Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/uk-wtBacjbnmJtVJFKDyHc0Hc5I.roa
File: uk-wtBacjbnmJtVJFKDyHc0Hc5I.roa (raw, json)
Hash identifier: HApCgMYDLrukEiV9uvRZaOtEfZQVPrgBCSdgHoLxiLU=
Subject key identifier: BA:4F:B0:B4:16:9C:8D:B9:E6:26:D5:49:14:A0:F2:1D:CD:07:73:92
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019504A25701AA0FE7044483EBCC64463654
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/uk-wtBacjbnmJtVJFKDyHc0Hc5I.roa
Signing time: Fri 14 Feb 2025 13:25:02 +0000
ROA not before: Fri 14 Feb 2025 13:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 178.17.48.0/20 maxlen: 20
178.17.48.0/24 maxlen: 24
178.17.49.0/24 maxlen: 24
178.17.50.0/24 maxlen: 24
178.17.51.0/24 maxlen: 24
178.17.52.0/24 maxlen: 24
178.17.53.0/24 maxlen: 24
178.17.54.0/24 maxlen: 24
178.17.55.0/24 maxlen: 24
178.17.56.0/24 maxlen: 24
178.17.57.0/24 maxlen: 24
178.17.58.0/24 maxlen: 24
178.17.59.0/24 maxlen: 24
178.17.60.0/24 maxlen: 24
178.17.61.0/24 maxlen: 24
178.17.62.0/24 maxlen: 24
178.17.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:a2:57:01:aa:0f:e7:04:44:83:eb:cc:64:46:36:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Feb 14 13:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba4fb0b4169c8db9e626d54914a0f21dcd077392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:ec:35:5e:9e:3c:93:03:97:51:2d:c5:7b:
3d:43:14:bf:7b:8a:c3:c2:0b:be:7e:eb:9a:ca:e8:
d4:68:85:38:77:e4:4a:e8:38:39:4c:15:6e:06:7e:
48:62:e7:44:f3:e5:8a:cf:e4:95:84:ca:96:a9:41:
d7:f5:cd:a8:2a:ac:f3:97:2d:43:69:8d:86:92:fc:
1a:24:1e:84:ec:81:f5:9b:a0:52:1e:be:1c:4f:87:
9a:16:12:2f:94:2b:d7:67:fa:e0:02:61:d8:53:6f:
45:61:ee:56:69:6a:70:ab:fd:30:c7:4b:36:36:a4:
f5:f5:ed:1e:9b:d7:67:7d:f9:c8:d9:1b:67:48:2e:
88:b3:b4:2c:7b:6e:5a:f1:2e:fa:09:9f:a5:b0:34:
b7:ed:0a:1d:f1:45:de:dc:07:03:70:f1:d9:ae:60:
cb:7b:df:8c:d6:d8:fe:ac:99:1e:ab:ca:b2:f9:15:
d5:64:d8:9e:f3:91:39:59:b0:b9:33:33:cb:0c:41:
06:22:e6:8f:d1:69:4f:6f:ff:ed:33:fc:06:fb:32:
93:46:ef:d5:42:b8:3f:a1:fc:ec:2b:44:27:59:79:
c9:a8:d4:9c:b3:7a:47:5e:65:b0:c4:a1:c0:23:b1:
22:17:34:9d:4f:f6:fd:33:be:30:a5:b0:23:8c:20:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:B0:B4:16:9C:8D:B9:E6:26:D5:49:14:A0:F2:1D:CD:07:73:92
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/uk-wtBacjbnmJtVJFKDyHc0Hc5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:b3:89:46:d3:2d:32:36:f8:d9:5c:74:bc:cd:a0:8e:f5:7f:
a5:08:f6:e7:50:43:ce:47:00:06:d2:9e:8a:b1:c7:66:0e:81:
22:2d:a7:a6:c6:07:b2:e4:b2:be:69:8e:54:5a:81:59:01:88:
19:6a:fe:aa:2e:02:92:2e:28:6b:d8:26:e3:b7:ad:47:ff:13:
a9:17:ba:fd:6d:6e:82:75:ce:b8:d2:49:ad:7c:26:a2:4d:38:
67:9e:91:0b:94:e4:6b:40:1c:d9:37:0a:24:35:b7:6a:cf:b6:
91:04:f4:48:d4:4f:89:f9:f0:ce:ab:f8:cf:e0:86:1f:41:83:
71:5e:0d:19:0a:24:1b:c0:c2:c0:cf:8e:93:d8:cb:49:6d:cc:
9a:a1:cd:44:68:6a:d3:72:04:f9:9c:02:2e:ed:ef:da:9e:78:
a8:07:e8:3d:86:80:6a:f2:e6:23:73:e3:ee:7e:bb:10:88:65:
26:23:4d:03:40:3b:e6:db:d0:7a:85:2e:dd:c1:6c:67:5b:97:
d5:4f:95:14:37:a0:b2:3a:6e:46:37:fd:a9:44:11:5d:e6:3d:
f2:97:e7:34:14:59:7a:34:8a:36:47:67:3e:e8:d1:f9:60:18:
61:40:98:80:5a:c5:82:ec:f2:78:14:03:f4:37:ec:76:dc:c3:
45:27:e1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:04:27 2025 by rpki-client