Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/uc150UpyVmM0lf0Kf7nSAGa2PLU.roa
File: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (raw, json)
Hash identifier: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=
Subject key identifier: B9:CD:79:D1:4A:72:56:63:34:95:FD:0A:7F:B9:D2:00:66:B6:3C:B5
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 0194B738E6572948488F390FF2B5E82A5CB5
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/uc150UpyVmM0lf0Kf7nSAGa2PLU.roa
Signing time: Thu 30 Jan 2025 12:39:06 +0000
ROA not before: Thu 30 Jan 2025 12:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:38:e6:57:29:48:48:8f:39:0f:f2:b5:e8:2a:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Jan 30 12:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9cd79d14a7256633495fd0a7fb9d20066b63cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:07:09:ff:b3:a3:53:ea:ef:00:77:30:3c:
a5:9d:db:7e:ba:7c:16:55:62:9e:db:7a:1b:c5:f7:
1c:e1:3c:45:55:54:12:75:73:30:72:a4:bd:13:a9:
97:e1:1f:1b:2f:0e:94:f2:43:c7:79:ca:c1:d0:45:
77:7a:0a:ed:80:df:83:bf:e6:f4:45:a9:35:b8:87:
74:46:b7:70:f6:e1:a8:67:9a:77:1e:24:bb:83:dc:
f1:a3:90:60:dc:3e:00:00:4b:3a:fd:a9:70:2e:05:
0f:f4:49:6e:d7:12:ce:2d:7b:9a:c6:53:10:88:fb:
c5:34:d1:c3:e0:4d:b3:ca:a9:a4:62:3d:48:51:3d:
ee:95:21:27:b2:08:88:45:f9:ba:cb:05:e6:b9:f2:
14:1c:ab:cb:10:9d:3e:b3:c4:87:cf:94:6a:6b:fc:
0a:01:e3:c0:fa:07:88:38:ff:3f:7c:89:b4:88:b8:
3e:f5:76:4c:54:f3:3e:40:d1:57:67:e8:d6:73:e4:
af:5e:69:e6:10:b8:cb:1c:82:8a:09:93:98:99:90:
4e:ce:fd:96:e3:0c:1f:27:61:a7:65:d2:65:d1:89:
45:6b:8c:73:8f:d9:53:50:25:6a:58:85:71:dd:dc:
b9:0a:63:3f:57:94:92:58:c4:47:4d:c1:a7:82:4e:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CD:79:D1:4A:72:56:63:34:95:FD:0A:7F:B9:D2:00:66:B6:3C:B5
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/uc150UpyVmM0lf0Kf7nSAGa2PLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.22.0/24
Signature Algorithm: sha256WithRSAEncryption
92:44:17:d6:21:68:32:3b:2b:cc:a9:d4:a3:a5:62:4b:e9:df:
c5:ec:cd:83:90:1d:e8:38:75:78:dd:ed:10:f0:71:59:13:06:
ce:b6:17:50:d2:d1:50:c7:13:67:43:00:73:dc:3c:a9:6b:4e:
55:99:b9:ee:ee:43:11:f0:a1:49:3e:8b:f6:13:c4:6d:ef:bb:
d7:66:8a:46:98:20:39:d9:e8:e0:00:b2:15:0b:80:54:c6:c4:
1c:e1:9c:ab:f8:54:cb:20:08:44:90:a8:27:4c:74:75:89:6b:
3b:66:24:7e:55:9c:cf:2c:63:14:2a:34:91:a6:d5:b9:ea:6f:
22:0f:68:a1:bf:d0:0d:f3:c3:d2:b4:4d:06:a1:f4:be:02:9d:
d1:0a:3f:58:f8:cd:b9:b7:06:c7:30:14:18:06:ee:32:85:f1:
c8:7d:55:d3:85:21:65:1d:54:7a:26:82:d3:d7:03:ac:1e:ae:
55:d5:0f:e1:10:0b:77:ae:05:06:c7:4a:9c:6f:61:2a:c8:4f:
ea:f2:b1:66:a6:bb:31:20:3c:d3:2a:63:b7:9a:22:07:ba:00:
dc:b4:c2:a0:fc:ab:9a:91:03:0e:cc:0d:ca:00:cc:cc:8b:95:
29:88:dd:fd:b1:83:73:46:e5:90:d6:59:7c:25:e1:bb:a7:84:
8f:6f:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:28 2025 by rpki-client