Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/uV6pu-rvAp4G68o2AgVK7vbBPX8.roa
File: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (raw, json)
Hash identifier: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=
Subject key identifier: B9:5E:A9:BB:EA:EF:02:9E:06:EB:CA:36:02:05:4A:EE:F6:C1:3D:7F
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B29B4C0B443E007B4DCE0A1358EFFA
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/uV6pu-rvAp4G68o2AgVK7vbBPX8.roa
Signing time: Thu 02 Jan 2025 01:47:52 +0000
ROA not before: Thu 02 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397230
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9b:4c:0b:44:3e:00:7b:4d:ce:0a:13:58:ef:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b95ea9bbeaef029e06ebca3602054aeef6c13d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:0e:33:48:a8:94:58:2a:56:61:8c:31:42:
49:46:82:61:08:d6:59:86:2c:f4:2b:f7:15:1c:18:
86:9d:27:31:28:00:11:c7:8f:52:57:a9:f1:cf:cf:
e9:87:09:4f:a2:14:28:ca:d8:6e:ee:60:45:69:7d:
2e:67:01:f8:3d:00:35:13:54:04:82:dd:dc:4d:9a:
99:46:5b:65:e4:d9:e1:31:78:c6:23:03:ca:7f:5a:
05:bb:ff:84:e1:22:b1:53:dd:0c:b9:c1:c3:8d:82:
98:2e:d9:50:53:81:d5:c1:32:20:c9:47:ee:9b:f1:
b4:fd:b6:39:e2:9b:fa:c8:11:dc:dd:e0:64:70:cc:
41:8c:24:70:03:84:78:e3:87:49:94:af:a2:22:6d:
46:52:39:f2:df:5d:4e:f6:9b:9d:82:fa:2c:bf:fe:
5e:95:d2:fe:06:08:7f:48:c4:c7:61:f7:e0:14:28:
a5:89:8d:43:b9:18:b3:48:57:80:da:5d:36:97:4e:
96:65:2f:43:df:1a:75:2b:75:d5:14:06:88:0e:26:
4a:94:b3:ce:be:89:8f:1e:7e:e2:1f:35:cd:3d:ae:
30:9d:cc:bb:b7:5e:1d:e1:d1:50:f7:3b:1c:31:11:
e0:29:f3:ef:61:f4:36:37:33:ac:51:87:b8:14:0f:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:A9:BB:EA:EF:02:9E:06:EB:CA:36:02:05:4A:EE:F6:C1:3D:7F
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/uV6pu-rvAp4G68o2AgVK7vbBPX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:15:2d:32:30:f1:74:e1:e0:01:1b:5d:93:32:71:54:93:31:
dc:a0:ab:b5:5f:a4:84:26:d7:8d:6b:fa:2d:f4:27:a1:15:2c:
a8:85:8b:13:34:fa:09:5f:68:0e:f8:a4:f5:41:d3:35:81:bf:
19:ae:50:18:4e:d0:36:ab:6d:99:ad:39:c4:b8:73:09:48:cd:
2c:9f:96:8d:33:dc:32:fb:b1:69:cd:d3:4a:c4:60:e4:a0:03:
3e:4a:cb:d8:50:43:dc:38:7f:87:26:83:ec:ec:c3:84:7e:23:
b4:56:3b:fe:fc:35:85:cc:8f:f8:61:15:48:1d:93:6f:52:fc:
a2:b5:59:4b:19:b9:1e:cd:5f:2f:05:e2:7a:c2:8b:13:76:83:
5f:e1:20:56:20:84:58:b6:c6:9f:bc:aa:78:d8:4b:20:4e:24:
3c:5c:80:55:b7:f2:70:f7:57:ac:62:9e:af:7c:52:57:d4:6a:
09:66:be:d5:03:e3:c6:eb:1a:9e:f1:0a:d5:47:ca:7f:65:bf:
48:11:51:e0:1c:1d:b6:be:be:1d:2f:b4:76:bd:6f:79:ac:c2:
d6:bb:bd:76:b2:92:b6:95:d4:e5:1e:4a:6b:d1:b0:5f:61:20:
92:1d:05:fd:3c:a4:55:ce:df:07:82:4a:95:d4:f9:2d:6a:b0:
06:73:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:31 2025 by rpki-client