Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/UD9G2KurtNeaAxJdizQiQcSD0uc.roa
File: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (raw, json)
Hash identifier: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=
Subject key identifier: 50:3F:46:D8:AB:AB:B4:D7:9A:03:12:5D:8B:34:22:41:C4:83:D2:E7
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019420D64A77C940DE9F2DB3C0A6164CCC34
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/UD9G2KurtNeaAxJdizQiQcSD0uc.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35120
IP address blocks: 91.209.212.0/24 maxlen: 24
91.223.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4a:77:c9:40:de:9f:2d:b3:c0:a6:16:4c:cc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=503f46d8ababb4d79a03125d8b342241c483d2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:6e:7e:22:6f:d6:d6:fa:c7:89:9b:e2:0e:
a0:ae:58:19:f5:89:37:aa:0b:6b:5e:ad:29:ce:2b:
f4:fd:84:68:68:c4:5f:91:97:03:5a:b7:0e:43:ba:
37:52:43:24:cc:e5:69:e2:2c:0f:b8:bb:9f:e5:d4:
be:ab:e1:f5:70:76:2e:83:a3:52:54:31:b1:ed:a7:
cd:13:a6:6c:5a:d2:39:cf:d5:95:22:c4:05:3f:cb:
0b:bd:fd:37:5d:ac:04:d6:34:d4:b1:53:bb:69:c2:
11:77:c3:ed:ba:4c:d8:31:ea:62:0c:3a:4c:9b:6b:
02:8f:07:cb:6c:ca:a0:f7:ed:ba:7d:41:1b:4e:a5:
f9:0b:dd:d9:ab:25:84:aa:3c:c8:15:1c:c9:07:13:
af:39:ef:96:7d:75:13:27:d8:9f:8b:58:7f:83:4a:
62:00:e6:40:83:06:34:29:a1:00:eb:8a:ab:6c:52:
67:83:81:93:99:9a:ce:c1:43:a8:79:c7:88:f4:b6:
f2:a5:62:e6:5e:56:da:0f:a1:96:3b:6e:b3:e0:a1:
9b:a4:76:d4:df:04:72:62:7b:93:ad:76:fc:21:b7:
5b:d6:cd:18:a9:29:54:5e:a0:1b:a5:48:fa:32:10:
3c:3b:ae:8c:af:c8:b3:60:40:ec:f2:3f:fe:2a:6b:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:46:D8:AB:AB:B4:D7:9A:03:12:5D:8B:34:22:41:C4:83:D2:E7
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/UD9G2KurtNeaAxJdizQiQcSD0uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.212.0/24
91.223.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:25:6b:ac:50:36:67:9a:6d:9c:a2:d0:01:38:19:25:ed:f3:
1f:fe:8d:f5:b7:68:42:c5:e8:f6:28:66:4e:e6:09:6f:e9:73:
79:fe:91:f9:0f:f2:fc:7c:f7:af:0a:87:27:11:96:85:4a:74:
e1:db:35:3c:02:47:68:8c:6c:56:d1:cc:53:52:9a:12:2e:3e:
fa:16:07:85:0a:56:a2:33:de:ee:67:bf:a6:2f:ab:77:a7:0c:
9f:42:c2:32:c8:37:c4:39:f6:4d:48:a8:6f:73:29:2f:b7:6b:
4c:92:f0:16:07:4d:89:2d:2d:0f:d1:80:13:75:db:da:d0:89:
15:9b:d6:c3:88:ea:f8:61:37:06:f2:7f:3e:61:d0:40:00:12:
43:03:87:76:52:c4:ff:cd:be:73:4d:88:81:5f:9f:64:c7:37:
1c:76:f1:46:2e:f0:5e:73:8f:13:42:85:15:d0:46:cd:fc:14:
60:b9:43:eb:58:a2:a8:a1:e4:05:27:71:ab:f0:46:57:31:14:
9e:54:83:74:ad:aa:18:eb:05:70:c9:6a:5a:7d:62:a1:05:9c:
9f:f2:38:d8:2d:f6:bd:84:e9:99:9f:18:70:07:38:c3:f2:3e:
7d:a6:61:53:ff:49:8d:7d:8d:42:67:11:7c:7e:ee:2b:80:d1:
4c:b0:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:48 2025 by rpki-client