Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UvJqs6L6gbECpVYPrh2dayfqyB8.roa
File: UvJqs6L6gbECpVYPrh2dayfqyB8.roa (raw, json)
Hash identifier: rafcsqYXBT6xWemID2QWMpddWxWmzIRrjpey1YTIPFA=
Subject key identifier: 52:F2:6A:B3:A2:FA:81:B1:02:A5:56:0F:AE:1D:9D:6B:27:EA:C8:1F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282490D0ACF1CCB42A4AE0C479D7702B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UvJqs6L6gbECpVYPrh2dayfqyB8.roa
Signing time: Thu 02 Jan 2025 17:51:12 +0000
ROA not before: Thu 02 Jan 2025 17:51:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 193.222.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:90:d0:ac:f1:cc:b4:2a:4a:e0:c4:79:d7:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52f26ab3a2fa81b102a5560fae1d9d6b27eac81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:93:72:eb:36:a7:82:f7:6d:c6:33:0d:9a:
4c:f2:65:74:07:7c:72:46:cb:3e:63:de:aa:3b:95:
4e:03:50:3f:24:50:a0:c9:21:17:8f:a3:30:13:db:
86:55:b5:ea:1c:5f:bf:d4:c1:c3:a6:d0:a3:b7:7e:
28:dc:1b:33:d2:47:cd:e3:d5:e5:5e:e3:24:60:a8:
b8:95:b7:65:b9:00:76:38:7d:78:e7:98:96:e2:a7:
3f:f6:12:0f:48:0f:f1:c7:d3:5e:10:28:d3:4a:69:
59:a9:fb:7f:31:2f:31:26:96:1b:f9:cc:04:b3:14:
d2:da:31:98:81:fa:3b:46:11:03:d8:6b:3a:04:e0:
7a:0b:81:77:27:ec:7f:da:ed:eb:12:d8:60:f3:3d:
44:f1:b4:77:35:3e:67:6c:3f:96:80:bc:74:45:1b:
d7:c0:67:37:23:72:29:2f:cd:6a:51:a1:36:f4:a6:
48:cf:4d:3d:6c:c4:fd:3a:7b:fd:e6:01:31:39:13:
80:76:2e:9b:c1:9c:39:2c:92:01:8e:44:8a:72:7d:
3d:8f:9e:d6:70:13:f1:18:b8:fa:60:f5:ad:aa:01:
5f:c0:45:cd:fb:c6:e3:3a:df:85:b3:a6:47:2e:cd:
a9:6f:bc:99:b2:6d:5e:98:b4:c0:dc:a7:33:c4:34:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F2:6A:B3:A2:FA:81:B1:02:A5:56:0F:AE:1D:9D:6B:27:EA:C8:1F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UvJqs6L6gbECpVYPrh2dayfqyB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:43:6f:5f:c0:d8:f4:32:c4:ec:d6:cb:ca:82:7b:3b:d9:67:
a6:5e:77:a4:ba:fe:c0:92:d4:ea:0d:4b:46:98:f5:2c:0b:83:
f3:6e:59:71:45:3f:90:13:57:f3:f9:2e:0a:53:a5:4c:dd:fc:
e2:ad:88:36:6c:e4:dd:0f:17:97:f6:d3:f6:f6:83:29:be:f2:
90:8f:8c:14:8b:02:a5:01:c4:e7:02:4a:92:a2:e3:13:cb:f4:
4e:00:00:3f:56:58:ac:3f:3c:52:5e:23:e7:94:5d:8c:51:a1:
51:51:dd:f4:fe:e5:c5:77:fc:42:be:ac:32:58:b1:1b:f6:46:
53:1c:89:c9:30:26:10:98:4c:e7:6b:86:46:78:c9:3d:18:3a:
c5:6b:0d:95:1c:0c:4d:63:7b:62:ba:6f:fe:53:f7:e4:9d:e7:
e4:2c:25:c9:c1:44:05:e0:e7:3d:f0:2a:15:63:bf:4c:a7:95:
18:d0:e9:66:c0:87:5f:0b:1e:c2:c8:ee:9f:40:0d:22:cb:48:
fb:90:8d:26:b1:16:40:ef:d6:6c:79:92:6e:fe:4e:4a:49:fc:
1a:59:1e:d6:3e:04:43:57:48:8e:31:0e:b3:f8:05:12:69:43:
3e:3c:ea:6b:ec:0f:52:9f:94:8b:bb:11:10:ed:bd:af:24:ca:
e0:9a:a7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:29 2025 by rpki-client