Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/UkXnPRVXjTis_VDJ1hzOhMm6rIo.roa
File: UkXnPRVXjTis_VDJ1hzOhMm6rIo.roa (raw, json)
Hash identifier: 6s9z+zqZTWJ2G6KssK5mmnlCVYvfkbJufE/vxkpHdBI=
Subject key identifier: 52:45:E7:3D:15:57:8D:38:AC:FD:50:C9:D6:1C:CE:84:C9:BA:AC:8A
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194FACE784FB5A3095F73BF28574E09C07A
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/UkXnPRVXjTis_VDJ1hzOhMm6rIo.roa
Signing time: Wed 12 Feb 2025 15:37:02 +0000
ROA not before: Wed 12 Feb 2025 15:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 92.62.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:ce:78:4f:b5:a3:09:5f:73:bf:28:57:4e:09:c0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 12 15:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5245e73d15578d38acfd50c9d61cce84c9baac8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:c6:c9:44:ae:41:40:17:da:61:88:c9:1c:
70:6b:f9:88:61:03:91:54:12:7b:7c:a2:c1:fc:8f:
90:ab:57:c9:75:b1:7b:8a:af:9a:9f:e4:0a:25:c3:
64:32:55:2f:d5:c5:d1:14:38:15:8b:77:65:49:a2:
26:5d:64:a3:d8:15:6e:85:0b:0a:63:a8:88:ab:ea:
a2:62:2e:fe:73:32:83:85:a4:b3:05:cb:c9:fb:ee:
3f:fd:08:a8:f8:1d:e3:33:f2:38:a3:8f:6e:44:9b:
e3:4d:09:01:a7:3c:ba:c8:ed:b4:71:f2:e4:cc:83:
2f:96:09:76:c0:78:78:45:bd:b8:68:b9:b4:e5:70:
96:a0:63:71:ec:a2:9d:21:fc:a5:f1:f3:58:94:6f:
01:80:80:4c:0d:29:27:fd:c3:74:38:e4:64:19:14:
e8:12:15:95:23:e3:6b:d7:90:ae:86:f4:74:8d:3e:
d7:f5:60:7a:f4:63:bb:96:6e:88:0e:05:f7:a2:a2:
b2:7b:08:2a:ef:64:9f:dd:db:20:c3:ea:0c:af:1c:
3b:5a:a9:66:9a:4d:fe:e2:8c:48:85:02:7a:47:fc:
2c:08:72:ef:88:8e:60:53:1d:49:ed:30:d9:22:a8:
e9:45:37:ce:95:b3:e5:c6:2f:8d:57:c8:82:44:38:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:E7:3D:15:57:8D:38:AC:FD:50:C9:D6:1C:CE:84:C9:BA:AC:8A
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/UkXnPRVXjTis_VDJ1hzOhMm6rIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d1:d7:2d:bc:62:01:0b:84:b5:83:50:20:e5:97:dd:be:d2:
f8:1d:56:78:df:c8:ac:69:9a:54:bb:6d:23:5e:42:69:4c:be:
28:d3:a8:2c:fc:18:35:fe:30:b3:e0:bd:1e:54:42:27:ed:81:
60:6b:be:a0:1b:c7:24:01:4c:6e:31:94:99:7f:fa:20:f7:87:
76:d6:4e:f1:df:ad:a0:28:d6:66:87:48:57:23:62:2d:2f:5c:
22:18:52:c3:2d:f6:8a:27:1a:c5:14:19:30:48:dc:d8:82:7b:
f8:3b:a6:5f:48:fb:48:11:be:ab:25:d5:dd:3a:fe:ef:0c:57:
3e:9c:1a:4f:00:46:be:63:0d:3a:b3:18:b2:9d:a0:5d:d0:d1:
f9:fc:0f:ff:71:69:9a:46:56:18:9d:89:8f:04:4c:a4:8c:2a:
90:4f:70:82:8c:48:74:d9:be:5c:b8:f7:0d:ea:40:b9:9d:c5:
67:9a:a4:61:ea:0e:76:de:c6:ed:5d:f1:38:a4:ee:b2:bf:f9:
96:a7:e1:73:21:22:ea:bb:72:05:0e:aa:d7:40:f1:7d:f9:fa:
0b:de:3d:42:01:ed:6e:f1:55:66:a4:01:f7:30:7b:80:28:84:
b0:13:6a:0c:53:b2:2a:6d:09:9d:e1:b5:f9:a4:b5:b4:c4:40:
a2:33:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:55 2025 by rpki-client