Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/ubC4YR8LUreDrke7vt8D90oUEcs.roa
File: ubC4YR8LUreDrke7vt8D90oUEcs.roa (raw, json)
Hash identifier: LCwRufW+WvIFqYnHC7mj/baN3D6jpURUt0hIyn+G++0=
Subject key identifier: B9:B0:B8:61:1F:0B:52:B7:83:AE:47:BB:BE:DF:03:F7:4A:14:11:CB
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 0196B3FAF5AD233301B9E818DB8FC0CBF415
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/ubC4YR8LUreDrke7vt8D90oUEcs.roa
Signing time: Fri 09 May 2025 07:38:10 +0000
ROA not before: Fri 09 May 2025 07:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214274
IP address blocks: 185.243.160.0/22 maxlen: 24
2a09:900::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:fa:f5:ad:23:33:01:b9:e8:18:db:8f:c0:cb:f4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: May 9 07:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b0b8611f0b52b783ae47bbbedf03f74a1411cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:31:b7:66:f6:bc:57:22:85:6a:56:b9:6b:
50:a1:6e:4a:08:51:72:50:29:e8:bc:b8:ae:47:af:
2d:51:c7:b5:80:85:c7:9c:a5:12:5c:d0:55:c8:2e:
5c:20:83:db:79:d4:53:f4:cc:d3:97:81:1a:68:4c:
36:4f:20:52:ab:3b:1b:53:9c:46:40:73:b8:70:b7:
64:59:97:63:e5:75:a5:4b:82:04:0c:62:81:6e:c5:
d9:70:ac:90:9e:c4:2d:cb:34:0f:9f:d0:50:08:cd:
74:02:ab:bb:2f:e7:1b:7f:e4:80:2f:8a:99:aa:4c:
a9:01:6f:c9:31:20:fa:5d:14:18:90:96:d0:40:17:
c4:62:33:b0:d3:7a:66:76:f1:14:39:cc:1d:c3:95:
7c:10:14:ad:a1:ea:a0:29:e8:15:02:82:18:05:c2:
59:3b:aa:de:8e:47:69:c9:c6:90:a9:c4:41:28:e4:
0c:c5:37:e0:c1:0a:f5:6a:4d:d6:48:24:30:71:f2:
93:a4:3b:6c:37:41:0f:dd:69:61:85:d7:04:bf:7e:
22:ec:00:40:1b:58:28:fb:d7:dd:32:0f:1a:7b:5e:
43:cc:c9:34:da:3c:a3:08:04:ae:cd:f3:3f:73:13:
d7:ba:a3:4b:55:33:be:ed:c5:8a:30:0c:f3:b8:85:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:B8:61:1F:0B:52:B7:83:AE:47:BB:BE:DF:03:F7:4A:14:11:CB
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/ubC4YR8LUreDrke7vt8D90oUEcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.160.0/22
IPv6:
2a09:900::/29
Signature Algorithm: sha256WithRSAEncryption
6b:ef:b8:7f:ab:0d:9c:c2:fd:1e:7f:ba:59:a4:45:c6:6a:65:
95:06:1f:91:94:bf:4b:28:66:9d:ba:53:92:b4:10:40:15:3e:
c2:2f:34:03:1a:22:f6:12:00:33:e7:a8:5b:94:f6:7d:a6:63:
bb:b3:da:0b:40:86:67:bb:48:85:5f:a1:a1:17:f8:c2:b1:a5:
d4:11:37:1e:ff:60:34:2d:42:f0:94:57:cb:0a:92:d1:9c:58:
d6:ca:32:ec:59:b1:cb:4c:61:44:5c:e7:a0:39:d5:f6:68:4e:
8b:2e:e6:f3:90:0c:e8:43:53:53:22:15:56:ac:3e:67:7c:dd:
28:e9:ee:a8:a0:f6:b5:80:56:9d:f8:44:25:95:6f:14:e3:bc:
12:6d:54:eb:f1:15:2a:cb:9c:e7:be:cc:69:25:14:23:cb:af:
02:b3:f0:ec:0a:a3:f5:c8:fe:81:ec:9b:8d:0b:a8:9e:c0:7a:
e1:9e:a8:21:91:bd:fb:46:ba:c5:6d:cb:f3:4a:d1:39:a4:72:
80:e6:8a:fd:31:3e:83:b8:a5:c9:32:35:98:4a:94:ba:5c:36:
78:1f:d6:93:9c:72:e2:5a:fb:00:6f:cd:c1:ba:e3:df:f3:d6:
b6:b9:0e:80:ec:cc:1b:6b:82:92:14:46:32:79:ba:df:53:5b:
db:80:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:12:38 2025 by rpki-client