Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa
File: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (raw, json)
Hash identifier: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=
Subject key identifier: B8:47:BB:CB:11:33:C0:1A:B1:39:D8:B2:EA:45:B9:2B:66:A4:48:C4
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 0194252162402C2C5CE2FDBF20C2D148664D
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197738
IP address blocks: 109.197.166.0/23 maxlen: 24
176.97.56.0/21 maxlen: 24
192.162.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:62:40:2c:2c:5c:e2:fd:bf:20:c2:d1:48:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b847bbcb1133c01ab139d8b2ea45b92b66a448c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:d1:2b:72:f9:11:b0:c7:85:36:1c:82:ca:
c1:12:1b:52:79:ce:fb:ec:a9:ce:00:10:8a:35:30:
7f:02:1a:6f:0b:13:5f:cc:ed:75:a5:96:3f:18:ef:
7f:37:2d:13:54:f8:39:6d:c7:a3:78:7c:9b:33:ce:
51:fb:c0:40:f6:4c:97:b9:46:d6:e2:76:72:17:a1:
97:95:1d:fb:0d:13:2a:a1:30:cd:a5:55:72:d9:fc:
f9:61:27:2e:7b:4d:04:7c:4c:9b:4e:71:a7:47:8c:
9f:49:8e:69:93:13:c1:c5:45:94:7e:f8:18:5c:e2:
82:38:87:e1:34:f5:8e:4b:05:12:47:7a:1c:bb:d0:
b3:cc:42:71:aa:12:72:5c:40:db:86:fb:b9:46:47:
1e:ad:56:75:ff:55:b8:28:8b:6d:02:f6:f3:56:bf:
ed:1d:f9:8d:65:79:79:59:89:79:94:3f:73:22:48:
47:b7:d9:a5:56:cd:97:36:86:c2:91:13:d9:c0:eb:
a9:7a:c4:f0:40:11:f1:64:08:ee:87:62:f4:0c:45:
c6:67:d3:91:b4:e3:07:75:7e:96:63:47:7d:6d:33:
c6:fa:9c:80:46:c8:7d:92:19:92:a7:5b:94:86:5a:
c8:50:be:e7:02:a2:9f:5b:6b:aa:db:ff:97:ae:b1:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:47:BB:CB:11:33:C0:1A:B1:39:D8:B2:EA:45:B9:2B:66:A4:48:C4
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.166.0/23
176.97.56.0/21
192.162.208.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b3:2f:17:c1:e4:14:7f:47:37:88:7e:fe:a1:14:92:c9:ee:
b4:e8:46:4f:31:56:6e:3f:1d:08:62:78:1c:35:ab:32:5b:61:
82:0b:46:71:a4:f0:74:bc:8e:ae:d0:6b:35:58:bd:99:da:0e:
ca:c8:76:b1:58:c1:86:d7:dc:a2:ad:1a:82:5a:02:74:6f:8c:
66:f4:09:70:59:ed:55:bd:27:94:0a:76:01:68:ff:e3:2a:17:
76:ba:35:68:84:c0:1b:82:db:96:60:bb:34:ab:50:03:2b:b6:
33:e6:5e:0f:18:23:e9:fb:86:7b:c8:c7:17:8e:c2:c3:70:91:
62:b1:cf:94:72:bd:17:9f:15:ce:01:cb:f9:e4:eb:0b:cd:ef:
5a:cb:4b:9b:79:85:93:5c:88:06:0b:96:f0:4d:b2:eb:7a:1f:
15:88:46:c3:24:1e:6b:83:5e:cd:7c:dd:58:14:d3:93:c8:f8:
41:2c:83:13:4c:ba:ab:66:fe:a2:78:9f:7e:21:e1:a4:c3:c9:
09:38:ac:4c:3b:cd:4d:9f:e0:9d:69:4a:a0:ba:1f:25:f8:85:
94:68:34:e1:f5:ec:8a:b6:1c:a2:8c:8d:8d:2b:10:32:5b:c6:
dd:72:7a:70:38:47:0c:35:29:ca:80:52:1b:bd:be:e8:c6:f7:
aa:b4:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:01:00 2025 by rpki-client