Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/rukbEEbBIMdsJ1f4aryW3lOUsrs.roa
File: rukbEEbBIMdsJ1f4aryW3lOUsrs.roa (raw, json)
Hash identifier: /n7SxXK1I1rExGlKx94Rz9cmygj9ogXTYc/uiCQzdHw=
Subject key identifier: AE:E9:1B:10:46:C1:20:C7:6C:27:57:F8:6A:BC:96:DE:53:94:B2:BB
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281BA787A9F7007E39A064D62D4516
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/rukbEEbBIMdsJ1f4aryW3lOUsrs.roa
Signing time: Thu 02 Jan 2025 17:55:04 +0000
ROA not before: Thu 02 Jan 2025 17:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49421
IP address blocks: 78.83.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1b:a7:87:a9:f7:00:7e:39:a0:64:d6:2d:45:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aee91b1046c120c76c2757f86abc96de5394b2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:c0:10:d4:70:ae:71:03:62:a7:7d:ed:5b:
f2:a9:86:d0:bf:d1:83:9a:a2:b0:a8:50:f8:b6:aa:
5a:f8:95:cc:f1:2d:c9:cf:8b:8e:6b:47:b2:d6:58:
0b:0f:05:a0:1c:5b:de:71:60:f1:10:85:47:83:b9:
c9:ba:f2:69:55:29:f9:b1:81:f4:70:e7:57:11:92:
4e:01:05:3b:30:b8:78:ee:99:2d:9a:89:1a:13:7c:
10:a6:fb:47:2f:7a:52:af:c3:fa:4e:ec:e3:89:a1:
e9:3e:c3:e8:c9:b3:22:1b:68:fe:5f:1f:45:43:11:
2d:fc:f6:d9:7c:96:f1:a0:70:c5:8f:65:e2:20:ae:
34:02:43:4f:18:fb:d9:04:2b:b7:b9:35:37:9b:4b:
1f:76:d1:dc:b5:f7:c8:00:69:44:09:fd:e5:c2:ba:
b0:3b:4e:56:47:dc:7b:8e:72:9f:e4:be:63:08:7b:
f9:3c:64:53:00:ab:04:91:da:13:d5:73:c4:87:63:
c8:e6:1f:26:0f:fd:65:d2:ed:5b:b0:3a:4a:de:a9:
0a:6b:96:f6:05:57:fe:24:c2:7a:4f:d1:9a:c1:d1:
fe:5a:25:76:c2:38:96:1d:1c:4c:fb:51:fc:c7:b1:
f6:20:22:87:f4:85:7b:cd:3e:3f:2a:72:3c:c3:47:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:1B:10:46:C1:20:C7:6C:27:57:F8:6A:BC:96:DE:53:94:B2:BB
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/rukbEEbBIMdsJ1f4aryW3lOUsrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.238.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:3f:8e:60:1e:39:45:5d:02:b3:88:95:db:ca:18:bc:35:7f:
1f:78:e0:b7:e8:7f:b4:a7:c0:a7:9e:8f:d6:3d:79:8f:4f:8e:
1a:4c:a7:9d:fd:9d:77:df:d3:49:47:a9:bf:22:2e:62:9b:4e:
e4:5a:c9:df:90:98:f7:f7:72:8c:43:72:d1:9d:0d:3a:1c:19:
0a:19:9e:b8:32:a8:c5:1e:7e:31:f5:c6:05:b4:57:e4:bf:60:
e7:27:6d:31:1c:0b:fc:7d:97:5d:df:c6:71:46:97:b3:2e:a8:
22:5a:91:1a:17:a7:50:25:d6:de:81:d6:d8:ce:6a:32:8f:2f:
fe:c2:8e:0b:cc:ef:d5:7e:f8:22:7b:29:66:8c:e9:29:d0:97:
3d:f7:2b:40:68:45:8f:d2:0f:c3:f6:a6:b5:81:62:a1:0e:2e:
06:7d:8a:90:85:86:97:1c:19:22:35:2b:b0:9c:19:35:cf:0f:
6a:d5:c6:85:15:2b:30:84:23:a6:c1:08:73:02:97:0c:3d:9e:
ab:b8:e2:29:95:90:42:c4:0d:da:9b:47:78:50:9b:3e:11:8c:
9a:bf:35:bb:a4:20:47:14:f0:b6:a3:ac:5e:a6:75:a9:33:0c:
42:33:69:0c:30:27:d3:62:7d:50:05:22:80:32:d0:ac:5d:a5:
dd:3c:0c:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKBunh6n3AH45oGTWLUUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWU5MWIxMDQ2YzEyMGM3NmMyNzU3Zjg2YWJjOTZkZTUzOTRiMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA347AENRwrnEDYqd97VvyqYbQv9GD
mqKwqFD4tqpa+JXM8S3Jz4uOa0ey1lgLDwWgHFvecWDxEIVHg7nJuvJpVSn5sYH0
cOdXEZJOAQU7MLh47pktmokaE3wQpvtHL3pSr8P6TuzjiaHpPsPoybMiG2j+Xx9F
QxEt/PbZfJbxoHDFj2XiIK40AkNPGPvZBCu3uTU3m0sfdtHctffIAGlECf3lwrqw
O05WR9x7jnKf5L5jCHv5PGRTAKsEkdoT1XPEh2PI5h8mD/1l0u1bsDpK3qkKa5b2
BVf+JMJ6T9GawdH+WiV2wjiWHRxM+1H8x7H2ICKH9IV7zT4/KnI8w0e+KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7pGxBGwSDHbCdX+Gq8lt5TlLK7MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvcnVrYkVFYkJJTWRzSjFmNGFyeVczbE9Vc3JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTlPuMA0G
CSqGSIb3DQEBCwUAA4IBAQCLP45gHjlFXQKziJXbyhi8NX8feOC36H+0p8Cnno/W
PXmPT44aTKed/Z1339NJR6m/Ii5im07kWsnfkJj393KMQ3LRnQ06HBkKGZ64MqjF
Hn4x9cYFtFfkv2DnJ20xHAv8fZdd38ZxRpezLqgiWpEaF6dQJdbegdbYzmoyjy/+
wo4LzO/VfvgieylmjOkp0Jc99ytAaEWP0g/D9qa1gWKhDi4GfYqQhYaXHBkiNSuw
nBk1zw9q1caFFSswhCOmwQhzApcMPZ6ruOIplZBCxA3am0d4UJs+EYyavzW7pCBH
FPC2o6xepnWpMwxCM2kMMCfTYn1QBSKAMtCsXaXdPAyu
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:14:39 2025 by rpki-client