Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uzb7gioJO4YNs8sQup9_dP25XVA.roa
File: Uzb7gioJO4YNs8sQup9_dP25XVA.roa (raw, json)
Hash identifier: yAGpq0gRtBFFgRvgL4slfeeTA/NNPXGPfu+F1s2a3nc=
Subject key identifier: 53:36:FB:82:2A:09:3B:86:0D:B3:CB:10:BA:9F:7F:74:FD:B9:5D:50
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274864CE24491B33626BA68BA63D77C8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uzb7gioJO4YNs8sQup9_dP25XVA.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 193.181.193.0/24 maxlen: 24
193.235.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:64:ce:24:49:1b:33:62:6b:a6:8b:a6:3d:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5336fb822a093b860db3cb10ba9f7f74fdb95d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:40:2b:c7:37:e2:b5:b7:3b:7d:39:02:6f:
5c:ae:ba:da:3e:6e:2f:00:87:cf:4c:af:e8:9d:15:
22:2d:46:eb:6a:26:8f:a5:02:c3:63:dc:56:92:47:
ff:9b:58:85:02:d8:d9:43:41:d3:50:40:99:23:7d:
e9:4c:d2:46:52:5a:1b:03:bc:92:48:d9:76:a2:58:
68:88:9d:f9:d2:ab:b4:ff:b2:1e:bb:d4:a8:1c:77:
c3:45:30:32:a6:81:13:cf:09:f4:76:87:7c:86:6b:
ae:13:f0:53:af:1f:08:6a:8b:78:df:1e:d6:99:ea:
1a:0f:1a:ce:b2:56:4f:1d:ed:0a:e4:0b:87:8d:87:
a7:ee:32:50:0c:c7:4f:1e:dd:1d:5d:7d:85:26:a8:
11:51:93:db:f8:98:58:37:00:68:73:cc:0b:fe:4a:
7e:cd:29:c2:1e:e1:e6:1a:ac:2b:55:1a:9e:2d:43:
59:da:a4:c7:9e:4f:85:7d:76:37:07:79:42:2a:ca:
c7:c5:52:3a:22:aa:98:96:bd:8c:b9:28:3c:7d:7d:
d1:8d:89:33:a7:0b:96:f0:a5:30:e9:a0:dc:98:b2:
0a:ca:c5:e0:ba:49:fc:47:78:7c:a3:eb:94:9c:49:
2c:95:7a:bc:4b:78:ab:3e:72:d9:af:72:09:5a:2b:
c6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:FB:82:2A:09:3B:86:0D:B3:CB:10:BA:9F:7F:74:FD:B9:5D:50
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uzb7gioJO4YNs8sQup9_dP25XVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.193.0/24
193.235.32.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:57:17:6f:a2:e6:be:f1:d7:97:c2:7c:12:44:64:f4:1f:20:
85:c2:b1:72:7f:a2:c5:50:9b:ec:27:8a:87:c6:3a:57:89:6d:
49:be:17:75:b4:6c:43:71:b4:f3:a0:5e:4f:85:6d:04:e4:75:
f6:b6:41:6b:72:b8:9e:5e:8c:5c:12:25:69:3b:46:0d:75:03:
a0:58:0a:57:6f:30:6a:58:11:0e:df:dc:18:fb:44:f7:f2:44:
f9:9b:39:38:27:a3:72:42:4e:38:e3:c3:2e:d7:1e:5a:32:67:
b9:00:c1:e9:19:3c:5c:27:52:59:3f:77:06:ca:97:3b:4f:71:
51:21:24:79:83:ef:d4:62:3f:dc:b5:4c:cc:35:0c:41:c4:73:
91:54:54:13:90:1b:f3:3f:db:34:13:b9:a9:41:ba:af:32:65:
41:41:12:6d:ce:67:0b:18:23:16:85:d1:91:5b:6c:9a:71:9c:
63:d4:f7:8d:b7:15:7e:c5:8e:55:09:74:f3:1b:8f:20:3c:d3:
fd:36:5b:48:bd:a5:f0:91:e9:30:8e:89:3c:6d:ce:9e:cd:17:
f1:da:1d:4c:13:22:55:15:6d:c4:8f:33:fe:e1:68:5f:c3:27:
66:bd:a0:3c:9e:b3:3f:0c:3c:d4:60:48:2b:5f:67:06:0f:b4:
15:16:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:42 2025 by rpki-client