Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ulfvPRSSn4HEoigXYoN-qraw9B0.roa
File: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (raw, json)
Hash identifier: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=
Subject key identifier: BA:57:EF:3D:14:92:9F:81:C4:A2:28:17:62:83:7E:AA:B6:B0:F4:1D
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019427B60F86E6D3FA0F4A79F51CF923D2A0
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ulfvPRSSn4HEoigXYoN-qraw9B0.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35145
IP address blocks: 5.181.226.0/23 maxlen: 23
5.181.226.0/24 maxlen: 24
5.181.227.0/24 maxlen: 24
2a0e:802:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0f:86:e6:d3:fa:0f:4a:79:f5:1c:f9:23:d2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba57ef3d14929f81c4a2281762837eaab6b0f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:c8:9a:17:72:9b:d2:ae:66:07:4d:dd:6f:
ab:68:a3:10:b0:60:31:d7:c1:9d:23:ee:0c:56:c6:
92:b8:cb:f3:93:80:2b:62:95:06:b0:37:ba:57:4d:
14:77:91:da:7e:9a:45:59:6f:1a:40:2a:f5:96:d5:
75:e9:b9:31:f2:2a:28:a8:34:a9:0d:34:3e:cd:23:
23:de:3d:f4:c4:49:3d:fb:bb:ed:08:16:8d:5d:16:
0a:26:1c:eb:4b:8f:37:51:15:83:28:37:6d:8f:99:
5b:6a:39:6f:86:4a:e2:4f:28:28:aa:26:03:83:29:
07:8b:6f:04:aa:50:08:82:bc:e7:8b:8c:24:93:75:
22:0e:08:6b:e8:54:87:d4:22:37:39:39:1d:ad:4e:
51:bb:f2:b6:4f:1e:0a:b3:02:b0:66:a7:33:1e:44:
9f:86:a8:0c:ef:38:29:9d:13:8e:51:6b:5e:65:8f:
fe:40:b8:9b:f5:1c:a7:01:ba:c9:31:d6:31:02:d8:
f5:56:ef:5b:2f:61:d5:0b:28:cd:59:aa:4e:1c:cd:
bc:6d:2c:ff:69:25:a4:3a:e1:7a:77:d4:b5:71:e3:
f4:73:08:c1:a5:2f:e3:d6:67:0b:8c:e8:81:7c:cb:
45:44:cc:42:14:07:a9:d1:c5:65:5b:be:2e:06:84:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:57:EF:3D:14:92:9F:81:C4:A2:28:17:62:83:7E:AA:B6:B0:F4:1D
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ulfvPRSSn4HEoigXYoN-qraw9B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.226.0/23
IPv6:
2a0e:802:1::/48
Signature Algorithm: sha256WithRSAEncryption
9b:13:3e:ca:e2:38:ff:9f:a1:9c:b3:e2:ea:e0:32:e8:4b:f6:
e3:66:a0:0a:e2:c4:ba:cf:b8:b0:92:02:a2:82:b2:45:cd:af:
58:47:99:c7:33:a4:f1:eb:a6:ad:86:f1:db:7d:98:a1:bd:02:
d8:4c:ff:33:7d:3f:d0:41:ab:9f:f0:e9:9a:ec:a3:48:bc:59:
bd:be:bf:9e:10:d7:bb:54:ed:36:5b:1d:b5:a0:31:5c:91:11:
0b:f8:e0:9b:78:ff:dd:03:67:95:1d:f2:50:e6:9b:66:2d:83:
4e:4f:81:be:92:37:75:04:d2:56:a2:2b:a2:84:0f:2c:97:8d:
f9:02:7a:42:74:3d:68:fb:01:32:1f:06:1b:38:c3:df:19:b7:
2b:1d:b8:30:3d:49:72:31:4e:e9:b7:8b:7a:52:4b:cd:e7:4a:
fa:a7:5f:bb:03:85:2d:cc:e6:d4:b0:50:d5:4e:a5:9f:17:8c:
29:1b:d9:d3:cc:62:e7:f7:6f:65:4e:32:a1:5c:72:66:01:6d:
b3:dc:cc:54:96:98:83:dc:ad:5d:8b:9a:4b:1d:0c:9f:3b:e6:
8a:4b:4e:0e:e8:64:20:1e:21:79:cb:18:61:79:6f:c1:42:38:
1f:65:51:dd:4f:26:e9:85:72:d4:28:68:c7:bc:31:6e:de:43:
1b:65:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:21 2025 by rpki-client