Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/UBsXmv4C5qffM7QM-9ND5QsfZfM.roa
File: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (raw, json)
Hash identifier: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=
Subject key identifier: 50:1B:17:9A:FE:02:E6:A7:DF:33:B4:0C:FB:D3:43:E5:0B:1F:65:F3
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 019421B21203969A4BD90FBABF47BCFED1AD
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/UBsXmv4C5qffM7QM-9ND5QsfZfM.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 37.19.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:12:03:96:9a:4b:d9:0f:ba:bf:47:bc:fe:d1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=501b179afe02e6a7df33b40cfbd343e50b1f65f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:c9:69:d9:6b:53:04:e8:22:10:5f:68:23:
ca:05:9d:14:1a:fc:b8:0b:df:86:0a:dc:d5:35:dc:
18:90:01:1c:04:b1:8d:09:08:9a:1d:93:aa:a3:52:
5d:6f:a3:eb:b6:ef:b1:07:29:57:08:9e:27:1a:a0:
99:62:bf:e1:04:ad:ad:9d:16:98:fd:cb:24:6f:8f:
4f:67:90:02:3e:46:b3:8e:34:b2:a6:d6:48:7a:8f:
3d:50:e9:e1:65:7f:63:74:33:6a:ef:39:56:ac:09:
65:43:11:89:c6:19:27:c4:8b:1a:70:16:c8:a2:ba:
ad:f3:f0:18:de:0f:18:2a:7a:ed:11:0d:36:ad:47:
ee:2b:33:a0:ef:0b:6b:d2:a8:82:f2:65:16:28:29:
b7:de:15:e3:a7:fe:c7:0d:c2:e5:d7:3e:a8:6f:0f:
78:98:9e:42:23:db:b5:69:97:40:fc:72:42:c7:5f:
68:d2:2b:4c:d3:d8:70:cf:86:27:96:fb:a6:2f:9b:
43:e0:2a:69:6d:0d:1a:47:94:fd:97:44:25:50:7f:
0d:51:da:86:52:e8:65:a0:03:32:a1:e4:4f:83:f0:
11:d0:b8:f9:52:58:17:ca:d1:81:02:5d:aa:1a:9a:
f2:0e:fe:4c:25:6a:e3:d3:21:17:bb:c9:ff:0c:59:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:17:9A:FE:02:E6:A7:DF:33:B4:0C:FB:D3:43:E5:0B:1F:65:F3
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/UBsXmv4C5qffM7QM-9ND5QsfZfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:2b:63:a2:14:25:68:f1:04:95:0e:d1:ca:08:99:fa:b1:16:
f9:55:63:e2:63:33:f6:59:bf:ad:78:11:91:04:08:8c:ce:be:
d7:34:ba:5f:f2:44:48:97:32:d7:08:d7:4d:e7:ec:9b:1f:cc:
96:bb:ae:05:d3:ee:65:67:ab:86:7b:86:c3:b3:15:f5:fc:ed:
ea:f9:92:e9:91:34:3d:c2:03:22:25:56:66:e2:38:71:15:8c:
03:a6:38:09:6a:8f:fe:a7:c2:d0:f7:1b:e7:67:40:86:4c:25:
c4:eb:55:2b:a5:70:25:37:04:1f:b1:1c:a2:f5:30:7a:97:5f:
c9:d5:fc:62:73:fd:f2:d5:76:db:b4:a3:db:f1:aa:e1:4c:39:
05:f6:9a:f4:83:5d:77:2b:29:f6:61:62:81:c2:f0:59:43:07:
e8:0c:74:5c:03:c9:9a:65:e1:c9:99:16:e1:3c:73:f8:a3:98:
ac:52:40:c1:92:06:48:5f:7f:d3:0f:8d:32:de:5e:5f:c8:3d:
ec:e1:49:e8:95:91:34:ce:37:1d:db:3a:2a:ce:1c:7f:7a:f9:
2a:65:2d:bd:7c:9c:d4:91:39:b3:91:1f:17:64:68:d8:2b:21:
c7:8f:0d:fc:01:9c:3f:21:34:b6:df:df:67:21:59:8c:b0:f6:
33:d0:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:54:38 2025 by rpki-client