Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/uADkX3srvSz7h5-6p6oWNf6171A.roa
File: uADkX3srvSz7h5-6p6oWNf6171A.roa (raw, json)
Hash identifier: JFtPLvs27wHExEiH+3v7Jikl9EHdIYjblSR25Lrk4HQ=
Subject key identifier: B8:00:E4:5F:7B:2B:BD:2C:FB:87:9F:BA:A7:AA:16:35:FE:B5:EF:50
Certificate issuer: /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial: 01941FFA6310F81D7CD5D404F00F4A085DF9
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/uADkX3srvSz7h5-6p6oWNf6171A.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202382
IP address blocks: 185.152.252.0/22 maxlen: 24
194.62.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:63:10:f8:1d:7c:d5:d4:04:f0:0f:4a:08:5d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b800e45f7b2bbd2cfb879fbaa7aa1635feb5ef50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:70:10:4e:4a:88:82:b6:8f:8b:de:f2:2e:
4b:41:98:a5:64:fc:a4:d3:d7:64:1d:d9:a6:0d:79:
19:25:cc:80:45:35:0b:6d:13:ab:9e:f8:28:8a:32:
a9:d2:5a:6d:0e:11:8e:b9:62:30:98:e8:81:53:96:
0c:f6:06:b5:e1:a7:f8:d0:9f:11:b0:43:39:d1:ca:
9e:a8:d8:56:72:34:e8:73:e1:cf:7f:f0:f0:ca:14:
68:97:f3:41:f3:5c:ce:f9:b1:4f:22:c8:b2:a2:93:
e9:42:1b:ba:ff:9b:97:67:f1:39:47:01:b3:59:3a:
5c:36:73:38:c7:bc:54:f1:60:af:b2:4a:f7:3c:40:
d3:64:a1:3c:f2:c3:93:bc:a5:a5:cc:c4:61:2f:07:
66:5f:46:fe:1c:41:26:c0:21:cf:51:f7:35:e5:03:
1c:2e:0d:27:b6:e1:86:34:a0:0c:cb:4b:8f:c7:b9:
64:f2:72:79:9e:be:bb:99:89:eb:53:74:d8:a1:52:
be:b9:e3:5f:88:6e:9b:bd:bc:d7:d7:dc:3e:28:c9:
e6:8c:ee:2a:cf:35:da:45:50:c6:82:1f:9b:0b:76:
c5:27:94:b1:76:24:63:77:d8:80:b3:3f:b1:bb:e5:
89:d0:1b:7c:7d:24:a2:9e:29:33:e7:b2:0f:9b:ab:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:00:E4:5F:7B:2B:BD:2C:FB:87:9F:BA:A7:AA:16:35:FE:B5:EF:50
X509v3 Authority Key Identifier:
keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/uADkX3srvSz7h5-6p6oWNf6171A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.252.0/22
194.62.200.0/22
Signature Algorithm: sha256WithRSAEncryption
05:05:94:5e:9d:d7:c7:e4:a7:95:e7:fb:17:af:06:01:b0:e1:
75:ef:7e:07:f7:00:a7:fe:be:81:02:81:a5:20:45:f5:c9:61:
70:f1:21:8d:a2:ca:59:28:99:03:ae:11:80:e9:f2:b9:b1:88:
08:92:09:9e:c5:41:f4:05:d2:18:70:12:28:bb:7b:9a:e7:0f:
a9:08:a0:e9:6c:6e:27:51:03:22:bc:05:96:81:c5:8c:cb:42:
d6:16:9e:9e:db:9d:65:f5:bb:4f:db:cb:ba:af:64:2a:67:e5:
a9:fc:a4:43:89:d3:eb:9b:33:b4:98:74:26:51:57:2c:c8:67:
7b:a9:b0:5d:eb:4c:77:37:fe:09:a4:68:44:60:ae:64:e4:be:
a6:d6:dd:37:cd:40:76:71:40:36:f5:01:c2:22:84:e6:c8:d7:
bf:20:a1:4c:22:a1:b0:f4:ff:ae:b5:d9:af:4f:06:d2:52:8c:
15:f0:3d:0e:dd:7b:ef:c9:e7:48:a5:16:ad:38:68:78:d5:01:
5c:d6:2c:bb:76:0a:d5:eb:3d:0c:5c:f9:bb:8f:69:6b:9d:a0:
28:20:8a:bc:75:3a:df:3f:04:88:48:6f:fb:c0:83:6b:b4:73:
d5:a1:cf:46:d0:6d:30:82:d1:0a:85:69:4b:01:f0:0d:dd:56:
bc:52:28:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:30 2025 by rpki-client