Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa
File: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (raw, json)
Hash identifier: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=
Subject key identifier: D1:46:EA:00:1C:6F:47:D2:AA:B7:E8:B6:A0:32:4A:06:61:0E:21:C6
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019424B367155333B8EE77B3207827E973FF
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa
Signing time: Thu 02 Jan 2025 01:48:44 +0000
ROA not before: Thu 02 Jan 2025 01:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16347
IP address blocks: 185.222.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 14:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:67:15:53:33:b8:ee:77:b3:20:78:27:e9:73:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d146ea001c6f47d2aab7e8b6a0324a06610e21c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:c4:2b:21:08:65:56:3a:e8:94:4b:9b:da:
dc:92:27:07:2b:28:38:26:65:81:14:f8:28:54:6a:
80:ae:8e:97:3c:4c:3f:f1:34:95:43:76:a3:b7:02:
ba:c9:1d:f0:51:98:2f:60:61:e8:28:87:f3:3e:f2:
ad:78:da:62:af:ec:01:3a:6d:3f:06:9d:c9:a3:e7:
6b:bf:62:3b:ce:8e:31:c7:fe:82:ad:b8:c6:1a:a2:
12:9e:76:15:d3:a4:17:65:7f:33:f6:b5:34:8d:8b:
bb:55:cd:b3:f2:41:2c:3c:79:86:f4:2e:6a:b9:9c:
3c:00:3e:f4:b6:aa:55:24:3e:63:c8:c0:86:fe:59:
1f:c0:99:ea:6d:76:af:84:69:0d:ab:37:7a:4f:51:
af:3f:26:4a:56:c5:55:75:56:22:1a:28:75:9f:ed:
4c:7b:b5:d1:dc:ca:68:aa:94:21:01:9a:23:7c:4c:
4c:52:96:96:5b:10:c0:8f:1e:54:59:e2:79:0a:1e:
7c:f1:b9:c4:18:44:c6:ba:98:7c:12:db:07:64:49:
28:15:dd:e7:b0:30:0a:c4:35:8c:8f:b0:68:de:6a:
99:af:69:b9:d6:3a:ad:6f:24:8b:b3:a5:4c:b4:5f:
a4:82:02:02:c5:e6:68:93:f0:e1:be:c4:45:a2:18:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:EA:00:1C:6F:47:D2:AA:B7:E8:B6:A0:32:4A:06:61:0E:21:C6
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:a8:ab:51:49:e9:f9:5c:79:39:08:f6:a4:92:1e:02:2b:d5:
32:5f:69:a8:90:44:0a:3b:76:39:35:2d:c4:50:81:13:eb:8f:
d6:0b:68:1f:c3:81:13:18:07:68:76:aa:c7:d3:cc:78:a3:5a:
66:d9:93:a7:78:b2:99:ec:6f:5a:40:6c:c7:d5:57:22:31:a4:
68:da:74:2d:44:68:92:74:f8:68:d6:ba:2e:27:18:4f:a0:8d:
fa:44:13:24:9c:74:75:9d:cd:43:50:8b:e1:26:34:49:d9:00:
05:8e:9f:81:93:38:e6:fa:02:8c:1a:8c:e7:ee:ca:93:b8:b0:
a6:5d:67:8e:f9:10:14:b3:53:8d:76:7b:27:89:04:81:27:74:
bd:dc:71:8b:a4:ab:dc:15:4e:8c:91:fe:16:44:e1:5e:dc:31:
ae:2d:80:46:13:2c:94:d9:93:b2:da:14:56:85:44:52:0b:f8:
5e:1b:87:15:da:da:51:79:fd:d3:3e:0a:a7:e6:fc:93:7d:96:
6b:fd:9e:3d:cf:dd:8c:b9:b4:dd:a7:72:13:a0:d4:df:bb:fc:
03:59:dd:77:0f:68:d4:4a:11:5b:38:12:f2:98:1e:a0:25:b9:
0b:fa:02:b0:a1:fe:bd:b8:61:9f:b9:f5:0b:10:18:d1:dd:1b:
3b:e4:05:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:34:45 2025 by rpki-client