Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/USikurc53Rj21I_r1wDe4xom0_k.roa
File: USikurc53Rj21I_r1wDe4xom0_k.roa (raw, json)
Hash identifier: M+h0syMhn0PBs/I1Ew6SooZigAzef/f2+u4fxWN0qTU=
Subject key identifier: 51:28:A4:BA:B7:39:DD:18:F6:D4:8F:EB:D7:00:DE:E3:1A:26:D3:F9
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77ADA092D9E8CA7329F8084D1AAC2
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/USikurc53Rj21I_r1wDe4xom0_k.roa
Signing time: Wed 01 Jan 2025 21:48:31 +0000
ROA not before: Wed 01 Jan 2025 21:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15133
IP address blocks: 213.175.80.0/24 maxlen: 24
2a02:16d8:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7a:da:09:2d:9e:8c:a7:32:9f:80:84:d1:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5128a4bab739dd18f6d48febd700dee31a26d3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:57:7f:91:69:1a:f9:c1:73:d8:95:0a:e4:
14:9a:61:9a:dd:f7:e1:ab:5d:56:81:c7:49:54:4e:
74:2b:21:b7:e4:00:c2:08:27:12:21:99:88:71:46:
a7:92:17:41:50:49:82:66:3a:2a:9f:d4:6a:b1:06:
bc:61:91:cf:87:e8:d0:ea:d0:6a:e1:ae:0a:5d:3b:
04:d2:c8:1e:a8:40:88:8a:e0:3d:ac:ce:48:98:b0:
32:32:85:8b:e9:e4:3c:7e:fa:5c:b8:71:06:a8:52:
f2:24:4f:f2:0d:79:87:02:d5:94:73:b8:50:e1:51:
f6:3b:57:bf:3b:86:f9:ed:18:04:42:96:6f:98:81:
4f:78:f1:07:fd:31:0c:b0:59:df:bf:d1:ca:44:6b:
cb:73:11:2b:56:5a:62:4e:e1:f0:06:24:d8:16:78:
81:07:3f:b0:32:36:be:03:82:42:6e:43:f3:6c:93:
88:cb:b5:20:e9:fb:27:d6:d8:ff:ff:31:93:15:7f:
b9:75:2b:ee:df:84:1e:0a:21:be:e8:78:33:35:a4:
7c:19:0b:7a:8f:f8:75:cd:b2:5f:d4:2f:84:7a:48:
a3:e0:8f:e5:95:3b:98:56:a9:9d:55:60:03:d9:6e:
7c:92:de:11:62:c4:d8:c0:3a:bc:f2:79:9f:bc:0f:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:A4:BA:B7:39:DD:18:F6:D4:8F:EB:D7:00:DE:E3:1A:26:D3:F9
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/USikurc53Rj21I_r1wDe4xom0_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.80.0/24
IPv6:
2a02:16d8:103::/48
Signature Algorithm: sha256WithRSAEncryption
92:77:f6:82:6e:c3:93:7b:c1:69:9c:98:aa:01:7b:de:ea:2e:
ea:53:bb:09:1f:94:60:67:3e:65:3d:30:6b:20:d7:18:71:e8:
69:cc:b2:49:b9:b8:7e:c1:0c:de:55:c6:37:2e:93:c0:e8:de:
b2:10:c4:72:6c:c8:67:dc:a0:7b:00:2a:8f:df:44:86:39:bb:
09:61:e7:14:48:41:54:5f:15:5f:54:07:b5:c7:35:ba:86:6b:
3e:5d:67:a0:e4:cf:0e:f8:80:dc:b2:dc:82:51:8c:e3:60:b1:
65:10:d3:fd:60:e5:ea:1f:69:dd:ab:85:3c:d3:6f:cc:07:1c:
f9:58:33:80:af:5c:a7:0b:86:ce:c0:3e:e5:dc:51:60:13:a1:
c2:4e:35:43:25:5d:d2:52:46:17:2d:b4:6b:9c:82:78:83:75:
c4:bb:30:09:c2:e7:47:8f:ea:8f:74:49:6a:06:d5:40:9c:3c:
b7:eb:1c:b1:ea:b7:4c:34:91:bf:38:39:4b:12:fc:49:49:1e:
91:e1:68:15:29:bb:82:e8:85:48:3c:d3:55:5a:02:ac:2c:73:
d6:9c:f5:79:b8:40:77:c0:0d:d2:cd:c6:a8:29:a3:fe:62:5d:
7b:58:59:a3:48:86:57:a6:ff:45:1c:9a:1e:26:f3:09:23:62:
11:b7:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:44 2025 by rpki-client