Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/UXRIjhO3UUO4YoZo2r0jseniB20.roa
File: UXRIjhO3UUO4YoZo2r0jseniB20.roa (raw, json)
Hash identifier: KSt+2WBEDCtsKI4qArbIQ4v7Y4cNWZ7oIb8Mm9wlcS0=
Subject key identifier: 51:74:48:8E:13:B7:51:43:B8:62:86:68:DA:BD:23:B1:E9:E2:07:6D
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019427B60C77C4CDA0BA74A959903681B5E2
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/UXRIjhO3UUO4YoZo2r0jseniB20.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216154
IP address blocks: 45.10.172.0/23 maxlen: 23
45.10.172.0/24 maxlen: 24
45.10.173.0/24 maxlen: 24
45.114.60.0/22 maxlen: 22
84.252.102.0/23 maxlen: 23
89.46.131.0/24 maxlen: 24
89.150.34.0/23 maxlen: 23
89.150.41.0/24 maxlen: 24
89.150.59.0/24 maxlen: 24
91.132.224.0/24 maxlen: 24
103.54.16.0/22 maxlen: 22
103.90.72.0/23 maxlen: 23
103.90.74.0/23 maxlen: 23
103.90.74.0/24 maxlen: 24
103.90.75.0/24 maxlen: 24
103.137.248.0/22 maxlen: 22
188.241.196.0/23 maxlen: 23
2a0c:db40::/32 maxlen: 32
2a0c:db40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0c:77:c4:cd:a0:ba:74:a9:59:90:36:81:b5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5174488e13b75143b8628668dabd23b1e9e2076d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:17:ff:ee:e2:ba:4d:b4:5c:e9:82:45:1b:
44:e9:32:29:9e:ff:aa:61:2e:e1:12:8a:c6:9d:be:
84:d0:08:12:b8:7b:70:9a:e1:36:b7:a7:a7:75:5a:
dd:49:4f:26:31:0f:73:d3:66:52:48:9e:d0:d1:cf:
76:99:f8:57:5a:a9:07:e5:04:ca:ba:f5:b8:1c:9e:
46:ba:8e:f1:c1:ad:0b:b9:89:b5:fe:c0:58:e5:08:
2a:8a:d8:19:df:ab:0f:fa:3c:f4:9b:01:81:69:73:
28:fd:32:f2:fb:34:65:07:f3:6a:28:6d:7b:b1:86:
33:1d:19:4e:99:c7:65:12:c8:5f:14:01:4e:8b:83:
db:e2:c1:c3:0d:d9:95:c8:2b:87:a6:07:5e:6d:48:
e6:21:09:34:5e:54:4b:7c:0b:79:69:61:21:7f:97:
c4:d8:90:b1:3a:a8:f2:3d:54:4b:19:b4:b1:72:42:
6a:24:7b:9c:6a:f7:29:db:c9:ab:8e:08:07:63:61:
2f:e9:da:75:71:41:b4:08:c6:2a:6c:ea:30:d9:77:
39:e8:71:91:73:11:75:90:04:c9:b0:dc:0f:c8:05:
27:d7:00:47:9d:0c:9e:a0:1b:42:99:ed:36:ba:30:
62:e0:a0:15:8e:73:c4:6c:76:11:b0:a0:5e:2e:f2:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:48:8E:13:B7:51:43:B8:62:86:68:DA:BD:23:B1:E9:E2:07:6D
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/UXRIjhO3UUO4YoZo2r0jseniB20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/23
45.114.60.0/22
84.252.102.0/23
89.46.131.0/24
89.150.34.0/23
89.150.41.0/24
89.150.59.0/24
91.132.224.0/24
103.54.16.0/22
103.90.72.0/22
103.137.248.0/22
188.241.196.0/23
IPv6:
2a0c:db40::/32
Signature Algorithm: sha256WithRSAEncryption
5d:0d:54:13:a1:27:94:e5:a3:93:23:2c:b1:86:ea:2d:1b:6a:
47:ff:fe:4c:17:0f:49:e2:81:78:cb:0d:f0:15:c2:f9:27:a8:
e3:8e:41:ea:61:d3:c5:24:48:a9:2d:60:03:55:d1:07:8f:12:
09:fa:d4:49:9a:58:80:a1:50:6a:1e:50:1e:e1:46:44:e0:2a:
cb:78:29:1e:ad:2f:1a:2f:42:5e:b3:ad:70:6c:34:de:63:8f:
33:87:05:93:87:0d:ef:bc:6c:4f:b7:81:ad:ce:76:0e:f3:9c:
5a:ef:76:e3:fa:1d:7d:e8:5d:1e:d0:0c:d4:9d:1c:22:fa:e5:
ba:6b:64:0a:65:d5:85:f5:1f:51:54:64:85:4c:20:2a:30:59:
2b:6e:d7:51:99:93:83:07:ba:60:44:f6:a9:86:c7:23:9a:e5:
4c:a5:99:92:37:35:79:2f:41:0d:09:93:dc:af:99:71:59:7d:
64:fa:aa:16:3c:57:19:7e:c7:08:c6:b3:a8:77:6d:19:f6:75:
e9:2d:b1:2e:7d:56:e4:2b:37:27:d4:4c:b1:ff:4d:08:ac:b8:
a3:7f:4e:93:fc:6b:69:2b:b3:23:3f:11:32:cb:08:5e:60:ab:
c1:b9:e9:5b:68:2f:82:dd:79:0d:a5:f9:74:ea:24:97:f3:db:
31:16:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:10:44 2025 by rpki-client