:82:eb:99:15:bd:07:
7e:35:28:f1:a2:88:01:a6:ff:7f:11:f4:d8:38:d7:05:dd:b5:
25:ef:59:33:5f:6e:10:e3:90:da:ab:e5:04:92:64:b3:9c:a2:
7a:21:74:d5:a8:9d:a3:11:a0:a9:75:a7:c8:37:16:d6:cd:ba:
5f:25:7d:9e:c9:d6:a2:02:0b:30:23:bb:0a:b9:fb:53:72:da:
a2:e8:51:03:71:b1:6c:bd:9b:2b:25:e9:88:c9:55:23:73:23:
b0:67:f8:36:e8:a7:cc:c0:20:6c:a2:da:68:3a:f5:b4:f2:d7:
ad:e2:bc:3f:cf:45:04:5e:79:53:ff:92:49:4b:1a:c3:78:3d:
80:48:e1:e3:92:a4:42:b0:ec:50:a2:d0:7c:1b:89:c1:65:46:
6b:c6:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:33 2025 by rpki-client