Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa
File: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (raw, json)
Hash identifier: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=
Subject key identifier: FE:EA:81:3D:F7:54:C9:8F:AE:C9:EE:EC:20:9E:95:0D:C4:E7:9B:D4
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDA8CFADD89A052573D680E5FD25A4
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57512
IP address blocks: 91.108.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a8:cf:ad:d8:9a:05:25:73:d6:80:e5:fd:25:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feea813df754c98faec9eeec209e950dc4e79bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:7f:6a:76:20:a8:31:de:00:a6:61:56:2a:
e1:04:b8:8e:59:7a:2b:ec:46:e1:8f:1f:8f:55:31:
d5:45:51:10:b2:eb:ad:16:a7:6d:e9:dc:ea:a6:59:
35:cb:69:a0:f1:4f:a9:02:e5:32:00:a5:0c:37:fa:
e6:a9:b6:ec:4c:26:56:28:97:c4:cc:eb:9e:7e:cd:
e9:ea:08:af:b3:17:56:c8:57:b0:a6:0c:70:94:08:
6c:0a:1c:e7:f4:f7:1d:1f:34:a9:b2:fc:4e:13:26:
13:aa:1f:5f:00:26:72:aa:df:86:c2:ed:ea:00:94:
c0:6a:50:0b:ab:8e:53:36:3b:5f:31:4e:c4:a4:a6:
9d:80:f3:ca:5e:07:af:0f:9e:3a:70:24:fe:85:ba:
af:d3:7a:b3:a6:7f:eb:10:74:32:7f:26:21:30:35:
29:bf:18:87:4c:c7:6c:41:92:99:58:83:79:dc:51:
66:7e:4a:e7:ed:48:25:8c:43:55:98:eb:1c:8c:0f:
81:19:19:85:71:0b:ce:87:91:ff:8a:a0:9f:64:65:
9f:52:b6:57:7d:51:92:83:96:50:1f:cf:67:79:6d:
12:f3:2f:5b:0d:82:ce:3a:5d:21:87:ce:4d:69:c1:
bd:b4:e5:dc:7e:9d:9d:57:75:9e:c4:54:a6:01:b6:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:81:3D:F7:54:C9:8F:AE:C9:EE:EC:20:9E:95:0D:C4:E7:9B:D4
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c4:74:69:f7:78:dd:7b:29:04:f2:37:f4:3d:56:67:22:57:
2e:44:5b:23:75:f7:18:c3:f9:40:8f:25:b9:84:98:4d:df:a2:
69:5e:eb:88:45:ca:a5:10:e5:b6:4c:59:f9:7c:5b:04:a5:b6:
bd:82:c3:ca:ff:cf:bc:46:87:7a:8d:1b:e1:1f:42:3d:89:8b:
ae:63:b7:07:d4:96:82:44:9a:9b:d4:f3:e2:11:ce:4d:b7:61:
70:63:f9:b4:1e:88:0b:27:d1:8f:02:7b:14:96:1c:63:a6:44:
4e:71:ac:77:d6:e5:93:1c:1c:65:17:55:7e:3c:60:b8:26:e4:
69:fb:6a:b9:f5:8a:ba:73:da:55:56:9d:54:7d:e8:8a:21:1e:
9c:7d:33:bb:f3:7a:ea:20:7d:92:94:64:93:f6:7c:aa:ae:a9:
c8:12:d4:37:57:7f:2a:ff:74:95:d1:18:2b:4f:4d:30:d0:05:
b4:cf:5e:53:1c:75:df:2e:91:7c:99:c4:cd:12:83:86:6d:9f:
a0:88:4c:9d:b4:6d:16:08:83:aa:ea:16:8a:d0:aa:86:14:85:
8d:48:73:62:38:9e:60:92:bd:36:91:5a:49:82:64:49:e7:05:
56:a5:a3:0d:ce:5b:1a:3c:8d:56:6f:da:69:93:73:aa:b0:f4:
7f:18:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:28:13 2025 by rpki-client