Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/Uj5VQZ6b6oKxwVvDN0EBZ4rsNGw.roa
File: Uj5VQZ6b6oKxwVvDN0EBZ4rsNGw.roa (raw, json)
Hash identifier: 8PKTi26pIQ4VombiOrobgWJT6wPpzYb/vk0bG6N7UuM=
Subject key identifier: 52:3E:55:41:9E:9B:EA:82:B1:C1:5B:C3:37:41:01:67:8A:EC:34:6C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 01960AC5618F5742E63903E872ED36DCAC40
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/Uj5VQZ6b6oKxwVvDN0EBZ4rsNGw.roa
Signing time: Sun 06 Apr 2025 11:03:49 +0000
ROA not before: Sun 06 Apr 2025 11:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210513
IP address blocks: 62.3.56.0/24 maxlen: 24
185.65.255.0/24 maxlen: 24
2a12:100::/29 maxlen: 29
2a12:100:14::/48 maxlen: 48
2a12:100:16::/48 maxlen: 48
2a12:100:18::/48 maxlen: 48
2a12:100:19::/48 maxlen: 48
2a12:100:1a::/48 maxlen: 48
2a12:100:1b::/48 maxlen: 48
2a12:100:1c::/48 maxlen: 48
2a12:100:1d::/48 maxlen: 48
2a12:100:24::/48 maxlen: 48
2a12:100:26::/48 maxlen: 48
2a12:100:28::/48 maxlen: 48
2a12:100:29::/48 maxlen: 48
2a12:100:2a::/48 maxlen: 48
2a12:100:2b::/48 maxlen: 48
2a12:100:2c::/48 maxlen: 48
2a12:100:2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:c5:61:8f:57:42:e6:39:03:e8:72:ed:36:dc:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Apr 6 11:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=523e55419e9bea82b1c15bc3374101678aec346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:05:21:86:f0:3c:15:51:f4:db:92:90:6b:
05:01:ea:86:2a:42:0d:1b:e0:fe:5c:45:bb:c5:fe:
b9:7c:f1:c1:70:b3:99:d4:6f:4a:a0:9c:64:a0:c9:
9a:9d:86:e4:06:6f:e6:f9:06:eb:0f:a6:fa:8d:4a:
64:d8:ee:bb:eb:ad:80:fc:b8:83:4b:7a:60:f2:08:
e0:82:9d:0c:c7:b6:da:da:39:f5:65:61:f6:58:0e:
63:a8:0e:de:89:80:9a:91:15:0e:30:b8:ea:2a:ef:
f6:36:e1:7e:df:cd:c3:35:66:37:2d:d7:26:05:9f:
85:40:48:17:33:23:1e:b7:a4:12:23:a3:ec:ef:d2:
55:85:2b:98:a4:f3:0e:6d:32:3b:a4:57:34:3f:64:
76:ed:cb:76:08:10:8d:9b:59:6d:6d:a4:38:3d:cc:
59:62:2f:ae:2a:4b:53:dd:71:93:22:75:32:d1:04:
7b:b8:ae:f8:59:c9:fc:b0:a8:a1:f9:1f:44:02:a6:
fb:98:d2:ab:4d:41:3e:ff:fe:c5:8b:5f:54:8d:5f:
ef:c8:82:6a:ae:c6:6e:98:cb:11:df:95:51:96:5b:
ad:75:2b:20:ff:9d:c5:38:45:d1:45:60:12:e0:0c:
e6:0f:5f:03:7e:29:5d:9c:7d:70:6a:1c:ee:4b:01:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:55:41:9E:9B:EA:82:B1:C1:5B:C3:37:41:01:67:8A:EC:34:6C
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/Uj5VQZ6b6oKxwVvDN0EBZ4rsNGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.56.0/24
185.65.255.0/24
IPv6:
2a12:100::/29
Signature Algorithm: sha256WithRSAEncryption
78:c4:f8:17:d8:7f:d3:02:e6:78:e5:07:d8:29:9b:26:c1:97:
16:e9:a5:71:f4:55:55:a9:49:b7:38:69:ba:ba:35:ff:c0:0b:
72:f2:09:6b:89:ba:7b:9e:7b:b9:8f:8f:07:71:fd:eb:aa:87:
de:5d:1b:b7:fe:a4:78:96:b1:8a:36:bf:92:8e:18:90:4d:c1:
ee:e7:8c:52:9c:e9:8f:a3:05:35:9f:bb:19:f6:f5:de:03:15:
b0:d4:b2:4b:fc:64:02:bc:6c:13:8b:83:bc:52:e3:50:04:7a:
7b:13:4b:f3:3d:38:63:cd:d0:b1:5d:71:f6:5d:f0:e1:f0:6f:
47:45:57:60:85:89:78:8e:30:4d:8f:55:db:a0:fd:9e:01:ab:
98:5d:35:a3:be:c6:e6:7c:64:88:b7:51:79:cc:02:97:a2:b0:
84:ef:a5:9c:c4:25:8e:16:39:6d:50:20:aa:c8:14:f1:e7:7f:
15:d0:37:f7:e9:65:66:9c:29:8b:b5:e9:ff:f0:98:05:b4:d9:
dd:a6:1c:81:9b:7e:2c:1e:dc:6f:bf:3d:de:e1:9e:a1:4d:fc:
48:9f:90:aa:8d:08:e6:32:e2:d0:38:65:8b:4b:66:ee:7f:51:
00:dc:63:1d:e3:29:41:b0:3c:ed:ac:f4:03:4f:f1:be:26:62:
5e:97:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:41:50 2025 by rpki-client