Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/UsHLucR3rIttQE-i6TwlR7HDoxs.roa
File: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (raw, json)
Hash identifier: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=
Subject key identifier: 52:C1:CB:B9:C4:77:AC:8B:6D:40:4F:A2:E9:3C:25:47:B1:C3:A3:1B
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 01942825E82CC63FB48B317C9FCC711314AD
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/UsHLucR3rIttQE-i6TwlR7HDoxs.roa
Signing time: Thu 02 Jan 2025 17:52:40 +0000
ROA not before: Thu 02 Jan 2025 17:52:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20660
IP address blocks: 194.125.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:e8:2c:c6:3f:b4:8b:31:7c:9f:cc:71:13:14:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Jan 2 17:52:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52c1cbb9c477ac8b6d404fa2e93c2547b1c3a31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:1f:1f:81:c8:af:f6:c3:a7:9e:b4:a6:bc:
6b:d2:1f:76:d3:c5:b5:f4:fe:2c:32:75:b6:f8:11:
33:ed:53:11:f5:c3:b5:d2:08:0c:e5:14:43:99:07:
9d:72:22:14:3f:c4:7d:f4:ad:69:33:b8:40:3d:fd:
7a:8e:18:97:be:cd:bf:d9:90:19:d5:68:c3:1d:94:
50:90:9c:ac:8c:c2:73:52:37:f9:19:b0:e9:d3:af:
4c:32:8b:87:ca:ec:1b:44:0d:d5:f5:1a:9f:19:02:
9f:5c:b9:4e:dc:db:2c:12:24:01:05:87:6c:77:82:
20:ab:17:4c:45:1c:2f:cc:f4:de:9b:61:39:4a:7c:
c2:e7:b4:bd:6c:8a:d8:fd:e1:8b:69:a6:c0:1a:4e:
e2:3b:62:84:c5:45:39:4f:f9:da:17:dd:fb:0e:d6:
d2:a8:a7:9a:2d:b5:be:22:2f:e4:8a:0c:59:e9:57:
dd:87:ab:ca:92:9f:f0:fb:68:eb:26:ab:b1:db:bd:
9b:bb:37:14:a9:f0:ad:7c:54:38:24:7e:df:02:a5:
ae:65:95:79:c4:e9:30:8d:0d:bd:7d:ff:4c:e8:00:
e6:fe:2e:c3:0a:50:00:dd:a8:88:4c:c2:db:d5:4e:
41:76:f6:85:1a:a0:07:7a:43:9c:e0:7f:60:92:3b:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:CB:B9:C4:77:AC:8B:6D:40:4F:A2:E9:3C:25:47:B1:C3:A3:1B
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/UsHLucR3rIttQE-i6TwlR7HDoxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.244.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:21:fc:28:22:a6:dc:09:49:a6:81:e0:23:bb:8b:85:a6:1f:
dc:33:b7:21:d0:9b:d6:9e:53:34:84:04:d9:90:dc:f9:18:01:
26:ca:f5:d6:44:fd:4c:94:ba:43:b9:4a:f6:56:1f:b9:e5:c2:
16:d8:e9:7d:49:53:ac:57:ab:43:e6:0e:bb:c4:82:97:54:dc:
f2:73:0b:8c:e2:93:a3:48:e0:e6:e9:ce:95:25:29:ed:8d:6e:
ce:04:d1:40:b5:75:8d:ce:34:ed:5c:af:e4:64:a6:c9:5f:d8:
fc:24:4d:77:ae:72:51:b8:75:8c:4f:15:7d:c3:3c:2c:e0:58:
e8:fd:10:24:c6:65:4b:96:bf:6d:3e:f9:b4:aa:a0:c8:09:c1:
f2:f3:83:ab:a9:db:0d:b1:db:73:38:aa:60:4e:e8:5d:42:5e:
c5:f9:31:2e:c4:6a:e5:11:ee:c1:6a:6f:20:23:f0:77:60:35:
b4:c1:02:c1:fe:b4:b8:11:7a:ba:e9:e6:bc:ed:ae:ed:91:e7:
ab:42:75:a6:eb:d4:4b:f1:d6:a8:be:d6:3e:c5:f8:c8:2d:8e:
3a:59:8c:99:e2:06:ea:cc:d1:70:8c:2f:0d:94:50:6c:3c:f5:
f5:7a:3d:d6:20:1a:4c:8f:db:e1:9d:24:67:39:13:1b:44:5d:
b2:32:7d:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJegsxj+0izF8n8xxExStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2
MmU4OWYwHhcNMjUwMTAyMTc1MjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmMxY2JiOWM0NzdhYzhiNmQ0MDRmYTJlOTNjMjU0N2IxYzNhMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtIfH4HIr/bDp560prxr0h9208W1
9P4sMnW2+BEz7VMR9cO10ggM5RRDmQedciIUP8R99K1pM7hAPf16jhiXvs2/2ZAZ
1WjDHZRQkJysjMJzUjf5GbDp069MMouHyuwbRA3V9RqfGQKfXLlO3NssEiQBBYds
d4IgqxdMRRwvzPTem2E5SnzC57S9bIrY/eGLaabAGk7iO2KExUU5T/naF937DtbS
qKeaLbW+Ii/kigxZ6Vfdh6vKkp/w+2jrJqux272buzcUqfCtfFQ4JH7fAqWuZZV5
xOkwjQ29ff9M6ADm/i7DClAA3aiITMLb1U5BdvaFGqAHekOc4H9gkjuOywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFLBy7nEd6yLbUBPouk8JUexw6MbMB8GA1UdIwQY
MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt
N2JiODIwNDBlNWVlLzEvVXNITHVjUjNySXR0UUUtaTZUd2xSN0hEb3hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl
LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwn30MA0G
CSqGSIb3DQEBCwUAA4IBAQAbIfwoIqbcCUmmgeAju4uFph/cM7ch0JvWnlM0hATZ
kNz5GAEmyvXWRP1MlLpDuUr2Vh+55cIW2Ol9SVOsV6tD5g67xIKXVNzycwuM4pOj
SODm6c6VJSntjW7OBNFAtXWNzjTtXK/kZKbJX9j8JE13rnJRuHWMTxV9wzws4Fjo
/RAkxmVLlr9tPvm0qqDICcHy84OrqdsNsdtzOKpgTuhdQl7F+TEuxGrlEe7Bam8g
I/B3YDW0wQLB/rS4EXq66ea87a7tkeerQnWm69RL8daovtY+xfjILY46WYyZ4gbq
zNFwjC8NlFBsPPX1ej3WIBpMj9vhnSRnORMbRF2yMn0J
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:16 2025 by rpki-client