Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/Uqk6ZpOTGE36LT5fcwe3jUUK8bs.roa
File: Uqk6ZpOTGE36LT5fcwe3jUUK8bs.roa (raw, json)
Hash identifier: 3ocr9qZ6ri2OW2BEWPNTcZs9jR00BhDPO+YzVSk3MLY=
Subject key identifier: 52:A9:3A:66:93:93:18:4D:FA:2D:3E:5F:73:07:B7:8D:45:0A:F1:BB
Certificate issuer: /CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Certificate serial: 01941F8C8D923D484835E947F1806940E3A9
Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/Uqk6ZpOTGE36LT5fcwe3jUUK8bs.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199588
IP address blocks: 185.7.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8d:92:3d:48:48:35:e9:47:f1:80:69:40:e3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52a93a669393184dfa2d3e5f7307b78d450af1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:f0:67:51:a1:c9:e8:62:6b:65:80:5f:1b:
77:9d:49:cc:cb:83:3d:6f:86:90:4e:b8:de:80:17:
87:68:ac:20:2c:39:79:dc:61:37:d4:00:69:01:13:
04:7f:13:09:8a:4a:a1:63:61:10:2b:d4:05:d0:c0:
f5:c9:fe:ea:25:fc:5e:30:aa:41:fa:21:29:a4:af:
58:00:c4:3f:a9:9b:52:61:c8:29:25:f8:78:c0:e7:
f2:3c:a7:85:23:e1:e9:a6:6a:a6:c5:fb:ca:36:57:
6a:55:05:aa:cc:d1:28:56:95:27:47:da:03:72:1a:
43:c0:34:9e:be:80:8e:2f:23:f1:c5:7b:f2:3e:f0:
9c:90:ae:af:9f:e8:61:6c:92:9f:b6:6c:cb:7f:62:
69:e1:1d:b4:aa:c3:76:84:07:25:54:bf:c3:80:e4:
15:fb:38:00:64:92:f6:bd:79:13:9a:7e:2b:a2:7b:
48:80:75:c1:94:26:fa:4d:7a:cf:eb:ed:b4:99:a0:
69:09:16:88:81:55:49:5f:59:4c:26:ff:8e:86:b0:
e1:32:74:5a:b5:b6:dd:66:5b:67:ba:6a:31:4f:07:
08:3b:87:b1:70:01:6b:fc:1e:10:e3:f8:ce:6b:38:
a8:18:fa:da:69:cb:5d:c2:c1:17:72:f5:de:ba:6b:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:3A:66:93:93:18:4D:FA:2D:3E:5F:73:07:B7:8D:45:0A:F1:BB
X509v3 Authority Key Identifier:
keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/Uqk6ZpOTGE36LT5fcwe3jUUK8bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.184.0/22
Signature Algorithm: sha256WithRSAEncryption
86:94:02:d7:3e:c7:54:46:0e:6a:22:d2:b7:fa:29:33:c5:21:
c7:f6:ee:96:ec:cc:f0:00:fc:3c:85:46:87:cd:4b:6a:2d:4f:
1e:4e:cd:c3:a4:c7:9e:c5:32:cd:3d:12:30:ec:1a:68:f0:92:
70:c5:b2:17:eb:19:08:e6:9b:32:4f:2c:be:4f:40:d0:77:44:
b8:61:50:60:07:37:60:d5:1f:4d:28:68:ce:43:2b:0f:f5:5e:
88:5e:ad:16:38:9b:d8:d6:90:f3:8c:61:70:7d:fe:9f:35:1b:
dc:e7:72:6a:e0:f1:f4:88:d7:8a:a4:3e:45:2b:4e:17:32:38:
1e:6e:39:06:11:1f:99:5e:aa:06:14:ff:e6:22:3c:cf:55:8f:
e2:c1:47:82:fd:43:6d:3d:4b:9f:89:fb:ca:ee:c0:13:dd:01:
a6:59:04:46:74:27:b2:12:a4:de:ed:40:bb:b5:fd:f0:7d:d1:
f7:16:d1:2f:d5:d8:47:97:89:3c:87:53:2e:f9:86:6e:6b:ad:
54:4b:53:5e:3d:da:5d:77:53:75:c9:05:5b:25:8f:d2:8b:a9:
be:e6:c5:af:e6:97:4f:4d:84:fb:7f:4e:8d:bb:e1:f7:49:0a:
b2:9f:7a:1c:71:31:ce:53:4c:ac:07:e4:26:6d:2c:bf:d8:48:
67:ae:d5:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjI2SPUhINelH8YBpQOOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDliYWEwMjIxOTQyZWRmZTRiM2E5YTU3MDgyOTVjMDQ0
MTZlODAwHhcNMjUwMTAxMDE0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmE5M2E2NjkzOTMxODRkZmEyZDNlNWY3MzA3Yjc4ZDQ1MGFmMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+vwZ1Ghyehia2WAXxt3nUnMy4M9
b4aQTrjegBeHaKwgLDl53GE31ABpARMEfxMJikqhY2EQK9QF0MD1yf7qJfxeMKpB
+iEppK9YAMQ/qZtSYcgpJfh4wOfyPKeFI+HppmqmxfvKNldqVQWqzNEoVpUnR9oD
chpDwDSevoCOLyPxxXvyPvCckK6vn+hhbJKftmzLf2Jp4R20qsN2hAclVL/DgOQV
+zgAZJL2vXkTmn4rontIgHXBlCb6TXrP6+20maBpCRaIgVVJX1lMJv+OhrDhMnRa
tbbdZltnumoxTwcIO4excAFr/B4Q4/jOazioGPraactdwsEXcvXeumunIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFKpOmaTkxhN+i0+X3MHt41FCvG7MB8GA1UdIwQY
MBaAFHHZuqAiGULt/ks6mlcIKVwEQW6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RtNm9DSVpRdTMtU3pxYVZ3Z3BYQVJCYm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84YzNmYjgtNDBkZi00ZDVkLTkzNjMt
NTA0NzI3YTUwYjhlLzEvVXFrNlpwT1RHRTM2TFQ1ZmN3ZTNqVVVLOGJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS84YzNmYjgtNDBkZi00ZDVkLTkzNjMtNTA0NzI3YTUwYjhl
LzEvY2RtNm9DSVpRdTMtU3pxYVZ3Z3BYQVJCYm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQe4MA0G
CSqGSIb3DQEBCwUAA4IBAQCGlALXPsdURg5qItK3+ikzxSHH9u6W7MzwAPw8hUaH
zUtqLU8eTs3DpMeexTLNPRIw7Bpo8JJwxbIX6xkI5psyTyy+T0DQd0S4YVBgBzdg
1R9NKGjOQysP9V6IXq0WOJvY1pDzjGFwff6fNRvc53Jq4PH0iNeKpD5FK04XMjge
bjkGER+ZXqoGFP/mIjzPVY/iwUeC/UNtPUufifvK7sAT3QGmWQRGdCeyEqTe7UC7
tf3wfdH3FtEv1dhHl4k8h1Mu+YZua61US1NePdpdd1N1yQVbJY/Si6m+5sWv5pdP
TYT7f06Nu+H3SQqyn3occTHOU0ysB+QmbSy/2EhnrtW8
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:48:42 2025 by rpki-client