Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/UpgKqZKDk6DocsIHKTjtNdmcKOA.roa
File: UpgKqZKDk6DocsIHKTjtNdmcKOA.roa (raw, json)
Hash identifier: ks27GBa0bjdMoWqX1B0YBEH3qIWHeKCvjtYKHznBta4=
Subject key identifier: 52:98:0A:A9:92:83:93:A0:E8:72:C2:07:29:38:ED:35:D9:9C:28:E0
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456C71B1742C800BDFD31B9A7DEE1B
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/UpgKqZKDk6DocsIHKTjtNdmcKOA.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209195
IP address blocks: 195.55.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6c:71:b1:74:2c:80:0b:df:d3:1b:9a:7d:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52980aa9928393a0e872c2072938ed35d99c28e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:a1:69:ca:55:16:d6:1b:d3:3d:40:d1:5b:
7a:d7:18:c5:38:2c:6b:c2:67:76:73:a8:d2:df:51:
6e:4d:32:a0:ca:3b:6a:86:13:96:f0:29:81:c3:c0:
c0:df:d3:50:20:b5:b9:ff:97:41:73:67:71:25:0e:
a3:f1:1b:8e:98:d8:b9:ae:1a:cb:6e:a4:94:a6:69:
b1:49:68:81:de:14:ed:b0:98:1c:96:57:99:4b:aa:
6e:19:85:62:ae:32:a2:bd:78:70:da:85:c1:3e:7b:
fd:5b:82:bb:a0:32:f7:c2:24:a8:cb:bb:ec:62:7c:
5b:b5:f4:cb:89:e0:c0:89:7e:2b:4d:f6:e2:e3:4d:
83:1e:fc:21:0d:d1:cb:8a:43:70:c3:69:8d:9f:c7:
fa:b3:3a:23:b9:34:86:80:cc:b3:3c:f0:97:76:06:
5c:59:02:a3:45:6a:f2:7e:7f:2c:09:9e:ca:83:94:
ca:28:95:56:b9:9f:4a:3d:b2:4c:c6:66:2a:1b:a6:
f3:5f:49:6a:13:51:23:f7:b4:2d:c5:c3:12:09:d3:
8d:cc:27:d4:05:a0:33:d6:2a:b8:4a:b5:c8:7f:28:
2f:48:db:28:5d:89:9d:ab:ba:dd:27:ad:33:d9:64:
1e:55:47:8d:12:24:7f:e8:78:f2:1b:b9:1c:88:5d:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:0A:A9:92:83:93:A0:E8:72:C2:07:29:38:ED:35:D9:9C:28:E0
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/UpgKqZKDk6DocsIHKTjtNdmcKOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.46.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a6:01:99:3b:db:b5:47:34:7a:f1:40:b2:57:71:e7:a3:ea:
ed:dc:f0:78:26:d8:21:e5:57:bd:cc:19:bc:8b:e3:00:fc:d5:
92:fc:89:1f:f6:74:ce:5e:4a:50:63:4f:4b:64:fa:81:1c:6b:
62:ea:b5:65:2c:25:67:ea:e9:7f:09:c9:c9:0e:ad:b9:fa:9b:
a4:ce:c4:2d:69:39:e0:ff:06:c9:48:d1:be:cd:c5:43:c0:85:
8a:db:f8:f9:00:68:7b:33:d4:c4:f0:b9:a6:d0:d1:6f:56:d2:
b5:a4:f6:dd:ce:86:e6:14:1c:04:de:73:32:11:e2:de:8f:56:
c0:9a:b4:cf:83:85:cc:38:24:6b:3c:a9:ea:a7:d3:a7:27:6d:
6e:ff:f6:fa:3f:3b:86:ba:86:2b:3b:13:53:6d:5c:87:a6:db:
67:44:52:97:a8:a4:0f:74:13:80:43:15:d5:cc:f7:fe:a8:b7:
19:9d:39:c5:7d:82:f6:89:8b:75:93:f4:d1:4d:2c:d5:9d:f2:
2a:80:10:c7:f8:1d:e7:90:89:9d:75:00:db:73:61:04:23:d0:
a1:b0:d0:89:59:0c:51:b4:27:fb:f8:c9:b8:5b:36:e7:27:8f:
99:78:01:64:ed:77:83:ea:da:32:2a:c4:a9:04:12:9d:e0:f6:
32:f9:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:39:41 2025 by rpki-client