Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/U6zuk58ajYVysKNz6qXWGH9vBbQ.roa
File: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (raw, json)
Hash identifier: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=
Subject key identifier: 53:AC:EE:93:9F:1A:8D:85:72:B0:A3:73:EA:A5:D6:18:7F:6F:05:B4
Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial: 019427B611D0AA59D1BA741060FA56D34232
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/U6zuk58ajYVysKNz6qXWGH9vBbQ.roa
Signing time: Thu 02 Jan 2025 15:50:31 +0000
ROA not before: Thu 02 Jan 2025 15:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42
IP address blocks: 194.0.27.0/24 maxlen: 24
2001:678:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:11:d0:aa:59:d1:ba:74:10:60:fa:56:d3:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53acee939f1a8d8572b0a373eaa5d6187f6f05b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:3f:48:40:c3:9c:7f:74:60:c3:2a:65:bf:
5f:dd:b5:f2:d9:bd:70:77:61:49:75:6c:dc:93:41:
c4:56:c3:07:fd:2a:82:73:63:08:21:8c:d9:96:8f:
ca:1c:c7:86:15:24:8d:90:a5:8c:1e:d0:b1:41:e6:
04:2b:c6:bb:e4:9d:7f:3d:12:4d:df:0c:82:31:7d:
be:51:3a:85:ff:02:b2:da:d5:5e:75:8b:07:8c:24:
da:d5:76:f9:49:b5:f2:e9:49:d8:e8:77:b1:70:bc:
de:ce:6b:48:d8:75:e3:88:6a:30:c7:60:ad:a4:e6:
05:b7:ef:31:48:3c:73:76:e0:aa:fc:4f:c4:0c:e8:
07:bf:7e:29:45:bc:31:22:02:c9:17:04:bb:13:88:
8b:b5:80:bd:d4:61:a9:bc:6c:75:fc:27:be:99:01:
47:00:9d:08:8d:31:f2:ba:4c:b2:0f:f4:57:24:a1:
e0:3c:f4:40:fa:97:d8:03:fc:40:39:d6:69:67:47:
42:a7:16:a5:01:4b:e3:58:3d:ba:eb:c5:95:6b:ec:
c8:ff:f8:be:8b:08:51:62:72:27:14:44:13:a2:4c:
27:34:a5:74:2c:ff:6b:9d:22:17:d8:30:f1:ff:ef:
ec:fc:c5:ae:b8:d1:dc:53:11:fd:2b:68:91:75:c0:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:EE:93:9F:1A:8D:85:72:B0:A3:73:EA:A5:D6:18:7F:6F:05:B4
X509v3 Authority Key Identifier:
keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/U6zuk58ajYVysKNz6qXWGH9vBbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.27.0/24
IPv6:
2001:678:28::/48
Signature Algorithm: sha256WithRSAEncryption
98:d3:29:d6:af:fd:60:87:ed:2f:f9:eb:08:cc:be:55:f7:34:
66:d6:ae:45:8c:95:12:55:58:45:4f:c3:f6:4e:c1:58:d3:5f:
d2:b4:bc:99:a8:23:62:15:1d:9f:2e:c1:64:92:3e:49:a9:00:
14:2b:af:ce:51:71:ac:b1:7e:f3:84:45:d3:9e:c3:51:d7:a3:
81:a6:23:25:1f:4e:de:49:7b:a2:0f:84:2c:18:bb:63:9e:6b:
81:bd:4a:23:3f:9e:59:06:18:4d:91:63:6e:36:fc:8f:41:ef:
3e:32:32:7e:be:92:e1:38:08:fc:33:95:3e:39:d8:4e:83:1b:
1f:e1:6a:2c:4f:27:b9:eb:22:f4:62:bb:ba:35:20:54:3f:f7:
bf:c9:8d:45:d8:8e:17:ae:0b:38:5a:74:52:74:c7:f0:7b:25:
c3:ac:dc:d8:3a:6a:80:0d:4b:23:76:c9:97:e0:02:27:46:47:
79:b4:fe:4e:de:00:06:e4:f1:f3:b3:f4:03:37:4a:7f:fb:7d:
b2:1a:a4:9e:60:1a:55:f0:1d:9d:a0:e7:6f:df:09:e8:fd:12:
cf:72:99:55:c4:58:fe:58:7e:38:1d:00:cd:23:94:52:8a:60:
7c:b0:df:4c:83:27:de:2b:c5:2d:6c:84:a9:ee:ef:16:43:6e:
86:f0:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:19:32 2025 by rpki-client