Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UVZIa-FMt4vCX51hYZXwLYmA820.roa
File: UVZIa-FMt4vCX51hYZXwLYmA820.roa (raw, json)
Hash identifier: 3qAuBp/FbGqrq87v+wF8YfstJYF5veeRmrQjgml1TmI=
Subject key identifier: 51:56:48:6B:E1:4C:B7:8B:C2:5F:9D:61:61:95:F0:2D:89:80:F3:6D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D74540735C8EAFF3351C2593DFD9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UVZIa-FMt4vCX51hYZXwLYmA820.roa
Signing time: Thu 02 Jan 2025 17:51:30 +0000
ROA not before: Thu 02 Jan 2025 17:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 87.121.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d7:45:40:73:5c:8e:af:f3:35:1c:25:93:df:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5156486be14cb78bc25f9d616195f02d8980f36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:a3:0d:aa:69:7b:f2:fa:1c:00:52:7c:9b:
52:2b:3b:3f:52:c6:93:13:e1:7d:22:98:2a:06:78:
71:4d:fc:21:99:74:5b:a9:c7:85:22:d2:25:db:a3:
d6:3b:43:d0:0d:00:78:4c:6d:40:07:60:82:4c:06:
55:f8:76:8b:62:8a:01:7d:66:6f:74:f4:50:9d:44:
86:a0:38:09:76:ee:40:d7:e3:b7:65:81:08:df:fd:
45:bb:f4:8c:ee:a0:3e:52:fb:2c:32:4a:89:c2:17:
52:e8:a3:01:a9:d2:fc:6f:33:bd:56:db:57:a4:ae:
c2:2b:e0:7f:f9:c1:66:af:6f:91:54:1d:86:a7:3f:
a0:c4:6f:ab:48:4a:bd:0c:22:cb:d0:22:cb:6f:8f:
95:79:98:c8:8a:03:11:e4:1c:a9:92:cf:06:5e:26:
34:c6:15:b3:b9:97:4e:25:b3:84:10:7d:fa:cb:22:
53:67:19:49:c7:94:1a:9a:b0:97:cd:c0:ba:ee:7b:
bb:87:88:aa:d1:13:4a:72:d8:d9:cb:1f:99:09:ff:
aa:cb:ec:39:4e:14:7a:4b:48:55:37:36:a1:14:bf:
95:08:55:47:28:ff:37:bd:5a:66:be:ce:80:96:66:
2c:3b:17:67:48:82:d5:b1:c1:f9:a5:d8:9d:33:d6:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:56:48:6B:E1:4C:B7:8B:C2:5F:9D:61:61:95:F0:2D:89:80:F3:6D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UVZIa-FMt4vCX51hYZXwLYmA820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.165.0/24
Signature Algorithm: sha256WithRSAEncryption
59:01:5e:5b:ea:c0:c0:bc:71:61:5d:9f:d3:9d:de:62:07:a4:
6c:ce:68:bc:50:42:e9:ae:2f:80:90:e7:f9:10:87:13:6d:3d:
71:18:02:7b:f8:37:e8:9e:f7:17:b3:66:10:76:d1:1c:dc:d4:
d8:55:67:4b:42:e2:da:95:dd:27:36:a2:74:b8:31:66:94:66:
f0:31:26:08:07:c4:ea:fb:ff:47:84:05:7f:8e:5d:3b:08:17:
e8:09:af:93:97:fb:e2:7e:ac:d9:35:14:2f:2e:4b:93:e7:14:
74:d6:d7:97:59:b7:f8:5d:59:da:47:d3:ea:06:bc:d2:66:22:
c7:74:de:03:36:3b:eb:59:22:28:18:99:b1:cf:b6:f0:4c:42:
55:83:94:12:e7:98:58:1f:e9:86:64:eb:19:22:c5:16:1f:ad:
b9:dc:a9:85:7b:b0:51:32:a6:02:e1:7a:8b:e4:7f:d0:e6:86:
90:d5:b3:ef:11:98:6e:59:24:22:59:ba:09:f8:72:11:80:c4:
2a:c3:17:c6:3f:06:09:33:28:e0:c8:d4:c7:a6:1d:eb:35:4d:
bd:46:6c:1f:81:1c:1b:2c:91:96:44:40:da:70:46:be:79:8a:
4a:b9:d4:28:94:e8:47:ce:55:f9:d3:15:80:21:cb:d6:ba:f9:
e3:69:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:09 2025 by rpki-client