Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/UEoVdPpKXNYPc5eN4NXhO3hKujE.roa
File: UEoVdPpKXNYPc5eN4NXhO3hKujE.roa (raw, json)
Hash identifier: S8TgRAvXGtwdrVW8V4DMPg99ZH66pkiGd931XsFhH8g=
Subject key identifier: 50:4A:15:74:FA:4A:5C:D6:0F:73:97:8D:E0:D5:E1:3B:78:4A:BA:31
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 01941F8C94A85BE880D8AA1C4C0A03994CCE
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/UEoVdPpKXNYPc5eN4NXhO3hKujE.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202316
IP address blocks: 185.63.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:94:a8:5b:e8:80:d8:aa:1c:4c:0a:03:99:4c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=504a1574fa4a5cd60f73978de0d5e13b784aba31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:48:c0:b4:29:e5:1a:64:d1:91:6e:8e:30:
7f:3f:ca:e4:e4:ed:5c:19:82:b9:73:4a:6d:0e:88:
22:b5:7e:64:9f:c6:d9:3a:be:aa:4f:ca:18:7d:dc:
f4:8b:5a:0d:88:5e:cb:0b:6b:25:6b:11:0a:55:6b:
7e:43:02:b5:48:b5:0c:52:5d:fe:4c:87:06:ee:b5:
5e:da:fa:06:9a:16:25:41:3d:be:77:9b:86:cb:3b:
2d:93:78:a8:9c:7b:47:30:90:47:83:ad:80:58:75:
cf:91:30:ad:b6:e5:03:43:57:e8:dc:7b:2f:f0:d1:
7d:30:54:01:ad:fd:ee:96:5c:5a:bb:e3:33:c0:00:
f2:94:06:1b:83:58:d6:58:e8:f5:7b:72:f2:46:6f:
b7:e6:6d:0f:c3:52:0b:19:10:83:4f:f2:87:5b:84:
11:19:3c:38:62:05:f0:7b:79:70:b8:63:aa:23:5d:
aa:fa:db:f6:b2:92:99:97:87:6e:42:7d:71:85:3e:
b9:02:58:26:6a:c4:1d:5b:28:aa:26:41:88:1f:12:
ff:e6:b0:44:ee:a1:3e:86:90:8d:ce:98:ae:c1:e6:
9a:1f:cd:ff:2e:0a:fe:b2:3d:d5:87:43:21:2e:50:
69:0e:38:b6:1e:df:96:f6:c1:1c:8c:08:d2:7b:9c:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:15:74:FA:4A:5C:D6:0F:73:97:8D:E0:D5:E1:3B:78:4A:BA:31
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/UEoVdPpKXNYPc5eN4NXhO3hKujE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.85.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2c:58:b4:d6:a6:87:13:af:5a:94:08:8c:15:94:a2:0e:d8:
3e:40:97:fb:d3:60:64:8a:70:5b:a0:79:eb:5f:c2:92:45:7c:
f5:45:77:2b:e1:de:6c:8b:78:c8:3a:18:14:80:0f:d0:03:ed:
42:f2:6c:c9:03:85:65:5f:f7:d6:c2:43:58:ca:93:c4:2c:d3:
3b:fa:ac:c3:bf:31:d8:69:35:03:f6:9a:7c:6a:f5:28:81:3c:
35:59:58:6c:a8:7f:49:8f:94:b7:b7:d2:8a:ee:af:47:b3:dd:
32:73:a9:ac:00:fa:a5:67:fa:cb:29:35:6e:50:7e:23:ec:d7:
54:ae:7b:6a:45:a9:91:1f:b9:06:11:b5:f1:85:0f:27:ce:9b:
c9:a6:7d:5c:1f:85:97:4f:f1:fd:ed:46:fa:4e:c3:f3:68:b3:
62:b7:99:a8:4a:32:39:67:12:ac:3a:2b:af:99:c2:5f:e4:80:
02:75:6f:89:76:48:27:c1:e2:0e:92:51:53:a7:17:fe:a7:4a:
ee:6b:05:46:76:2f:1f:f2:6b:11:9e:2c:8b:e6:4e:91:16:1e:
ef:9a:e1:ce:a5:2f:e5:4e:13:64:24:38:fd:3b:20:1f:0b:09:
55:6f:3b:a7:08:7e:84:f1:bd:c5:1a:1f:7e:d7:17:dd:90:23:
5a:1f:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:48:15 2025 by rpki-client