Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa
File: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (raw, json)
Hash identifier: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=
Subject key identifier: B9:72:54:37:4C:AA:CC:9D:D3:69:0C:CF:F5:C8:C0:B5:55:71:EE:1B
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 01941FFA14E229246DA65DE557FD67E9D7F7
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50629
IP address blocks: 31.209.80.0/20 maxlen: 21
37.72.144.0/21 maxlen: 22
46.19.88.0/21 maxlen: 22
185.55.116.0/22 maxlen: 23
185.76.188.0/22 maxlen: 23
185.146.228.0/22 maxlen: 23
2a00:c380::/32 maxlen: 33
2a02:2918::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:14:e2:29:24:6d:a6:5d:e5:57:fd:67:e9:d7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b97254374caacc9dd3690ccff5c8c0b55571ee1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:a7:c8:c1:21:6b:29:42:4e:df:89:8b:a1:
6d:f6:14:fc:2e:1f:1d:23:6c:f0:19:80:20:d9:ad:
1d:8e:18:71:d4:9b:c7:75:60:b9:5e:02:6e:ed:ce:
bb:ac:f4:cc:8a:42:cd:bd:f1:ab:52:46:d1:7e:0f:
75:af:da:0c:39:19:a6:53:24:9e:3d:26:5c:21:a0:
3f:d5:79:2a:93:de:b8:f7:e4:0c:71:99:53:2c:5a:
2c:02:87:49:cb:eb:a1:fe:40:4a:ed:94:69:76:34:
85:67:96:11:9e:ae:da:05:38:ba:e3:13:b1:66:cb:
03:f0:53:47:e0:95:61:cf:25:34:4d:0b:d6:9b:27:
5e:cb:6b:18:75:66:a8:6e:ef:ce:a3:28:26:6c:ce:
e2:22:7e:fc:13:b8:28:22:ce:62:bc:27:03:40:79:
e3:15:b9:91:1d:f6:6e:72:a8:c4:9e:e4:c5:0f:d6:
0e:9e:cb:b5:d4:c2:20:31:c2:c5:15:70:8a:27:3d:
26:86:f2:2d:21:e5:ca:26:66:e8:b2:f0:03:29:19:
ca:18:51:c5:96:07:1a:1e:15:ee:28:6f:b9:5d:4c:
18:3c:38:c1:40:7a:ad:44:a4:82:55:25:19:5a:47:
73:63:4c:1f:a4:fb:55:4c:2f:9e:1d:df:41:c6:1f:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:54:37:4C:AA:CC:9D:D3:69:0C:CF:F5:C8:C0:B5:55:71:EE:1B
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.80.0/20
37.72.144.0/21
46.19.88.0/21
185.55.116.0/22
185.76.188.0/22
185.146.228.0/22
IPv6:
2a00:c380::/32
2a02:2918::/32
Signature Algorithm: sha256WithRSAEncryption
33:a6:13:7f:2c:6c:78:76:3d:ff:8c:79:a2:9d:b8:09:d6:65:
c6:23:1e:54:3a:aa:d6:6e:60:df:94:dd:1b:97:ce:79:d7:fe:
5f:db:52:fd:22:07:99:91:1f:01:35:d8:51:91:90:a4:ac:8f:
e3:1f:9f:dc:4f:7e:1e:9f:20:cf:2e:80:eb:ee:c4:5b:64:f7:
1e:7c:39:5d:e5:47:b2:b4:a6:69:10:86:ed:40:cd:70:a2:2b:
fd:f8:38:bc:8a:0f:cc:12:9c:60:40:80:5e:57:35:f1:12:a6:
7f:e8:e9:93:16:05:aa:81:5d:2d:ea:89:48:91:b4:ab:c4:36:
ab:6f:b3:ef:3e:ad:ba:40:d9:a6:2a:16:79:f2:1f:13:81:2a:
37:ae:37:3e:a0:92:99:0b:43:41:07:48:df:81:aa:d0:a2:b9:
8e:3d:2e:b6:4f:c1:70:d6:af:c6:6a:f7:f6:35:90:23:e0:33:
88:e9:32:09:b6:6f:ee:4b:8e:1a:13:54:f1:50:12:e8:fc:3b:
c8:a3:9a:76:ea:2f:54:ec:8b:2c:f0:d8:1a:d1:8c:12:0c:0f:
25:8e:bd:6e:59:42:c3:f2:08:66:48:7f:8e:89:64:c2:b7:e6:
39:02:c3:24:ec:b5:d2:b7:4f:e5:9f:60:20:71:b4:02:b5:96:
af:3b:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:44 2025 by rpki-client