Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa
File: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (raw, json)
Hash identifier: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=
Subject key identifier: 50:32:2B:ED:5A:B6:3C:25:31:1F:EF:F4:5F:00:5B:A5:B2:80:4D:6C
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019427489100B146ABCA93F279F1955BA047
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43467
IP address blocks: 45.9.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:91:00:b1:46:ab:ca:93:f2:79:f1:95:5b:a0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50322bed5ab63c25311feff45f005ba5b2804d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:b8:7c:df:f2:1e:17:3e:ee:19:3f:15:5d:
8c:fc:91:47:08:77:ed:fa:5e:89:d5:96:d2:51:61:
a1:09:49:77:89:28:78:40:32:70:6c:83:e7:3b:30:
6b:d5:36:07:a5:66:00:8f:3c:27:64:c0:23:fa:64:
92:ee:23:7f:94:4c:ee:8c:e3:50:1f:16:86:f8:b5:
b6:85:d7:a7:9d:f8:8c:aa:1c:40:20:ad:12:e4:d8:
4f:74:8e:09:39:36:ee:87:52:7c:e5:c4:98:c8:f4:
88:0c:5b:2c:ab:f6:1b:8a:db:80:0b:c5:0b:6c:25:
f6:38:e0:3f:bf:30:57:af:d6:f4:cc:fb:c6:d1:24:
49:b6:c9:41:00:a8:ef:b7:be:a5:62:00:7c:1d:4f:
f3:6a:50:b7:86:fe:a5:fa:c8:0b:d2:52:a8:c2:0e:
81:43:84:42:75:db:7d:df:4e:e0:ee:20:c9:19:9a:
44:88:9c:28:a4:19:0f:61:ae:1d:3d:9c:82:d3:49:
ea:87:2e:a1:e9:33:6c:c6:45:0e:88:e0:bb:2c:05:
ff:88:9e:7f:64:1e:ad:f5:16:01:c2:8f:5c:ac:18:
0e:89:fa:73:9d:b7:7f:db:da:78:99:69:e1:76:2e:
4d:6b:af:33:f0:8a:af:da:db:1f:ac:bb:42:8c:ee:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:2B:ED:5A:B6:3C:25:31:1F:EF:F4:5F:00:5B:A5:B2:80:4D:6C
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.80.0/22
Signature Algorithm: sha256WithRSAEncryption
56:8e:23:cc:15:3b:a0:7e:e7:b2:8f:7f:a2:5f:e8:0d:ed:7b:
fd:35:35:97:c1:03:ba:90:0a:f8:26:d2:f3:01:68:a3:d9:33:
fa:7f:0f:ad:9c:94:ab:75:e8:f7:53:77:55:33:78:db:46:42:
ef:94:b5:94:45:c7:f1:1c:a9:38:c0:19:8c:05:3f:f1:b9:24:
82:23:ad:8c:f0:e9:c2:ab:12:34:f3:62:eb:07:89:cb:a3:47:
9a:5b:d3:06:95:d7:1c:56:20:dd:8a:ca:7e:07:c5:ff:10:cd:
2b:36:22:e7:ce:7a:20:66:77:4b:09:8c:3f:9d:54:e0:e3:69:
3a:b2:89:cb:bc:e0:4d:47:0f:d3:6a:86:6a:bc:2f:55:09:f7:
9a:95:dc:be:99:ca:e8:49:76:46:91:08:fe:c1:f6:ab:33:de:
ab:3d:14:f7:31:ac:c4:25:ae:6e:e7:ca:2d:79:cd:89:50:57:
5b:af:43:b2:b4:21:91:88:d4:02:d5:34:55:85:76:04:78:be:
36:a7:31:d3:15:f4:2f:3d:04:76:73:49:87:5e:fb:2b:1d:75:
89:4d:f0:22:d9:c7:a8:47:a0:cd:83:13:60:c8:17:fe:a0:d0:
c3:f0:e7:ee:05:4d:3c:d5:7d:02:03:7f:fc:5c:c9:31:7e:d8:
2c:bc:19:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:08 2025 by rpki-client