Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uMzwPE2qeGlD0Vfu3RYZfwTgmC8.roa
File: uMzwPE2qeGlD0Vfu3RYZfwTgmC8.roa (raw, json)
Hash identifier: MkTxz8rGPWU08AVGVJx42WS9HjxefjaljMFs5fArwtk=
Subject key identifier: B8:CC:F0:3C:4D:AA:78:69:43:D1:57:EE:DD:16:19:7F:04:E0:98:2F
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B40D2E19CB899A51CE09B2475031
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uMzwPE2qeGlD0Vfu3RYZfwTgmC8.roa
Signing time: Thu 09 Jan 2025 09:28:21 +0000
ROA not before: Thu 09 Jan 2025 09:28:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57705
IP address blocks: 78.142.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b4:0d:2e:19:cb:89:9a:51:ce:09:b2:47:50:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8ccf03c4daa786943d157eedd16197f04e0982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:e0:dc:2d:11:81:51:ed:a4:df:81:64:6c:
ab:14:9a:05:b0:45:af:c4:4a:ca:35:15:56:6e:95:
70:c5:7d:49:58:e3:66:c7:64:83:a7:78:ba:88:e6:
99:f6:ad:af:fc:3e:b1:a5:7d:56:12:de:3e:94:0e:
19:47:17:19:68:47:66:4f:9e:8c:3d:4d:eb:92:b5:
fe:8a:a5:9d:67:32:27:53:47:d3:69:bb:90:1a:82:
eb:96:bc:66:99:f4:ff:92:dd:98:7c:8b:b4:4d:99:
2b:ac:f3:0a:f2:f5:0e:fd:66:65:1c:31:62:9d:a4:
a3:cf:ff:58:6d:cc:41:a4:b9:17:16:e7:1c:36:5f:
06:b6:41:b9:01:9c:7d:d7:b1:25:b2:ff:07:39:f3:
64:4d:bb:f6:50:8b:ae:aa:15:c1:f6:b2:54:a6:4b:
fc:4a:32:e8:89:95:ed:31:df:01:c6:da:b7:45:4a:
b5:11:d8:0a:52:b7:7d:44:22:c9:26:4a:92:25:72:
bc:31:7f:ae:50:11:f3:70:9b:dc:40:63:13:50:d2:
16:c9:1f:49:28:4f:a9:08:f9:39:3e:95:8c:0a:58:
a3:62:6b:92:97:db:b9:b0:56:ca:60:33:3c:46:72:
08:99:63:34:d6:db:c8:b2:58:4a:17:29:b6:7d:25:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:F0:3C:4D:AA:78:69:43:D1:57:EE:DD:16:19:7F:04:E0:98:2F
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uMzwPE2qeGlD0Vfu3RYZfwTgmC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.19.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e3:7c:bd:27:82:fe:ec:68:13:58:df:29:27:41:92:98:3b:
09:a9:8d:2d:25:96:5a:bb:72:9f:ab:ec:bb:0c:0c:02:74:ba:
0e:2e:6b:6c:34:b8:2c:57:b6:5d:90:5d:b0:d2:1e:53:e3:27:
00:0e:d4:3a:a0:e0:cf:aa:63:36:9e:b9:d2:5f:67:c9:f1:56:
0e:dc:9e:c2:fd:f2:e8:3e:c6:e4:a8:d5:27:93:14:d4:59:ba:
a3:c0:ba:0c:48:27:3a:bc:f8:7d:f4:5c:b3:ba:ca:f2:e0:49:
48:a2:ba:b2:0d:19:aa:92:0f:48:40:20:ba:fb:f4:a3:97:c4:
e9:3c:71:d5:50:a8:c9:64:c6:26:55:60:6f:1e:dc:3d:2b:d9:
15:1d:e5:6d:58:df:b5:71:16:4f:3d:a7:d7:d9:1b:9a:a3:4d:
69:15:74:ba:28:ae:6f:1c:c7:87:c6:22:67:c4:67:a3:9c:aa:
e5:4d:14:06:1b:de:ff:a4:28:71:ac:b3:4a:54:70:97:3c:40:
95:0f:88:b7:cf:ff:b9:5b:97:ac:45:bc:25:db:a0:45:0e:54:
5d:a5:9b:17:8a:91:cd:81:99:9c:71:13:4f:2b:f7:ab:b8:bf:
9c:70:89:ca:a0:5d:93:61:4d:70:76:66:51:d9:c5:2b:9d:8e:
f5:0d:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:12:24 2025 by rpki-client