Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/U18SPSBUf3dwumuu9FyNIqHDXLw.roa
File: U18SPSBUf3dwumuu9FyNIqHDXLw.roa (raw, json)
Hash identifier: V5VQUyBsrAGopRO8qXTISlE1ORxyujJueAvt5anuNoc=
Subject key identifier: 53:5F:12:3D:20:54:7F:77:70:BA:6B:AE:F4:5C:8D:22:A1:C3:5C:BC
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 01942368FAF08EDD08F7B72FBBE78858F9A9
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/U18SPSBUf3dwumuu9FyNIqHDXLw.roa
Signing time: Wed 01 Jan 2025 19:47:50 +0000
ROA not before: Wed 01 Jan 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 82.119.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fa:f0:8e:dd:08:f7:b7:2f:bb:e7:88:58:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 1 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=535f123d20547f7770ba6baef45c8d22a1c35cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:87:06:34:70:c3:a9:1b:5a:97:f7:91:87:
3a:25:e5:44:fd:7e:6a:0c:76:0c:ef:49:3f:3a:51:
ff:ed:e1:8e:f5:3d:aa:2a:8a:4c:d9:f8:16:2c:61:
29:f8:6c:5d:12:53:64:f2:9d:38:39:b9:b1:6a:a4:
0f:e6:94:33:95:80:10:09:95:1c:e6:be:a8:ea:67:
0c:c1:5b:1b:8e:d5:c2:e0:7b:b6:e3:cb:ff:6e:3a:
23:f9:38:34:97:49:84:4a:cf:ff:e9:69:ed:1f:7b:
38:37:5b:1e:11:e0:79:b9:c1:3d:fc:7f:40:6a:47:
a9:0f:fd:fd:2a:de:28:ec:43:fa:57:f5:6a:da:5d:
1e:c7:3c:f5:a2:72:55:9b:12:1e:dd:f5:99:a8:cf:
16:1b:15:27:04:cc:dc:6d:0b:a5:55:f2:3e:14:72:
1e:b2:4c:ee:d3:c8:a5:8c:3b:f4:29:ac:de:da:2b:
25:f9:bf:9a:00:f3:cb:41:ce:c7:9c:44:d9:0e:22:
b3:5c:88:66:b2:51:07:6a:08:46:66:80:0b:c2:71:
9f:b7:d2:12:ab:b5:d5:ae:67:3b:f0:d1:07:e9:8d:
25:cc:cc:4a:cb:f7:4d:0a:7f:55:f4:6d:c7:c0:0f:
38:c4:a2:ef:64:5d:c1:1e:17:7d:44:57:b6:61:3c:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5F:12:3D:20:54:7F:77:70:BA:6B:AE:F4:5C:8D:22:A1:C3:5C:BC
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/U18SPSBUf3dwumuu9FyNIqHDXLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:35:28:0e:4a:c6:bc:c1:5e:29:9e:ea:58:6c:5e:ac:57:b2:
e8:ed:16:aa:52:16:ad:9a:c0:b0:e5:de:ff:b9:91:bd:92:65:
97:cf:05:7a:34:99:bf:84:f7:17:ef:11:ea:67:dc:46:b2:d3:
c8:a6:79:e1:f5:a5:fb:c7:1f:60:aa:8e:1d:70:0c:44:d5:8e:
d3:47:ef:55:da:0b:2d:c8:4e:93:c7:0f:fe:9e:d5:f2:70:88:
86:25:ce:f9:2f:8e:16:51:40:bd:d0:0a:54:27:c3:ac:51:85:
a0:1d:9f:46:31:e5:21:74:b4:96:65:41:15:03:8c:04:66:1b:
54:10:34:3b:f6:5b:ae:8a:92:40:39:41:d8:3c:85:08:66:ef:
6d:4c:06:81:81:45:0d:52:06:22:d3:16:4a:d8:39:41:25:23:
10:a2:ce:7f:40:80:a7:df:e9:75:2d:f6:8c:f4:b0:4a:51:7d:
ec:66:df:0c:ab:6c:2e:0e:ec:b1:9b:09:c3:01:c6:31:97:de:
e5:b7:c3:49:e0:89:ac:0d:4b:a7:a1:f7:9c:33:54:46:01:73:
bc:17:a6:fb:b1:1c:66:14:95:d7:dc:ad:ff:8e:e2:9c:2f:5e:
53:ab:f4:0f:f2:2f:35:23:9f:03:24:f4:c8:b8:03:bb:ea:6f:
5c:f3:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:05:38 2025 by rpki-client