Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/UpM_9nRhN5sEo1jLWob4fYkRieQ.roa
File: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (raw, json)
Hash identifier: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=
Subject key identifier: 52:93:3F:F6:74:61:37:9B:04:A3:58:CB:5A:86:F8:7D:89:11:89:E4
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019423D7F615EC7ED709EA09E55B6541C01C
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/UpM_9nRhN5sEo1jLWob4fYkRieQ.roa
Signing time: Wed 01 Jan 2025 21:49:03 +0000
ROA not before: Wed 01 Jan 2025 21:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.161.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f6:15:ec:7e:d7:09:ea:09:e5:5b:65:41:c0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Jan 1 21:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52933ff67461379b04a358cb5a86f87d891189e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:83:6f:ed:63:34:98:ab:44:d8:1b:7d:5a:
34:08:e8:ac:c1:64:f2:65:46:78:ce:42:24:1d:8c:
b0:0c:fb:2f:22:a6:cd:bb:ce:27:8e:52:38:e2:68:
c3:8b:ad:c8:da:8b:b1:9c:11:7f:d7:48:a2:ca:1a:
ba:3e:23:06:e9:9d:d7:6b:ed:6b:9a:ab:47:d0:fb:
a2:5b:36:b3:f5:f0:80:e7:21:c8:fc:51:52:92:e0:
f6:26:64:51:be:74:c1:31:3a:2a:03:5e:8f:32:68:
f4:c7:a3:d8:57:63:b7:e6:d8:c8:8e:63:0e:28:bd:
d7:95:07:bb:ff:f0:19:9a:04:fe:4d:16:0d:eb:60:
6b:98:58:9f:0d:c3:be:44:ac:d2:b8:0f:75:db:0f:
3e:c8:d1:b7:13:bf:4f:aa:de:cb:46:d1:e2:52:70:
15:d2:b4:a9:67:dc:2f:5d:df:0a:f5:4a:f9:db:45:
df:ae:8e:d8:a5:41:bd:bb:63:d4:05:43:d1:45:2d:
93:61:1f:04:3d:b7:06:84:03:3c:7b:e1:7e:51:28:
19:bd:26:89:d2:a8:c7:6b:63:1e:36:21:0a:a4:63:
f4:26:32:bf:e5:36:73:c2:91:0a:c2:19:7d:7b:b2:
16:4a:21:cb:f9:a8:68:bd:6f:3b:03:14:81:7a:a7:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:3F:F6:74:61:37:9B:04:A3:58:CB:5A:86:F8:7D:89:11:89:E4
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/UpM_9nRhN5sEo1jLWob4fYkRieQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.204.0/22
Signature Algorithm: sha256WithRSAEncryption
12:4e:93:53:7d:ef:1b:b9:76:22:e8:fc:89:2d:e7:5d:e9:87:
e4:36:32:3a:52:84:c8:43:90:bc:5b:2a:e1:9c:e9:eb:96:a7:
3a:6f:e9:da:96:6a:21:fc:53:bf:bd:1f:36:6a:ce:7a:d8:81:
cb:f6:a8:7c:a8:0c:79:a2:89:c6:b7:5a:01:2f:9b:2c:43:65:
1b:04:4c:69:91:51:65:eb:25:c3:b9:f8:ec:7b:94:06:aa:a4:
2b:b9:10:94:50:69:9c:b6:cb:a0:ff:64:35:94:6b:44:fe:e3:
26:7a:53:c0:63:fa:d0:0e:4c:69:86:2f:86:43:b1:b3:8b:23:
49:2f:02:5d:31:63:bb:f1:28:39:bf:e8:06:3e:5d:e4:85:01:
1c:e7:65:7e:e6:f3:84:ee:6e:ab:1c:00:6e:5d:0c:b8:84:04:
60:f7:f3:c6:9a:ab:86:e3:9a:b6:89:60:b8:df:8a:03:b0:49:
e4:99:25:38:01:fc:93:b2:bb:1b:d5:00:53:63:38:7a:29:c7:
7a:1c:a0:6f:37:58:59:c7:60:97:1c:45:37:38:4f:3d:d3:32:
f9:21:60:97:19:0d:5a:2d:d2:42:28:27:52:55:c4:67:4a:6f:
22:c9:c5:2c:1d:8a:ea:33:2c:4a:29:ce:68:20:13:e3:38:9e:
7c:93:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:30 2025 by rpki-client