Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/umqBfoDDAK3jbRiLn4CC-iVGvHg.roa
File: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (raw, json)
Hash identifier: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=
Subject key identifier: BA:6A:81:7E:80:C3:00:AD:E3:6D:18:8B:9F:80:82:FA:25:46:BC:78
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 019422FAEC3771546F4C5386D381BB13BCFA
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/umqBfoDDAK3jbRiLn4CC-iVGvHg.roa
Signing time: Wed 01 Jan 2025 17:47:37 +0000
ROA not before: Wed 01 Jan 2025 17:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206908
IP address blocks: 185.172.118.0/24 maxlen: 24
185.172.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ec:37:71:54:6f:4c:53:86:d3:81:bb:13:bc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Jan 1 17:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba6a817e80c300ade36d188b9f8082fa2546bc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:ae:38:97:52:fe:ea:1c:29:9f:36:99:4e:
c5:58:f6:3c:9b:fb:a9:82:8a:f3:12:ef:34:19:96:
ab:68:b3:8a:0c:bd:d1:eb:74:32:0f:32:9e:0e:77:
ba:62:2b:11:e4:a7:cf:d0:39:31:68:88:b5:22:55:
35:09:3f:2c:81:aa:e5:67:13:82:3a:27:4a:bf:da:
39:e6:05:49:e2:eb:36:43:f4:ce:ec:05:75:7a:f2:
f1:56:ce:2e:4e:0d:f6:77:fd:2f:0c:ef:ea:2b:8d:
70:4c:fb:39:a2:a2:ca:ff:d8:a8:91:af:04:ad:22:
93:eb:3f:94:80:2b:ef:d2:65:0b:90:e7:e5:17:5c:
74:aa:cd:94:a6:c5:c9:5f:2d:75:83:2e:80:3d:c5:
f9:bd:11:f6:e9:6f:bc:a8:25:8f:88:01:dd:0d:5e:
f3:17:ba:ce:19:b1:f1:56:e1:af:ec:57:d7:61:20:
cd:3c:f1:ac:1b:55:73:81:dc:3d:58:f1:70:7e:66:
47:e3:6f:c5:e5:7d:e2:e1:08:1f:ad:04:ea:3c:fc:
31:cc:70:cc:8b:75:61:f0:d7:fb:6d:f2:8a:2c:8d:
5d:b1:d6:04:9a:94:c8:c6:d1:5f:0d:12:69:eb:22:
c0:08:f8:6e:c2:f8:c9:0e:da:60:51:77:76:94:65:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:81:7E:80:C3:00:AD:E3:6D:18:8B:9F:80:82:FA:25:46:BC:78
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/umqBfoDDAK3jbRiLn4CC-iVGvHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.118.0/23
Signature Algorithm: sha256WithRSAEncryption
89:f1:2e:e9:5e:b4:2d:a0:91:59:ad:bb:2a:fa:93:19:37:d1:
97:a8:dd:cd:82:26:64:db:ef:5d:fa:f7:72:96:33:92:93:cc:
55:2d:ab:ee:e1:93:2c:df:22:d6:7e:16:cf:fd:c5:2e:43:b3:
c6:f9:4f:fc:64:a4:ce:20:a0:ba:90:7f:bd:3b:18:60:da:44:
8f:e6:54:bd:cf:ea:e8:d8:65:05:81:ab:50:12:7c:35:ee:4e:
d5:e8:c4:2b:5f:ca:a2:31:ee:4e:85:f7:ba:91:7b:86:c4:0c:
5a:07:48:db:f2:c3:bc:cc:38:97:50:39:17:18:1d:49:9a:fb:
8d:39:11:02:50:d9:fa:c0:4f:ff:7b:2b:e9:c1:ad:70:85:95:
cb:3b:c3:b0:99:4f:69:9f:64:54:23:5c:37:78:02:b1:35:02:
a6:3a:a5:54:69:f5:25:d9:81:a4:ea:54:16:1b:dd:87:16:ff:
8d:c1:9e:dd:c1:4a:c6:46:c7:4e:86:eb:61:0d:df:43:37:9b:
e6:dd:55:26:f3:2c:15:da:95:1a:a9:44:e1:eb:bc:8a:b1:ea:
f6:15:e7:f6:36:72:d4:22:b7:1c:0f:2b:26:92:3c:33:34:7f:
b7:77:75:be:cb:ec:21:46:fa:8a:4a:ef:09:5e:9c:ac:97:e1:
ad:7b:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:27 2025 by rpki-client