Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa
File: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (raw, json)
Hash identifier: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=
Subject key identifier: B9:A2:B3:9C:B9:22:AB:F7:60:1C:78:5F:48:88:1B:24:CB:6C:33:D6
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 01942522313CDE6CBB004D4FB81C55FB8E27
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 194.15.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:31:3c:de:6c:bb:00:4d:4f:b8:1c:55:fb:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9a2b39cb922abf7601c785f48881b24cb6c33d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:50:4d:16:e3:e6:8e:b0:17:c9:2e:f8:3f:
0c:d2:a9:7a:59:eb:fb:22:71:b4:35:5c:d6:c5:e8:
a1:50:b9:05:6d:84:e5:e6:78:09:c2:4e:41:31:ef:
3b:6d:92:2b:78:79:d9:91:f0:ba:11:29:bb:e8:a4:
42:15:00:94:75:37:dd:2f:4d:3d:cb:f2:93:68:72:
08:97:42:76:53:0f:1a:07:a2:89:ad:a0:97:aa:c6:
70:66:3d:98:88:ca:71:e0:a1:96:04:e1:e4:c2:90:
e7:9f:6d:ed:6a:13:dc:a1:ea:f8:99:0d:27:11:69:
b9:ad:82:91:3b:e3:02:8e:74:8e:07:9a:6e:c0:b5:
6d:4c:01:86:e2:82:0c:9d:47:c7:48:c2:8a:02:a8:
d1:70:ee:67:0c:54:4e:6f:61:c0:27:db:06:71:d9:
4e:95:70:eb:fb:aa:4a:3f:78:d4:4c:72:96:d1:c0:
bf:38:b1:59:e6:af:14:aa:a6:42:cf:ab:56:9b:15:
c1:2f:ef:c9:05:7a:23:06:a3:c3:c7:33:f7:f0:ee:
49:88:5e:27:4f:c5:1a:bc:c6:43:14:62:2a:72:68:
5f:9d:9b:b0:e7:5d:72:c6:55:73:3a:ce:32:9d:63:
17:1d:c9:45:b7:a3:c9:e4:6f:26:20:c1:87:b1:dd:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A2:B3:9C:B9:22:AB:F7:60:1C:78:5F:48:88:1B:24:CB:6C:33:D6
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6a:8c:40:54:2e:fe:71:65:2d:03:0b:7f:6c:f3:a5:4d:41:
69:87:f3:4f:a8:c0:77:c5:05:4f:b9:55:e0:54:52:15:81:73:
28:d4:34:82:5c:5c:2e:e3:83:6e:bb:09:cf:e2:6c:1c:0b:40:
73:33:d5:d3:f4:ac:5b:58:88:18:95:a7:c5:09:8b:a6:33:26:
5e:52:28:fa:76:83:ce:88:fe:37:ca:9f:a6:b7:8c:c9:5b:1c:
a8:b5:ed:d4:1b:16:97:0e:08:df:11:09:7f:1b:02:c7:90:cc:
a2:9e:09:a8:b3:bd:a8:e0:4c:0a:d1:63:7b:32:9e:ef:57:c2:
2b:57:36:6b:65:07:8f:bf:40:0e:4b:a3:f4:58:08:1c:69:21:
de:d0:36:36:7c:1d:43:7c:29:e1:36:ff:56:fc:ce:07:ae:31:
03:43:08:e1:36:84:27:0c:d3:ff:d2:2f:0f:be:1c:f4:76:c1:
fe:4c:2a:c5:9a:13:b3:a5:b7:08:bb:1e:e3:6d:49:c5:3b:7c:
eb:6b:6e:3b:4e:d1:e8:a3:82:63:a9:01:75:08:12:e0:d3:a1:
67:38:9c:1b:a9:61:60:ae:25:0c:6a:28:2c:f4:97:69:77:f6:
7b:bc:58:1b:e8:21:11:d6:9b:4e:b7:21:6e:23:0f:5a:1d:98:
9c:2b:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:52:54 2025 by rpki-client