Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/UQeJyG9BAYXx7MdsdkPbT5nATwI.roa
File: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (raw, json)
Hash identifier: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=
Subject key identifier: 51:07:89:C8:6F:41:01:85:F1:EC:C7:6C:76:43:DB:4F:99:C0:4F:02
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 019426D9D1FB021618BF54E530736728AC82
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/UQeJyG9BAYXx7MdsdkPbT5nATwI.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44923
IP address blocks: 93.92.200.0/21 maxlen: 21
185.24.52.0/22 maxlen: 22
2a00:6f60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d1:fb:02:16:18:bf:54:e5:30:73:67:28:ac:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=510789c86f410185f1ecc76c7643db4f99c04f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:d3:11:ae:75:ff:42:4a:26:21:96:b4:cd:
9b:3e:35:38:ef:af:3a:42:a9:88:e1:a6:fe:dd:28:
c5:c3:5a:c4:0f:0e:9b:93:3b:19:ad:b6:b2:c0:05:
58:77:c8:41:3d:96:48:f4:7b:18:4d:5a:a5:fb:a5:
12:f4:7a:e2:59:6e:33:c0:77:50:7c:bc:b2:2d:5d:
16:dc:ce:90:04:50:31:06:2b:f6:72:e3:12:28:f5:
60:54:26:5a:6c:94:5d:8d:54:1b:4c:e6:15:d4:41:
6e:3e:f3:d5:3c:db:ad:25:3e:cb:ac:d0:3e:0e:f8:
4c:9c:6f:ff:f9:89:5a:7e:3e:9e:ff:e2:79:bf:c9:
38:51:f0:6e:f8:e0:ce:fc:d8:00:5a:63:7f:dd:27:
cb:8f:f9:88:49:6b:c9:c4:b4:7c:26:ce:dd:b5:50:
b9:4c:dd:a9:5f:a1:d3:78:eb:d0:fb:46:cd:e1:9a:
68:fd:15:44:ea:02:62:9d:46:91:1d:52:88:b1:65:
41:3b:02:f9:15:8d:28:30:1e:2a:69:10:b3:26:5d:
33:2c:d5:43:5f:1d:77:db:1f:44:87:b2:2e:72:d9:
f0:17:b4:76:d5:4c:21:71:75:d7:a9:a7:0d:81:38:
00:8d:3e:5b:16:57:34:82:af:03:1a:ab:ad:91:5e:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:07:89:C8:6F:41:01:85:F1:EC:C7:6C:76:43:DB:4F:99:C0:4F:02
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/UQeJyG9BAYXx7MdsdkPbT5nATwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.200.0/21
185.24.52.0/22
IPv6:
2a00:6f60::/32
Signature Algorithm: sha256WithRSAEncryption
90:bf:c4:d8:d5:41:ed:c3:63:dd:9d:c5:a1:0e:56:61:f5:55:
8f:cc:7c:d5:34:f4:da:e6:86:ce:d8:31:a2:ea:09:e2:7c:d9:
60:83:4a:fe:35:b4:5c:e9:d9:e7:05:56:93:08:5a:31:55:ba:
61:5a:34:b6:f8:c2:c7:9a:39:5e:a6:66:d7:d9:56:d4:92:fa:
29:28:59:45:cd:5e:a9:7c:5e:17:52:04:33:a6:c9:c7:03:d7:
70:d5:39:39:98:8c:0c:d1:fb:e3:03:89:98:ce:79:a2:33:52:
91:8c:6e:73:a1:9a:93:08:c7:01:ba:01:a8:59:50:c3:42:c0:
5a:ac:f9:d1:32:36:a3:1b:16:c2:20:3f:7f:9e:e6:60:a4:95:
ba:68:88:e4:20:e4:96:00:d0:d4:0e:47:3f:e4:78:da:43:73:
19:0c:fc:29:ae:5c:a9:5d:52:f8:1b:83:37:6f:11:8f:b4:ca:
41:ac:2a:59:1d:c9:44:24:a1:36:55:53:3d:28:2f:e1:9a:80:
01:f5:74:ff:a0:ac:30:33:d1:55:f8:cb:a6:17:e9:ad:e2:e9:
77:b9:f7:ec:93:d3:f8:91:9f:2e:f0:34:5d:ea:26:bb:73:33:
82:31:96:d1:6e:59:0e:a3:a8:3b:f8:82:c6:c5:8e:9b:34:ec:
da:71:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:36 2025 by rpki-client