Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa
File: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (raw, json)
Hash identifier: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=
Subject key identifier: 51:6C:33:49:9C:27:C6:94:7F:AF:76:38:0F:AB:ED:B4:A7:41:05:5B
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 0196F2071BABEC712E8BE74D40173BCBFEEB
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa
Signing time: Wed 21 May 2025 08:47:54 +0000
ROA not before: Wed 21 May 2025 08:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214096
IP address blocks: 185.192.218.0/23 maxlen: 24
185.192.218.0/24 maxlen: 24
185.192.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:07:1b:ab:ec:71:2e:8b:e7:4d:40:17:3b:cb:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: May 21 08:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=516c33499c27c6947faf76380fabedb4a741055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:5a:0f:79:4c:b3:f9:4d:f7:2b:64:5b:27:
1b:d5:8c:e1:a0:ea:cb:d6:97:bc:5f:3f:0f:30:8e:
82:a9:08:b8:93:b0:06:8d:a8:04:a4:8a:09:bb:0c:
83:02:61:66:e1:56:c9:8f:67:b4:eb:c2:4e:65:41:
bb:4c:7a:4d:ea:62:0c:a0:bb:1e:ba:7e:fc:02:7a:
fe:21:60:7c:6a:c6:ef:55:27:0b:9e:02:88:c8:e3:
f9:db:f0:1b:ef:00:95:bf:01:22:6d:ca:5e:b5:45:
66:46:76:96:ae:50:44:84:5c:f2:a0:0e:65:51:b6:
c2:61:f3:94:2a:bb:05:50:9e:25:5c:74:ae:7d:7e:
7b:a3:e8:36:2b:56:e6:c4:d1:1f:22:cb:f1:87:c4:
d2:d9:67:d9:bd:66:34:10:ba:46:30:13:97:9d:37:
30:e6:5b:99:08:2c:8a:b9:8e:48:4a:2b:50:48:4d:
c1:cf:e5:a3:74:45:33:8c:da:35:a4:07:82:e9:53:
8e:e4:1f:54:c3:be:ae:ac:82:ba:b1:40:3e:7c:fa:
95:ec:7e:76:11:68:65:74:f8:35:b8:24:b8:c9:67:
e0:28:db:b1:33:25:59:8b:42:8b:db:6f:9f:02:cf:
ec:2d:bf:aa:42:7e:74:e2:81:53:10:72:d4:12:84:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:33:49:9C:27:C6:94:7F:AF:76:38:0F:AB:ED:B4:A7:41:05:5B
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.218.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:7b:df:d5:84:f0:27:b6:de:1b:32:41:d4:e8:98:14:ec:c6:
1d:d7:54:5e:95:c9:5a:b3:6b:13:2a:d1:6c:62:89:3a:7a:20:
80:b5:5c:a0:d9:70:25:1b:7a:97:25:13:06:a5:97:f4:a7:a2:
91:00:c2:dc:51:44:a0:09:24:72:9d:9c:6f:d1:61:3e:aa:be:
f7:2d:eb:7c:00:2d:63:1c:7d:6a:99:55:97:9d:99:53:a2:a5:
66:6d:4f:c2:9b:a1:7d:ef:47:91:7a:03:60:f0:53:62:17:3a:
96:80:60:da:81:3a:bd:f4:61:20:73:16:29:21:3b:e2:a5:23:
f5:45:02:39:9d:72:6a:c2:bc:4f:19:cf:5e:8f:5c:67:55:28:
66:d5:eb:4e:bb:03:80:58:5d:30:b5:62:83:49:67:6b:ce:54:
d1:9d:cf:0a:af:2e:9d:6d:e9:76:b9:bf:00:37:05:18:da:20:
d0:17:5f:7d:dc:cf:0f:71:3c:83:bd:cb:5d:7e:a6:b1:df:8b:
4e:93:ee:02:99:0e:04:94:13:0e:a4:0c:b6:b0:1e:91:88:e2:
cb:23:eb:bf:4f:68:7c:e9:63:fd:2a:8c:a5:e8:37:b6:d7:15:
0f:6f:9d:b8:1e:98:88:85:75:ff:99:65:e9:26:4c:61:ad:8a:
cd:31:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:16:13 2025 by rpki-client