Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uOQgB1NTH9KoHZHwg0UH-S8pML0.roa
File: uOQgB1NTH9KoHZHwg0UH-S8pML0.roa (raw, json)
Hash identifier: 9pLo2BWQy44Dy/pIwpbieax2lrfATXE3dKhXEy2WPMc=
Subject key identifier: B8:E4:20:07:53:53:1F:D2:A8:1D:91:F0:83:45:07:F9:2F:29:30:BD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019488841BFDB3B3E1BAAE35DC54016DB80E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uOQgB1NTH9KoHZHwg0UH-S8pML0.roa
Signing time: Tue 21 Jan 2025 10:59:06 +0000
ROA not before: Tue 21 Jan 2025 10:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 81.168.96.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.63.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:84:1b:fd:b3:b3:e1:ba:ae:35:dc:54:01:6d:b8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 21 10:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e4200753531fd2a81d91f0834507f92f2930bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:5c:10:ce:66:fc:09:a4:8e:05:bd:6c:0d:
78:fa:ad:61:b7:55:cc:d7:cf:67:1f:9c:71:a1:b8:
25:56:81:c6:7a:d1:27:aa:61:71:70:8a:e2:a5:51:
fb:82:d5:1d:ea:87:11:3b:0e:58:c8:77:7f:4c:a7:
bc:0c:9d:92:d7:2e:f4:36:a6:16:99:e6:ae:96:60:
36:e4:cc:96:ff:72:3d:aa:6c:fa:34:41:1a:12:f5:
85:79:4b:8d:c7:c4:62:f9:f4:ff:de:87:83:30:f9:
dc:cc:c3:fa:6f:49:9f:5c:cb:c5:78:e5:eb:57:4f:
24:cb:f2:96:bf:f5:10:a7:00:6d:ec:d9:49:17:1f:
c5:9a:ea:23:a4:38:04:ad:a5:16:fb:31:22:ea:0b:
b7:bb:cf:64:bf:90:f0:09:79:48:de:79:45:c8:7e:
3c:18:99:2b:cf:ec:02:5f:84:99:4f:fd:b7:d5:6f:
3e:92:52:20:06:bf:f0:c1:91:4d:ec:7a:4b:2f:7b:
ab:46:38:af:bf:c1:1c:85:5d:96:74:97:7e:c0:db:
28:fb:e9:93:a6:bf:ad:de:84:16:9f:53:25:34:dc:
ac:4f:63:c0:f4:bb:f8:30:22:a1:82:20:ab:57:c5:
6f:ec:65:02:57:52:cd:49:00:b9:4f:bd:81:d4:9c:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:20:07:53:53:1F:D2:A8:1D:91:F0:83:45:07:F9:2F:29:30:BD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uOQgB1NTH9KoHZHwg0UH-S8pML0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.153.51.0/24
82.153.148.0/24
82.163.15.0/24
89.213.63.0/24
89.213.107.0/24
89.213.112.0/23
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.227.0/24
109.176.242.0/24
213.130.137.0/24
213.130.152.0/24
213.130.154.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f8:d8:16:d1:03:42:4c:79:92:3e:cc:7f:bd:08:a2:3d:43:
d5:8b:ef:dc:1b:88:42:04:06:ee:43:91:7f:b0:ff:d7:7a:29:
1c:a9:9f:ee:67:93:10:50:b0:6d:29:6a:0b:39:44:e3:30:ab:
de:29:cb:2c:d2:d9:34:af:d4:65:4e:a4:77:c1:19:aa:9a:2d:
67:4f:17:2c:70:97:54:49:36:ac:45:42:31:ef:92:fb:03:d8:
0c:d9:47:2f:c8:89:79:f1:bc:91:5c:58:0e:3c:c0:70:0f:78:
67:f1:fd:05:0a:94:74:71:1b:c9:ff:4f:fd:e8:6d:71:61:d4:
9f:1f:58:f9:8d:bb:97:b3:ea:54:0b:d8:23:29:66:ee:25:05:
84:85:a9:f6:32:dc:23:0e:6e:9a:2a:3c:5a:ce:2b:00:a2:86:
85:4f:37:98:f4:b9:f9:ee:21:f1:0e:d0:6a:a0:92:a8:42:07:
ab:72:11:6c:a7:e1:33:3a:40:ef:23:f9:08:53:90:6c:17:9a:
8f:f2:df:6e:ba:0c:91:ba:b4:d8:7d:00:3d:e5:e5:69:86:ba:
9d:78:b8:ed:88:25:26:71:8e:6c:8d:b1:4b:6f:af:9f:c2:38:
f3:7b:c0:0e:02:01:ea:da:f2:2c:2c:d9:60:46:2e:14:fe:c0:
ed:b0:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:36 2025 by rpki-client