Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/UeY-6eT8AWic-hKV67W_oibJpb0.roa
File: UeY-6eT8AWic-hKV67W_oibJpb0.roa (raw, json)
Hash identifier: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=
Subject key identifier: 51:E6:3E:E9:E4:FC:01:68:9C:FA:12:95:EB:B5:BF:A2:26:C9:A5:BD
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019840FC7B3399E91FF09DFCFB0D706ED76E
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/UeY-6eT8AWic-hKV67W_oibJpb0.roa
Signing time: Fri 25 Jul 2025 09:49:05 +0000
ROA not before: Fri 25 Jul 2025 09:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43887
IP address blocks: 193.236.152.0/24 maxlen: 24
193.236.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:fc:7b:33:99:e9:1f:f0:9d:fc:fb:0d:70:6e:d7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jul 25 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51e63ee9e4fc01689cfa1295ebb5bfa226c9a5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:25:48:8b:78:ea:9f:05:95:1e:30:18:11:
62:27:06:61:03:12:ef:f8:d0:f7:22:e2:bc:f7:74:
ed:04:8a:16:1b:21:75:94:3a:96:48:01:f5:09:c3:
57:44:9c:70:49:9e:8f:8b:0e:c3:f6:bf:aa:04:c8:
d0:f2:cb:bf:b5:2b:e6:41:79:51:8a:c6:e4:f3:d5:
88:a2:de:8d:be:84:6d:4c:de:6b:0c:96:41:f4:cf:
7f:8f:c9:bb:63:a1:c6:4f:3a:a8:0f:61:82:d8:2c:
cb:cd:23:e9:5b:00:8e:52:a8:8c:6f:64:f7:5d:ab:
0a:3f:49:8a:a5:c6:1f:ef:95:af:67:ad:1a:0c:ab:
7b:9a:bd:f5:9a:63:9e:70:ec:a9:2d:ed:6e:1d:a7:
83:16:e4:09:18:de:85:90:c4:1a:29:a6:a1:d4:2f:
a7:d0:63:b5:2c:1e:20:39:74:f8:f9:81:31:2d:8f:
64:98:48:8d:f9:81:03:77:e6:9c:93:76:91:ab:31:
f5:0b:9c:35:8b:cb:b1:7d:59:ce:ec:c5:51:9b:03:
00:be:07:ca:d8:4a:ab:6d:c8:f9:e0:9b:14:64:f5:
14:6e:65:72:0c:a6:bc:17:bf:6a:56:e0:97:f9:bf:
73:ab:02:a9:2c:88:e8:c0:1c:0b:c1:61:54:1d:9c:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:3E:E9:E4:FC:01:68:9C:FA:12:95:EB:B5:BF:A2:26:C9:A5:BD
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/UeY-6eT8AWic-hKV67W_oibJpb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.152.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:63:78:9f:c4:97:86:56:9d:a7:69:0d:bf:4b:53:80:e4:c6:
60:28:99:67:57:18:73:d4:c8:7d:a8:b8:49:e2:af:85:81:c9:
b0:3b:8b:9e:6b:c2:ed:5f:28:de:7a:95:80:c4:40:58:28:b1:
49:3c:2d:ba:cb:8a:c4:4a:04:5a:03:bc:50:40:9c:65:84:e2:
e3:c6:cd:73:66:68:09:14:29:ce:ab:98:c5:d3:7f:5b:03:28:
db:76:5e:2f:73:fd:e9:f9:21:21:98:ab:8b:9d:97:77:c2:00:
9e:01:83:4e:2d:ec:c9:4b:1f:4e:5c:12:27:1e:38:5a:73:39:
80:46:3c:42:32:1b:13:6f:db:c3:06:02:68:64:70:bd:33:9a:
12:e6:7b:e9:4d:48:83:48:ca:56:7e:79:48:fc:f8:1f:99:9b:
5d:13:c9:eb:08:71:f1:70:4a:bc:e1:bf:db:94:9e:ca:a1:a3:
f1:a2:32:32:f8:39:55:bc:cb:7c:50:e6:22:bb:dd:29:54:d6:
db:f3:bb:a3:2a:5d:93:43:a4:9b:e6:ad:ca:31:67:28:29:84:
55:c3:9b:0d:18:1a:3e:86:e1:d3:88:46:cf:64:b4:06:99:40:
1f:98:55:2c:4c:69:92:e3:dd:10:d2:f4:74:6a:de:ef:a4:8e:
78:c7:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:19:18 2025 by rpki-client