Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/uSaVwi6W5g3viY9NscHN3tqDzCk.roa
File: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (raw, json)
Hash identifier: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=
Subject key identifier: B9:26:95:C2:2E:96:E6:0D:EF:89:8F:4D:B1:C1:CD:DE:DA:83:CC:29
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019420D65C5ADDCDC7D04A5B3B31FD0DD574
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/uSaVwi6W5g3viY9NscHN3tqDzCk.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13443
IP address blocks: 144.2.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5c:5a:dd:cd:c7:d0:4a:5b:3b:31:fd:0d:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b92695c22e96e60def898f4db1c1cddeda83cc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:1b:6a:d6:df:6d:97:52:bc:cc:8d:b5:c2:
7c:5a:f3:cf:dc:4d:b9:d8:c6:9b:bb:60:2d:10:d2:
a0:cd:c6:05:eb:c4:13:21:bc:e4:3b:49:52:af:40:
d4:a3:79:39:eb:ee:ed:7a:00:f8:9c:f6:69:06:71:
b4:e0:a5:61:89:66:78:e4:b3:27:72:a4:b4:77:16:
49:2d:e5:68:e4:b5:fa:03:78:35:08:fb:66:89:34:
29:c2:69:1e:54:c3:e8:52:e5:f9:d6:c1:a3:7a:e3:
85:f8:4c:8e:d7:d0:d3:c1:18:fd:1b:a7:1b:d2:dd:
ff:ef:ea:cb:9a:f7:5c:52:6c:44:69:85:b6:67:40:
11:d9:75:97:16:19:e9:87:a7:4a:e7:b1:a0:89:1f:
28:05:a6:3e:67:95:5f:d8:72:92:3b:9e:86:11:1b:
c4:39:87:82:ad:57:14:85:13:45:69:74:23:f5:6c:
5e:0d:11:49:09:96:47:fe:a9:f3:e6:9e:a7:cb:0f:
9a:79:2d:6b:bf:5f:50:3b:96:6c:86:eb:94:0a:93:
7c:91:ae:78:2a:9a:64:33:3f:f4:0d:86:c5:cd:3c:
8a:07:c3:56:33:49:54:3f:40:cc:07:77:2f:cf:ec:
7c:8b:86:f3:74:81:bc:1e:ce:a7:10:36:58:e1:67:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:95:C2:2E:96:E6:0D:EF:89:8F:4D:B1:C1:CD:DE:DA:83:CC:29
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/uSaVwi6W5g3viY9NscHN3tqDzCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c9:6a:6b:e7:92:f6:3b:5e:9e:6f:65:c9:8f:c1:1b:ad:e8:
3a:a0:6d:ce:7c:14:4d:e0:fc:a6:17:56:92:a0:7c:97:81:ce:
58:a0:40:53:ba:5b:42:09:76:52:bb:1c:42:e9:6b:01:7b:25:
90:7f:fe:37:be:77:3f:97:62:5a:2e:b8:86:63:27:79:11:73:
35:43:6c:a3:df:64:9e:7c:b7:fa:05:78:81:79:d8:86:86:37:
30:14:de:b6:7e:a9:95:5c:7e:43:18:ce:38:a1:aa:ae:47:30:
69:ac:e7:6f:18:7d:3b:ea:6e:1a:d3:a8:db:ea:21:7d:b7:88:
ad:5b:c6:d7:e3:4c:9a:c9:5c:61:af:37:14:2a:38:da:ad:ee:
49:b6:d0:67:3b:7c:2b:12:90:5d:10:69:cf:b8:7b:e4:14:7c:
55:97:7f:5f:b5:1c:b9:2d:8f:64:83:83:4c:7d:74:8a:04:9d:
ab:78:44:79:18:dd:84:73:7c:46:26:48:b3:32:08:37:6a:ed:
da:e7:ce:70:29:ff:15:2a:31:12:12:a1:fb:a2:0a:37:96:ad:
49:36:22:85:80:a8:9d:cf:82:7e:de:ee:53:0b:3b:f9:16:50:
56:53:19:2f:d9:d2:e9:5c:1e:8d:dc:9b:55:5a:e3:28:88:22:
e0:35:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:31:56 2025 by rpki-client