Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/3UqWODae-W_KRnDyCPYz1_OG32o.roa
File: 3UqWODae-W_KRnDyCPYz1_OG32o.roa (raw, json)
Hash identifier: y871Jre0p863nPe1CoOGeswcSvdN1WU/WfOE51E+5qw=
Subject key identifier: DD:4A:96:38:36:9E:F9:6F:CA:46:70:F2:08:F6:33:D7:F3:86:DF:6A
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01942068109C2A5BBEE2A0E4E2B64EDB402E
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/3UqWODae-W_KRnDyCPYz1_OG32o.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 185.113.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:10:9c:2a:5b:be:e2:a0:e4:e2:b6:4e:db:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd4a9638369ef96fca4670f208f633d7f386df6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:d3:0b:1f:82:19:5f:41:e9:15:b8:cc:9b:
1a:7f:1d:f1:e2:ff:f8:b3:90:93:88:d5:e3:f3:82:
d2:54:54:ad:63:39:7d:d3:14:14:f4:03:b5:3b:43:
a6:d8:0d:04:07:ef:46:d1:bf:a1:c1:a2:49:e5:17:
92:67:6d:89:6b:58:53:52:4a:b0:db:ff:93:75:11:
51:6b:b8:80:96:c1:bf:47:96:5a:6f:5d:98:2e:81:
94:08:18:89:41:b1:23:07:36:6c:dc:d3:ba:d3:c4:
69:14:65:b2:05:eb:26:bf:bc:83:bb:c6:a6:91:fd:
a3:0a:0d:2e:6b:59:3c:3f:ee:fd:e5:92:02:89:66:
ab:57:43:71:f9:c5:e5:22:71:ca:2d:b5:c9:0a:2d:
fe:b1:03:87:03:81:fb:16:15:71:71:fa:ba:fc:c9:
76:66:6e:ef:dd:e0:dd:2d:06:2a:f0:c1:e3:9e:90:
0f:cf:18:eb:b3:23:5c:40:d1:35:4b:2e:5a:d7:f8:
f6:29:99:8c:2f:89:bb:34:13:ff:1f:48:06:32:ea:
13:e9:5a:11:b9:07:b8:7b:59:c1:d8:d4:ab:5e:82:
51:a0:ea:0b:bf:d6:ca:b0:f7:ae:a4:47:6f:27:5f:
4b:3b:52:4b:c3:29:c1:ba:80:94:4d:87:5c:a2:b7:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4A:96:38:36:9E:F9:6F:CA:46:70:F2:08:F6:33:D7:F3:86:DF:6A
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/3UqWODae-W_KRnDyCPYz1_OG32o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1c:88:b8:e9:de:e6:af:a7:40:3c:70:c9:8a:66:27:91:5b:
05:23:54:30:e3:c4:f0:a8:fd:cb:88:ed:f1:13:0d:14:00:7f:
f3:41:65:ec:f1:d1:2d:ef:ac:72:ad:0f:d2:e7:a6:da:f6:c3:
52:3e:f7:57:67:ce:1a:db:15:8a:4d:ef:67:84:dc:8c:6a:c3:
e8:28:0d:34:eb:9e:58:88:b6:d3:fc:99:d1:52:6c:21:c6:3d:
86:47:1a:80:03:80:16:94:ab:5e:19:d1:cf:a9:18:b9:5f:ff:
ae:d3:ce:86:55:7e:0f:60:04:a1:f1:51:6f:7e:4c:56:b0:14:
fe:a0:73:65:aa:99:8c:fc:9e:58:71:d7:03:a4:8c:04:40:f6:
73:89:d3:9f:5e:c7:a3:f7:1b:b6:d8:3d:12:d5:51:80:9f:0c:
7e:e2:74:7f:5b:66:21:c9:00:86:fe:f3:ff:ff:ce:41:52:08:
43:02:c2:58:64:70:3a:fe:b4:69:77:88:87:bc:45:03:10:12:
dd:7c:bd:52:79:ba:ad:8a:10:04:b9:d9:50:55:d4:84:99:d3:
e0:5d:5b:9a:d7:e8:f6:36:26:35:be:46:8c:62:69:36:88:d9:
b9:e4:19:5c:13:46:d0:ee:b4:28:18:6a:32:97:3b:f0:57:0b:
eb:89:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:28:44 2025 by rpki-client