Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/UPgAt10tmqeiB0ExLwRVr2_cA2k.roa
File: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (raw, json)
Hash identifier: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=
Subject key identifier: 50:F8:00:B7:5D:2D:9A:A7:A2:07:41:31:2F:04:55:AF:6F:DC:03:69
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019425FBF27AFAFA5125F035C5499F29F19A
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/UPgAt10tmqeiB0ExLwRVr2_cA2k.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 45.90.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f2:7a:fa:fa:51:25:f0:35:c5:49:9f:29:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50f800b75d2d9aa7a20741312f0455af6fdc0369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ef:59:93:44:bb:9f:e2:f3:cc:51:a2:ec:76:
b1:6c:f9:5c:7d:c2:72:73:81:01:13:bc:35:7a:da:
ea:4e:1c:6a:2d:f4:f0:96:48:14:0c:4f:46:b1:07:
8d:b7:24:f0:3d:da:f6:8b:0f:3b:74:68:90:dd:da:
9d:f7:2f:c4:27:78:d8:1d:08:96:c1:41:b4:39:79:
55:31:1c:de:a0:a4:1c:37:81:2c:b9:eb:81:aa:ee:
cf:9a:5b:3f:99:29:22:1b:f8:fb:a4:65:51:98:b7:
89:b4:46:34:8f:75:1c:86:7a:46:f4:5d:be:00:2b:
7b:1b:44:92:e0:9c:b6:88:1e:9d:1b:b3:a4:e0:ad:
33:5e:8d:a9:59:65:df:4a:3f:47:d3:85:da:29:5f:
5a:67:99:12:dd:f2:dd:9d:99:6a:2f:f0:de:86:f8:
d8:53:ce:da:71:10:42:cf:0f:58:37:ed:b1:68:3e:
0e:a1:4d:01:7b:f9:d3:74:69:3c:83:3d:c4:21:16:
59:c2:fa:5e:e0:d2:3d:d2:31:4c:eb:71:6f:8e:e6:
cd:4f:62:46:38:ac:98:96:44:85:ee:2c:11:0f:ad:
f8:98:43:87:07:2b:14:8a:ce:2b:ee:c1:f3:f9:90:
87:f4:99:94:7f:ff:76:c2:0c:ac:6e:fd:e9:c8:77:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F8:00:B7:5D:2D:9A:A7:A2:07:41:31:2F:04:55:AF:6F:DC:03:69
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/UPgAt10tmqeiB0ExLwRVr2_cA2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.41.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9e:d0:ed:69:e7:aa:f1:f8:b3:b1:f4:fd:ba:2e:30:b3:78:
68:0c:24:20:7b:d7:d2:67:00:9f:e0:7b:03:c5:65:44:e1:b9:
86:c7:79:14:08:63:c6:00:4d:b2:d6:27:62:4a:6c:f7:dd:e8:
59:3f:28:03:4a:ef:aa:42:8b:e3:e1:06:12:e7:6a:5a:54:0d:
46:59:68:df:24:e5:99:f1:a5:95:9e:9f:cc:66:af:ef:ad:1a:
85:cf:6f:cc:d1:7e:02:5d:f0:ca:d4:75:b9:0b:b7:ff:9b:51:
68:b1:5e:9c:9f:81:a1:e1:c5:16:2c:81:d1:fc:18:6f:fd:b5:
41:23:9a:84:66:d9:db:e5:d1:8d:a1:40:3a:fd:8b:c1:86:5a:
a6:c1:78:3f:f5:8d:39:22:33:c0:c9:4e:e6:10:b8:98:61:8f:
94:1e:29:a7:40:d8:ee:c2:9c:02:0d:4e:d5:8d:18:a5:19:03:
c1:a0:ec:79:17:b8:9f:d3:e4:b6:f8:13:be:10:d3:2b:3d:db:
51:28:14:00:a3:13:03:7d:57:47:d7:56:d7:39:3e:7d:73:00:
85:4c:76:b7:e5:dd:7f:c0:3d:33:ce:d2:48:8b:d3:88:32:56:
3c:30:5d:e5:77:d8:6c:c0:a9:d1:0c:7c:9e:c0:4e:93:07:a3:
1f:ae:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:48 2025 by rpki-client