Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u0og0zqWSrUoIzOX8d0Fre_ucjk.roa
File: u0og0zqWSrUoIzOX8d0Fre_ucjk.roa (raw, json)
Hash identifier: CyTLFOcEBiwRsBNhsrGp5p/KfKd1pmOmyeEJjcetx8A=
Subject key identifier: BB:4A:20:D3:3A:96:4A:B5:28:23:33:97:F1:DD:05:AD:EF:EE:72:39
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A61845F9C764E4CC1BE97C7BC24F
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u0og0zqWSrUoIzOX8d0Fre_ucjk.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50113
IP address blocks: 5.101.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a6:18:45:f9:c7:64:e4:cc:1b:e9:7c:7b:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb4a20d33a964ab528233397f1dd05adefee7239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:b6:f0:1a:53:84:d8:05:34:36:7a:50:b5:
4a:57:e1:10:10:85:28:3c:97:ad:32:02:91:da:4c:
94:68:f0:04:e0:05:54:87:e3:ac:b9:96:3d:61:e7:
21:22:20:40:b3:12:80:47:ba:2b:48:3c:76:f3:24:
63:d9:9c:6f:35:b2:0b:95:c1:28:88:a6:ac:21:76:
38:81:6a:64:94:a7:7f:50:ea:45:34:9d:88:9d:fe:
1c:29:9d:d7:7a:82:a2:62:1e:62:09:02:5f:a8:35:
76:92:67:8d:9f:de:8c:f5:93:6d:69:f8:ba:7c:0c:
3a:ba:6a:23:50:30:0f:ff:2a:44:e1:90:e6:53:56:
35:c7:e3:15:b9:c9:21:d3:49:b3:68:75:80:63:2c:
37:e2:42:48:cc:e4:1e:39:f7:47:cd:b3:22:9a:7c:
fb:58:2f:c9:42:15:6e:9d:47:d4:fd:2a:2f:0e:66:
58:6e:04:56:75:a5:ff:41:ef:06:d8:4b:a8:8e:ec:
42:5f:22:e6:10:b0:4b:0a:af:00:62:e1:39:76:27:
8b:9d:f5:6a:95:e4:d8:0e:75:2f:bc:82:15:02:ac:
b6:ae:d7:be:0d:36:d3:a5:f1:0b:83:af:37:c9:34:
ec:90:9c:f6:d0:e6:bb:1a:41:06:93:10:e5:54:92:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4A:20:D3:3A:96:4A:B5:28:23:33:97:F1:DD:05:AD:EF:EE:72:39
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/u0og0zqWSrUoIzOX8d0Fre_ucjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.88.0/24
Signature Algorithm: sha256WithRSAEncryption
88:80:f0:94:7f:64:bd:0f:cb:ca:b8:e0:af:85:5f:fc:c4:69:
81:03:a3:00:37:24:2f:3d:cf:6a:72:14:9f:87:10:72:c9:f5:
99:3e:96:d3:0f:51:eb:6f:0e:dd:fb:13:63:08:7e:33:78:6d:
6e:0a:52:1b:cd:6b:79:e3:f1:e5:8a:66:fa:20:02:69:86:55:
f6:1b:97:36:29:e8:17:9f:df:f7:45:e1:54:e1:57:b2:70:45:
58:7c:c5:91:c2:58:1b:b1:10:9d:13:ee:b0:af:f4:ca:7c:3a:
84:3d:71:50:cc:9a:5a:04:e4:29:97:9d:41:cf:93:71:b1:ec:
9b:59:b8:fa:25:09:04:26:3a:ea:18:40:59:07:c2:7f:23:f5:
78:2f:55:12:e1:9e:62:1f:e5:1f:24:81:e8:8b:f7:c6:a9:95:
7e:ad:a2:e4:9e:83:05:a1:50:be:76:a8:85:9b:3b:53:52:9e:
db:ae:3d:c7:88:dc:9b:8d:1b:74:9f:6c:55:17:54:c4:5d:f6:
e7:da:46:27:55:6d:5e:cd:ae:a7:3d:a2:f3:92:0f:68:63:29:
55:13:76:fe:c8:4e:e8:04:51:1f:26:52:72:e7:9a:d0:9b:6b:
58:1b:ff:d3:b5:c5:ea:3d:0c:23:29:79:dc:fa:d5:56:05:6d:
86:c3:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:52:11 2025 by rpki-client