Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/uh0s7nQF6Ch_13wcoEBB1CrHctE.roa
File: uh0s7nQF6Ch_13wcoEBB1CrHctE.roa (raw, json)
Hash identifier: ALTdvaEI8Z2+A2eOLrrx34dYp9qQTeI0QMDzvRKkOhI=
Subject key identifier: BA:1D:2C:EE:74:05:E8:28:7F:D7:7C:1C:A0:40:41:D4:2A:C7:72:D1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 019423D6FA1ED7D19DEA6FDF0511D66AD35C
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/uh0s7nQF6Ch_13wcoEBB1CrHctE.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15389
IP address blocks: 81.18.224.0/20 maxlen: 20
88.85.32.0/19 maxlen: 19
178.19.192.0/20 maxlen: 20
185.74.208.0/22 maxlen: 22
193.34.104.0/22 maxlen: 22
193.34.105.0/24 maxlen: 24
198.137.136.0/22 maxlen: 22
212.55.32.0/19 maxlen: 19
217.172.80.0/20 maxlen: 20
2a02:e90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fa:1e:d7:d1:9d:ea:6f:df:05:11:d6:6a:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba1d2cee7405e8287fd77c1ca04041d42ac772d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:72:e5:b4:a7:53:5c:3b:09:d1:cd:b7:39:
3c:05:cd:2a:af:ab:ab:9f:07:76:76:60:12:80:a6:
49:55:9c:55:0a:86:44:76:04:f2:d8:b4:43:28:07:
2c:1d:f8:c2:76:0e:55:c7:6d:fb:ff:fe:0a:84:1c:
3e:3f:c1:b2:32:0e:33:b2:e0:b0:de:80:53:0a:ed:
a4:81:3a:06:24:02:e5:77:3b:c0:a0:c9:01:98:79:
ea:91:33:d1:0e:41:68:84:a4:81:22:01:bb:ca:76:
0a:d1:20:c4:46:16:8d:ce:e5:1a:0b:86:43:cf:8e:
2d:a8:8b:1e:6a:7e:15:28:63:78:9c:bd:5f:91:fa:
65:0b:ac:df:c6:b0:1b:3e:73:d7:e0:05:d1:61:59:
82:c2:af:ff:f6:a0:7c:e7:f8:86:e3:d1:8e:7c:ec:
f5:3e:f0:c6:55:20:6f:87:04:57:70:29:45:79:be:
3d:01:4b:ec:60:88:76:f4:ac:98:e6:72:2a:b3:d6:
b7:78:c3:d9:f0:6c:3a:aa:b9:b7:f0:33:0d:53:e2:
c4:2b:a5:5a:85:ee:76:c1:c7:03:ec:82:17:a0:ce:
52:0a:d9:be:8e:fb:f2:1b:79:62:20:93:f6:57:89:
3d:4f:fc:22:2c:3c:4c:ae:b8:bb:fe:7c:15:91:97:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1D:2C:EE:74:05:E8:28:7F:D7:7C:1C:A0:40:41:D4:2A:C7:72:D1
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/uh0s7nQF6Ch_13wcoEBB1CrHctE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.224.0/20
88.85.32.0/19
178.19.192.0/20
185.74.208.0/22
193.34.104.0/22
198.137.136.0/22
212.55.32.0/19
217.172.80.0/20
IPv6:
2a02:e90::/32
Signature Algorithm: sha256WithRSAEncryption
5a:59:32:72:e6:78:c0:53:3b:23:b2:96:20:c6:fe:ac:19:a8:
5c:76:26:c9:d7:4f:bd:f0:1b:5c:d1:e1:9a:2e:d7:ae:87:1f:
26:ac:cb:58:be:90:e9:2c:5c:06:88:6f:86:7e:d6:56:c4:78:
78:fd:37:1f:07:02:82:ad:43:cc:ce:b2:5f:36:18:1e:ae:cc:
0f:6e:da:0e:34:0c:3c:13:dd:e2:5d:db:6a:78:53:01:e9:8b:
46:01:d3:3f:7b:a6:7a:61:e9:5a:2b:f0:f8:c1:71:d7:72:21:
3f:2a:87:67:36:77:3b:f1:fc:4c:6e:6e:bb:cc:6e:5c:25:62:
af:ed:20:d7:ca:b8:b4:d1:84:99:a6:b7:1b:20:f5:7f:f1:2b:
69:0b:70:4a:bd:cf:d4:4e:a5:a6:f9:2b:07:5a:63:ec:20:18:
c2:f1:c7:c2:0d:88:13:34:5d:96:cc:1f:52:cd:70:fa:5a:3b:
0f:98:4a:4e:15:2e:81:cc:fa:76:6c:eb:6c:7c:74:bf:5c:f8:
07:c3:f1:d2:0c:17:1e:93:67:cc:33:3c:ea:ff:35:97:6f:d5:
29:ab:73:a8:dd:05:0e:50:c4:6d:1e:5b:c8:ef:d5:4b:d7:5b:
6c:44:68:3a:7d:b0:b9:1a:38:9c:94:c2:25:fc:0f:fb:5f:bf:
07:0b:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:02 2025 by rpki-client