Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/upwUY-IRDf6A9l9uowGDJXhgTCE.roa
File: upwUY-IRDf6A9l9uowGDJXhgTCE.roa (raw, json)
Hash identifier: IubMyXokYf5K+jVmzZiM+AZcRQ0zYk8rqAfoAkObB6M=
Subject key identifier: BA:9C:14:63:E2:11:0D:FE:80:F6:5F:6E:A3:01:83:25:78:60:4C:21
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 01954C0F83CF0A331ECB1125AA22E276ADDB
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/upwUY-IRDf6A9l9uowGDJXhgTCE.roa
Signing time: Fri 28 Feb 2025 10:17:19 +0000
ROA not before: Fri 28 Feb 2025 10:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198121
IP address blocks: 86.54.11.0/24 maxlen: 24
2a13:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:0f:83:cf:0a:33:1e:cb:11:25:aa:22:e2:76:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Feb 28 10:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba9c1463e2110dfe80f65f6ea301832578604c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:6f:df:4d:23:03:3f:8c:fa:d7:1b:59:cd:
84:1e:01:ad:1e:0e:07:2a:a8:7d:2d:04:3c:1c:e6:
13:fb:1a:d2:9a:b9:8e:03:59:8f:21:20:1b:51:9b:
4d:48:63:4b:1f:2e:33:00:ec:37:b2:84:bd:0e:43:
f1:aa:88:3d:53:8c:27:59:c1:b9:08:56:13:62:37:
f5:a0:22:c9:f9:b6:ed:1f:18:1d:87:86:6c:58:ea:
14:e1:98:90:b1:3a:6b:16:27:a4:04:29:0f:39:f7:
c5:40:a0:94:d1:c1:ed:ac:5b:da:21:0e:12:a3:52:
40:b0:43:7e:3f:28:fc:aa:ea:4c:72:cc:ef:bb:89:
23:bb:d9:c9:43:37:39:d8:f2:e2:d2:93:84:4e:47:
f0:8f:c0:7b:1f:75:e7:e8:f8:87:b8:1f:92:ef:0a:
27:83:a7:7e:2e:e1:4a:8e:4d:1d:3f:42:89:87:3a:
d8:01:ea:fd:0f:38:e3:00:ae:0c:e9:a9:3b:3e:fd:
ba:6f:f0:af:8b:9d:15:45:d7:7d:24:fe:12:0b:64:
03:c0:11:bb:9e:80:64:14:71:aa:d5:e3:19:5e:84:
01:a4:c5:44:e4:0a:db:31:1a:c9:4d:c8:90:cc:ef:
d2:c4:cd:de:04:9e:8b:e6:9b:77:93:04:f8:b5:b1:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:14:63:E2:11:0D:FE:80:F6:5F:6E:A3:01:83:25:78:60:4C:21
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/upwUY-IRDf6A9l9uowGDJXhgTCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.11.0/24
IPv6:
2a13:1001::/48
Signature Algorithm: sha256WithRSAEncryption
23:4d:ab:d5:89:44:9b:ca:f5:3d:77:14:42:bf:b8:4a:16:98:
a1:27:21:71:00:20:8a:d9:1f:f6:a4:04:e4:da:7c:45:71:a1:
08:69:ba:81:0a:13:f5:9d:c4:e4:b3:c7:5d:61:c7:21:7e:54:
31:78:12:ca:33:3f:bc:56:4a:c2:ff:e2:be:1e:10:04:ca:21:
db:4d:55:55:a2:31:2a:64:64:9c:16:c0:de:3b:54:ae:47:52:
a6:fc:5d:e9:f8:74:af:a6:ef:ac:ae:c4:76:3f:04:75:27:a1:
9e:9c:91:90:05:6f:42:62:68:a1:73:03:45:1a:ea:83:5e:32:
66:37:e8:3c:ce:6a:a4:21:f6:66:c6:1f:94:9e:ae:f1:63:32:
54:24:62:68:ea:a9:0d:a6:bc:26:2f:63:f0:d0:59:5a:05:14:
11:bf:7c:13:46:5e:10:66:44:8c:ad:d1:e3:13:d3:46:27:02:
41:b8:57:37:f1:f1:41:b7:6d:0a:a8:86:4e:6f:b6:d9:d2:88:
0c:82:77:b3:33:36:b1:c8:4f:37:35:e3:7d:7d:f4:3b:14:10:
9d:36:2c:f7:b4:f7:bb:0e:8d:0f:30:59:fd:e6:9b:68:21:c7:
3c:79:7c:1d:c3:cf:36:b1:10:0a:15:a1:a0:62:f7:2a:3e:2e:
ea:39:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:24:00 2025 by rpki-client