Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/u1FUL9P2Wkc4fYqdagqSagQaDdM.roa
File: u1FUL9P2Wkc4fYqdagqSagQaDdM.roa (raw, json)
Hash identifier: V3LfQzQEPdq88kGKzJvMGhfw6LsMIXH1yzOGmzYQ0Sw=
Subject key identifier: BB:51:54:2F:D3:F6:5A:47:38:7D:8A:9D:6A:0A:92:6A:04:1A:0D:D3
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 01942369D8C9ED4394CF66B1A7E16AB1B934
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/u1FUL9P2Wkc4fYqdagqSagQaDdM.roa
Signing time: Wed 01 Jan 2025 19:48:46 +0000
ROA not before: Wed 01 Jan 2025 19:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400696
IP address blocks: 185.102.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d8:c9:ed:43:94:cf:66:b1:a7:e1:6a:b1:b9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 19:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb51542fd3f65a47387d8a9d6a0a926a041a0dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:3f:ef:94:fd:b4:03:e1:6d:3b:e1:99:8e:
43:84:00:a8:da:31:56:6c:df:38:bb:49:40:00:23:
5d:33:7e:02:2e:3c:35:e4:30:26:b7:01:3f:05:1e:
72:19:8c:ba:5f:43:4e:27:fb:5b:cf:6a:03:75:9c:
0e:62:bc:0a:48:93:f1:e9:c9:79:64:5b:98:54:73:
e9:5a:d9:8d:da:b4:21:55:2e:7b:3d:cf:a2:98:5d:
5e:3f:f8:dc:1a:6d:da:63:ea:42:4f:1b:89:a0:4f:
0e:0b:8c:ad:c8:69:7f:f2:df:3d:6e:73:82:e3:ae:
cd:7e:d4:04:16:40:fb:44:82:4e:bd:09:44:fe:91:
5c:e4:a8:6a:03:1e:21:d5:47:85:2e:6f:7e:b2:e8:
b0:42:7a:a6:cf:a0:63:f4:74:9f:71:41:cb:fc:e5:
d9:c6:d9:d3:09:f3:91:94:7c:c8:a9:16:30:54:24:
ce:ae:ea:8d:a2:dd:1d:c4:4c:19:de:c4:1f:88:56:
ba:35:9d:4c:78:dd:49:58:c9:83:85:09:92:70:cb:
37:e7:50:26:e0:be:29:d9:45:72:c0:ca:e9:51:a6:
f0:60:93:07:74:6c:41:9b:31:bb:32:4f:3b:26:64:
a8:34:24:83:c9:bf:14:05:22:63:c1:d5:c5:dd:57:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:51:54:2F:D3:F6:5A:47:38:7D:8A:9D:6A:0A:92:6A:04:1A:0D:D3
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/u1FUL9P2Wkc4fYqdagqSagQaDdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.168.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a2:a3:b9:79:49:f2:dc:e2:1c:34:13:92:9b:05:87:dc:89:
04:8c:51:f5:65:a0:1e:ac:f0:d3:f3:10:d7:9f:06:7b:1a:c6:
47:34:b6:a3:49:50:b6:c2:c3:33:33:16:45:1a:d9:e8:2e:9f:
6e:96:a9:a0:d2:7b:7e:57:32:9b:98:2a:61:4b:bc:29:f3:8e:
fb:64:83:47:10:69:a0:f4:f5:15:ff:a2:e6:da:b2:cf:50:b2:
b1:03:8a:07:26:49:dd:58:d3:e2:7c:c7:6e:7f:06:2d:30:3c:
41:be:c1:ca:dd:7c:c7:b7:ef:0f:3b:29:fb:72:a3:1b:e2:55:
b0:1b:1b:a0:d7:f2:54:5e:6e:24:4c:02:fb:be:af:13:9f:0d:
98:fb:7d:42:99:38:66:da:54:64:f9:06:3b:e8:ad:56:8e:c4:
35:ae:03:89:9a:ef:3c:ca:9f:ed:0c:20:43:be:fe:bf:23:6b:
66:6e:fc:bc:ce:38:aa:d1:e5:2f:3e:f3:be:00:1a:7b:85:ca:
84:3b:c5:fb:b4:0d:4f:f8:0d:e9:d4:94:4c:72:56:be:fb:99:
9b:d2:5c:d0:bd:f6:0b:fb:35:46:87:12:a7:46:44:16:2e:8d:
83:26:86:da:dd:76:d3:70:ec:8d:96:60:f8:e8:be:a5:98:e2:
ef:51:7e:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjadjJ7UOUz2axp+Fqsbk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5
YmY3N2YwHhcNMjUwMTAxMTk0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjUxNTQyZmQzZjY1YTQ3Mzg3ZDhhOWQ2YTBhOTI2YTA0MWEwZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrk/75T9tAPhbTvhmY5DhACo2jFW
bN84u0lAACNdM34CLjw15DAmtwE/BR5yGYy6X0NOJ/tbz2oDdZwOYrwKSJPx6cl5
ZFuYVHPpWtmN2rQhVS57Pc+imF1eP/jcGm3aY+pCTxuJoE8OC4ytyGl/8t89bnOC
467NftQEFkD7RIJOvQlE/pFc5KhqAx4h1UeFLm9+suiwQnqmz6Bj9HSfcUHL/OXZ
xtnTCfORlHzIqRYwVCTOruqNot0dxEwZ3sQfiFa6NZ1MeN1JWMmDhQmScMs351Am
4L4p2UVywMrpUabwYJMHdGxBmzG7Mk87JmSoNCSDyb8UBSJjwdXF3VfygwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLtRVC/T9lpHOH2KnWoKkmoEGg3TMB8GA1UdIwQY
MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt
MzQ3YTBmN2M1YjA4LzEvdTFGVUw5UDJXa2M0ZllxZGFncVNhZ1FhRGRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4
LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWaoMA0G
CSqGSIb3DQEBCwUAA4IBAQBkoqO5eUny3OIcNBOSmwWH3IkEjFH1ZaAerPDT8xDX
nwZ7GsZHNLajSVC2wsMzMxZFGtnoLp9ulqmg0nt+VzKbmCphS7wp8477ZINHEGmg
9PUV/6Lm2rLPULKxA4oHJkndWNPifMdufwYtMDxBvsHK3XzHt+8POyn7cqMb4lWw
Gxug1/JUXm4kTAL7vq8Tnw2Y+31CmThm2lRk+QY76K1WjsQ1rgOJmu88yp/tDCBD
vv6/I2tmbvy8zjiq0eUvPvO+ABp7hcqEO8X7tA1P+A3p1JRMcla++5mb0lzQvfYL
+zVGhxKnRkQWLo2DJoba3XbTcOyNlmD46L6lmOLvUX5N
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:05 2025 by rpki-client