Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UTnCvuwuSufLBjDcmz9m6viOXWE.roa
File: UTnCvuwuSufLBjDcmz9m6viOXWE.roa (raw, json)
Hash identifier: e9U+7b+xSSSVSG/Ed3i8GIZypi7lKEuEuwPpczUbp1k=
Subject key identifier: 51:39:C2:BE:EC:2E:4A:E7:CB:06:30:DC:9B:3F:66:EA:F8:8E:5D:61
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01953E615DDF4CF7149BDE4A29553A9F58E0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UTnCvuwuSufLBjDcmz9m6viOXWE.roa
Signing time: Tue 25 Feb 2025 18:32:03 +0000
ROA not before: Tue 25 Feb 2025 18:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203511
IP address blocks: 45.94.171.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:61:5d:df:4c:f7:14:9b:de:4a:29:55:3a:9f:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 25 18:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5139c2beec2e4ae7cb0630dc9b3f66eaf88e5d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:14:81:28:2a:15:74:74:35:df:b9:b9:2d:
82:a3:84:5b:08:94:25:1a:c8:b4:99:a0:d7:cd:02:
9a:0f:25:39:fd:ea:14:bc:73:2b:78:38:b4:73:18:
a7:02:93:e2:0e:5e:d5:73:10:cb:f5:30:ce:25:eb:
47:c0:f6:3d:fa:48:62:aa:36:d6:ba:86:01:3e:8a:
8b:ed:ac:53:dd:df:9f:3c:c7:bb:24:34:73:ed:b6:
e0:0e:b5:35:6a:1c:ea:81:55:ab:33:c6:a9:84:fa:
78:3a:18:35:25:21:28:c6:1e:0a:ad:7e:8a:65:e3:
c0:09:b9:21:45:4f:8f:06:84:d7:9c:22:3d:a8:68:
02:1e:f8:7a:6d:78:f8:5e:f1:02:12:0a:90:dd:82:
23:b0:b5:ae:c3:a9:11:1c:93:c2:a4:84:60:ce:65:
cb:ae:57:7d:a3:48:b1:e0:01:b8:2c:54:a2:7e:6d:
14:69:54:f2:41:9a:7b:3e:11:f5:88:ec:5a:89:f9:
27:99:61:25:17:ac:7b:0a:db:85:5a:7d:8a:e5:60:
6a:87:2a:e9:86:ef:10:80:08:6f:a6:bc:ec:45:c6:
16:e5:2a:f2:87:d8:32:fc:a9:a4:c9:12:1b:2e:8b:
cc:82:7a:2b:71:bc:2c:7d:0c:1d:47:e1:23:eb:c8:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:C2:BE:EC:2E:4A:E7:CB:06:30:DC:9B:3F:66:EA:F8:8E:5D:61
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UTnCvuwuSufLBjDcmz9m6viOXWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.151.2.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d3:6f:8c:47:c6:62:ef:0e:8a:d3:ff:3e:01:1f:b4:94:4f:
8f:49:2e:02:22:c8:fe:69:6e:2a:6c:c2:87:fb:d3:89:6a:65:
a1:d6:d4:49:63:59:61:92:58:8f:df:d3:cf:d4:da:5f:8b:b5:
87:51:20:65:55:ca:03:93:91:c1:3d:c6:e1:a4:bb:4d:b8:a0:
5c:5e:29:87:d9:87:72:d4:72:40:8a:57:15:c2:22:8e:44:8a:
68:38:88:35:88:bb:99:9c:49:08:d3:a3:95:fc:14:85:2f:12:
04:43:d1:65:34:fd:d5:c5:f8:c9:3e:3e:e9:4a:f0:f9:43:c5:
63:cd:53:ca:cf:c4:b7:44:a3:7d:d5:77:5f:53:a3:22:e1:5f:
4d:bf:19:ae:73:c4:f0:2e:0a:f8:cc:0d:76:be:14:17:8c:0f:
21:5f:78:35:1e:78:a0:f3:8a:bf:4c:3e:84:9e:59:8e:fd:2c:
06:74:22:db:83:b5:78:e6:9a:0a:a3:5c:98:23:4b:4e:0e:80:
d2:25:be:15:30:c3:2b:16:5a:e4:32:ab:22:17:67:83:cf:b3:
38:b2:ff:a4:b4:91:d7:32:c0:22:9a:a3:b6:81:60:cd:f2:d6:
fd:9f:55:97:b0:8d:00:4d:67:00:cf:50:54:3f:d1:de:d2:93:
b1:b5:f0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:55 2025 by rpki-client