Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/UhVG2jyrAmFon0NT28kVJfJ2xPU.roa
File: UhVG2jyrAmFon0NT28kVJfJ2xPU.roa (raw, json)
Hash identifier: 0vKwRNkKIsm0/VOmSdKGt70EGUg+yxe2L/I3kHNcIS8=
Subject key identifier: 52:15:46:DA:3C:AB:02:61:68:9F:43:53:DB:C9:15:25:F2:76:C4:F5
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 019423D7EF76F3FBBB6EFEDE8784FF28C354
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/UhVG2jyrAmFon0NT28kVJfJ2xPU.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209275
IP address blocks: 88.214.40.0/24 maxlen: 24
88.214.42.0/24 maxlen: 24
185.225.198.0/24 maxlen: 24
2a09:9d00::/29 maxlen: 48
2a09:9d00:1::/48 maxlen: 48
2a09:9d00:2::/48 maxlen: 48
2a09:9d00:3::/48 maxlen: 48
2a09:9d00:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ef:76:f3:fb:bb:6e:fe:de:87:84:ff:28:c3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=521546da3cab0261689f4353dbc91525f276c4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:ab:77:23:fd:b3:5c:79:57:43:55:cb:31:
9e:2c:a2:63:e0:79:e8:70:bc:55:bf:ab:38:98:f5:
85:78:27:c6:bf:40:4b:13:1e:ad:7b:be:6e:f5:67:
65:c8:d3:40:8a:96:50:9f:15:aa:b2:29:e3:6f:67:
c6:7e:80:cd:04:73:8c:01:46:17:01:ff:a2:71:cf:
1e:6b:7d:12:29:06:9e:41:db:71:b6:0c:4a:cc:bb:
47:30:48:ec:51:ef:6b:3c:08:41:4e:42:76:05:71:
14:02:8b:d4:26:c9:17:0c:81:4d:d2:d7:22:3a:55:
02:a4:38:7c:49:35:2d:b1:06:5e:d6:2f:32:e2:c6:
a7:ae:f6:83:23:8b:e7:92:60:34:92:3f:c1:48:a7:
5e:d5:b9:57:cc:40:ce:60:cc:bb:e5:a3:14:c7:38:
46:fc:b9:c5:55:ea:79:db:08:d1:57:88:b0:e2:11:
90:f8:33:22:a7:0c:4c:1d:94:fd:79:77:fb:f5:03:
58:54:7c:16:88:03:6c:e4:4b:4a:b6:3b:61:23:78:
b3:8d:1d:cf:42:a5:bb:a3:4c:70:b3:11:ac:45:f3:
45:3b:ee:04:6d:5a:7b:aa:f0:c3:9b:df:67:aa:66:
ad:97:16:e8:bd:e7:4d:5a:19:c0:44:08:bf:9a:81:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:46:DA:3C:AB:02:61:68:9F:43:53:DB:C9:15:25:F2:76:C4:F5
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/UhVG2jyrAmFon0NT28kVJfJ2xPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.40.0/24
88.214.42.0/24
185.225.198.0/24
IPv6:
2a09:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:2e:cc:b2:4a:8c:e9:2c:ca:8a:ce:ac:e7:56:5d:c5:3e:f2:
49:b2:fe:f4:8e:d6:b4:96:52:d9:c1:2d:8c:a2:c4:8f:a2:18:
48:30:f5:ae:e4:66:1f:fd:a6:ce:39:28:35:22:90:09:4c:d3:
53:b3:72:99:2c:3f:02:a7:94:0f:7d:62:6a:3e:6e:0f:86:cc:
6d:1e:85:0d:ef:af:97:b6:b1:e7:7b:67:44:27:b7:de:26:2b:
61:3a:e8:a2:03:0e:00:42:3a:81:6c:cd:b0:88:e6:7c:2b:c8:
72:35:2d:ec:c8:1c:2a:42:28:ff:ca:27:d1:64:0e:a3:ea:3f:
9c:a9:b2:31:9e:ce:4f:b9:ab:99:d4:99:5f:44:df:a5:d5:4a:
bf:4a:63:d3:8f:85:92:77:2a:6c:ff:83:ca:6d:0a:d0:dc:4f:
a2:16:b3:42:54:8a:ef:f5:0d:12:47:68:60:a0:bf:27:bf:31:
01:1c:5f:c1:12:0a:48:7e:f8:6c:f1:0d:07:10:65:24:7e:80:
18:c0:bd:30:13:fb:ca:c7:64:2f:e1:5c:0e:2a:2a:09:c2:81:
e2:35:c0:a4:a4:db:cc:6e:54:90:b8:53:00:6c:62:14:19:aa:
fb:05:06:5c:f3:73:33:10:b1:84:2f:00:21:a6:04:96:e3:e3:
b5:b4:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:14:56 2025 by rpki-client