Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa
File: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (raw, json)
Hash identifier: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=
Subject key identifier: 51:9E:77:3B:1B:FF:79:AD:43:26:26:DE:DB:A5:4F:82:FE:3E:56:9A
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 01941F8C5C43A0B954A39F3408256229BAC4
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39244
IP address blocks: 81.21.176.0/23 maxlen: 23
81.21.178.0/24 maxlen: 24
81.21.179.0/24 maxlen: 24
81.21.180.0/22 maxlen: 22
81.21.184.0/21 maxlen: 21
188.65.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:43:a0:b9:54:a3:9f:34:08:25:62:29:ba:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=519e773b1bff79ad432626dedba54f82fe3e569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:bb:9b:47:04:a1:54:2d:7f:6a:9b:77:af:
53:0c:d3:e7:b8:e5:f5:6d:39:34:d6:59:df:7e:43:
9a:21:2c:7a:ad:ed:1b:91:2a:16:ca:f6:7f:aa:9e:
08:a0:8e:7a:37:99:03:02:ce:14:8c:6a:fa:71:8d:
6d:ff:83:a3:c7:95:79:5b:68:f4:88:d7:8f:ac:8f:
a7:ce:fa:4a:24:2c:a0:44:2d:3d:e6:91:d7:e0:5f:
fb:d4:24:01:41:58:2a:3e:b4:9a:ce:8b:47:a9:e5:
e6:e6:93:da:64:7e:ee:36:8a:b6:0d:8b:42:f1:8f:
d0:36:98:6e:62:5c:5f:db:ee:d3:d6:f2:19:13:73:
81:a3:d7:58:a1:0e:a3:47:e8:6b:38:ae:31:92:7f:
b9:f2:a9:80:47:98:60:7b:f0:05:25:a6:82:dd:15:
a3:46:7e:89:23:95:1c:54:ec:0f:d9:47:5b:be:98:
37:08:36:84:1e:03:03:19:5e:e5:79:17:53:32:14:
33:bf:09:05:65:14:bb:92:a8:5e:44:61:ec:80:5f:
93:4f:4e:02:a6:41:f3:85:dd:ec:92:c5:82:5f:ed:
3d:42:18:ca:b6:01:b6:d9:88:da:6e:1a:3d:29:5b:
fa:30:ad:5f:02:f4:af:b1:49:db:2b:35:1f:e8:a2:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:77:3B:1B:FF:79:AD:43:26:26:DE:DB:A5:4F:82:FE:3E:56:9A
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.176.0/20
188.65.192.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:1e:44:d0:b3:d7:10:33:12:72:5a:87:51:2c:c1:aa:3a:7e:
6d:23:f3:ea:dc:f4:3b:84:62:e5:71:c8:00:aa:55:de:81:f5:
f8:d7:d0:e9:47:6a:a2:3c:ee:e9:a2:ef:a1:b8:0a:49:24:ea:
20:4f:9b:fe:33:8f:4e:53:ca:db:10:8d:ec:72:23:a5:d5:38:
ae:e7:71:45:d2:1f:27:23:42:fd:09:a4:7a:87:b9:06:27:36:
9b:93:8a:e7:91:3a:58:8f:10:11:b7:46:b2:30:47:39:24:ff:
52:ad:3d:1b:55:35:21:13:37:41:34:63:bb:ff:c9:d4:1a:be:
fb:8c:64:0f:74:4c:30:05:9d:77:70:75:4d:3b:a6:3e:6b:d3:
74:a6:13:0e:64:e9:5f:09:37:52:ca:d7:f4:70:40:7c:ea:cc:
32:6e:a7:e3:5a:00:f5:8c:ef:57:50:5e:19:91:39:3a:63:5f:
be:dd:92:9c:eb:df:1d:c0:0f:d6:a7:d2:6d:2c:c1:50:c5:55:
7e:46:3a:45:d2:b3:85:ee:dc:55:f4:41:ae:74:ab:14:c4:b6:
d4:43:43:3f:d7:9b:61:07:d4:a7:d5:c9:50:24:0f:68:b3:a5:
19:3e:db:3a:4b:4c:f9:ff:e6:07:47:95:c7:9b:7e:b3:b0:32:
cf:35:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:34 2025 by rpki-client