Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uqYSZ8UqDr6vggcTb0y3Zjes3Ro.roa
File: uqYSZ8UqDr6vggcTb0y3Zjes3Ro.roa (raw, json)
Hash identifier: wQ0opa5YvBUPxJ8GwcKjypJ4ZPHbZAGLlxAGwkHzHzI=
Subject key identifier: BA:A6:12:67:C5:2A:0E:BE:AF:82:07:13:6F:4C:B7:66:37:AC:DD:1A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214405AFE7D00B635E0FF156B72574F3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uqYSZ8UqDr6vggcTb0y3Zjes3Ro.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204770
IP address blocks: 109.176.236.0/24 maxlen: 24
109.176.237.0/24 maxlen: 24
109.176.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:05:af:e7:d0:0b:63:5e:0f:f1:56:b7:25:74:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baa61267c52a0ebeaf8207136f4cb76637acdd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:c5:ec:3f:76:1e:92:c7:a7:9b:88:d4:bf:
f9:5f:9f:40:f9:fd:d9:3a:ac:03:c3:d0:8e:40:81:
5d:66:2f:f3:6f:68:3e:41:88:c8:10:be:00:32:a0:
1f:01:b6:8a:b3:8f:a6:72:41:8a:5b:00:20:8b:15:
8a:61:06:54:36:e5:aa:15:4a:a8:72:54:85:31:f5:
f0:27:20:42:53:42:b7:5f:68:5d:91:b8:48:aa:81:
ce:2e:21:0c:c1:ff:12:84:37:b0:b5:11:a2:c0:6e:
93:c3:b8:81:7f:d6:70:f4:df:7a:e6:ff:a4:50:c7:
4a:01:88:b3:ce:cb:ab:d7:44:a2:da:9f:90:29:5b:
68:76:3e:34:ce:e2:ff:bb:b2:55:fd:f5:4f:65:b9:
d4:07:b3:32:66:69:7a:ad:6d:94:40:69:db:6a:57:
94:24:25:66:01:0d:3e:ea:f6:95:ee:c5:af:d0:ff:
48:34:6a:5f:6d:43:a6:93:d3:fc:0a:89:fc:27:0f:
16:db:9a:2d:ab:c6:c9:f6:ac:b8:03:ec:6b:2c:ed:
b6:5a:6a:59:7c:c1:f3:03:cd:46:9d:20:21:fe:c2:
2c:61:d7:c8:47:d7:43:65:da:65:b8:19:3f:eb:29:
27:5d:c9:b8:fa:de:5c:51:66:44:4e:98:ea:f3:49:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:12:67:C5:2A:0E:BE:AF:82:07:13:6F:4C:B7:66:37:AC:DD:1A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uqYSZ8UqDr6vggcTb0y3Zjes3Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.236.0-109.176.238.255
Signature Algorithm: sha256WithRSAEncryption
15:e8:b0:85:1b:3c:be:89:f4:e3:86:44:36:ac:c4:6c:9c:3b:
a8:f2:80:01:ff:2b:a6:49:b5:fe:91:ad:e3:ce:c8:5f:e2:44:
2d:56:c8:18:af:1a:f5:d6:27:00:f7:b0:24:c7:ca:5b:0a:64:
c0:d4:9b:4d:a3:8e:45:4e:14:fc:2b:cd:9e:28:1c:5a:65:28:
8d:0b:20:a6:b9:de:55:88:e0:bb:ca:ca:c3:82:73:e1:da:9a:
d8:83:3c:d2:25:70:42:22:33:f4:73:37:f5:c5:e5:10:f1:26:
e2:f7:c6:62:30:a5:37:13:22:18:39:03:da:eb:d8:a0:d2:41:
d9:a1:96:47:e3:c1:46:23:93:ec:7e:94:aa:00:6a:83:5d:07:
10:ea:5d:4e:cf:fb:06:24:dc:3f:6b:50:b6:a9:43:f7:76:4c:
02:ec:c5:a2:63:75:71:f7:81:b8:e8:81:03:ef:bc:10:e4:62:
e0:25:6e:fc:41:9c:34:a8:57:0e:07:99:5b:f2:62:16:7c:0c:
c7:d1:47:7f:b4:36:6c:8e:64:8e:d8:0c:54:39:3f:f9:27:ab:
08:b5:bc:19:c3:4c:a5:5a:84:75:16:05:0b:a9:3a:82:0e:54:
97:c0:f7:34:ff:4d:69:d2:c7:74:a3:b4:e4:33:d2:2c:7c:d7:
ba:36:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:34 2025 by rpki-client