Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/UV-P_H7U_ZghmDFQbugvFGk8Rho.roa
File: UV-P_H7U_ZghmDFQbugvFGk8Rho.roa (raw, json)
Hash identifier: rLL2PRAgAL7amnAXMzDF6uWbk/cCk5kAorxzjbQE6+I=
Subject key identifier: 51:5F:8F:FC:7E:D4:FD:98:21:98:31:50:6E:E8:2F:14:69:3C:46:1A
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 0196A5C84F64A3EEDE6FB1F014CE5F0C0C22
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/UV-P_H7U_ZghmDFQbugvFGk8Rho.roa
Signing time: Tue 06 May 2025 13:28:10 +0000
ROA not before: Tue 06 May 2025 13:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42130
IP address blocks: 93.88.22.0/24 maxlen: 24
93.88.23.0/24 maxlen: 24
103.127.47.0/24 maxlen: 24
185.198.49.0/24 maxlen: 24
185.207.174.0/24 maxlen: 24
195.245.72.0/24 maxlen: 24
195.245.88.0/24 maxlen: 24
2a13:b2c0::/32 maxlen: 32
2a13:b2c1:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:c8:4f:64:a3:ee:de:6f:b1:f0:14:ce:5f:0c:0c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: May 6 13:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=515f8ffc7ed4fd98219831506ee82f14693c461a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:8a:0a:2d:62:6a:2a:38:74:06:bb:54:21:
f5:07:8e:41:a5:e7:c4:22:d8:31:9b:15:b5:f4:c3:
42:45:87:bb:ec:0c:d6:2d:28:a3:63:9e:1c:ee:07:
ad:00:a4:a0:20:bc:79:2a:75:23:a3:81:58:a1:fd:
b7:d2:a2:52:53:af:91:c5:d4:d4:66:9f:31:f2:02:
51:35:c6:5d:83:fb:19:ff:2a:07:42:a2:61:35:7e:
e6:0a:21:42:ec:cb:2e:d7:27:b0:8f:47:e3:b0:36:
84:b3:e9:49:ce:a0:1f:ac:88:c1:9f:ea:2e:d0:98:
38:97:b1:b5:48:5d:36:be:71:58:5f:6f:01:7d:b7:
8f:e0:d8:e2:21:2e:66:28:37:44:a9:7a:74:e2:6f:
d0:b7:1a:7c:38:b4:4d:1a:76:7a:dd:09:f0:e6:b6:
6e:ea:15:3d:16:54:18:93:17:f8:a7:2b:3e:57:28:
8a:14:f9:1b:4d:60:0e:e0:4c:3e:bf:d5:db:55:55:
e0:f6:d6:e5:fd:63:d7:5c:3c:05:19:c2:e8:8c:a0:
0a:60:90:61:a0:40:d7:c4:31:4a:0d:c6:df:49:ca:
a7:89:2a:44:c4:33:86:c7:83:df:bc:95:ec:89:b6:
d7:b6:74:7c:11:ef:ea:b6:93:8b:6f:87:f2:f7:08:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:8F:FC:7E:D4:FD:98:21:98:31:50:6E:E8:2F:14:69:3C:46:1A
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/UV-P_H7U_ZghmDFQbugvFGk8Rho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.22.0/23
103.127.47.0/24
185.198.49.0/24
185.207.174.0/24
195.245.72.0/24
195.245.88.0/24
IPv6:
2a13:b2c0::/32
2a13:b2c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
22:82:67:4f:6e:c2:19:4a:de:a2:17:5f:4e:e0:48:fa:cc:4a:
23:4b:18:7a:9a:cb:c9:b0:6e:72:76:c7:c2:64:32:a3:3a:05:
08:27:60:bc:e0:c3:6c:8b:9d:d9:83:3e:68:84:8f:6f:e5:c0:
41:a4:6b:d6:1b:37:90:2b:dd:96:a8:9c:85:64:62:59:1d:4d:
19:8a:9e:6c:ca:d5:38:f7:2e:d5:e7:71:e4:97:97:f3:e8:fa:
70:cc:4d:d1:58:21:ee:c9:7a:ef:3d:8d:2c:ec:5c:7b:70:47:
cc:af:93:24:c9:f8:9b:fb:2f:c8:4b:bb:b4:39:ae:5a:f8:d7:
81:71:eb:e4:9f:35:15:df:b3:79:f8:0c:7f:57:e9:c8:6f:9f:
35:99:22:63:e6:a9:dc:79:ba:3c:80:f7:64:51:9f:35:9c:cb:
70:93:1d:b3:39:57:dd:82:b4:79:43:72:f5:6d:d8:37:dc:f6:
d0:82:97:d6:01:50:68:8f:c3:39:e2:6f:49:e0:b3:f8:c3:de:
d8:ea:ed:5c:08:6b:77:e5:60:66:02:d8:17:fd:34:9e:b1:b6:
8f:8c:3b:8c:88:e7:a7:d6:e2:76:5a:e4:99:6a:6b:9f:c6:17:
6b:a3:de:bb:ed:95:ee:9d:3b:04:3b:db:58:76:a0:36:89:0e:
64:f1:8e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:09:53 2025 by rpki-client