Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/uklhr2EyG0t3uT3k6llXTSBL2L8.roa
File: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (raw, json)
Hash identifier: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=
Subject key identifier: BA:49:61:AF:61:32:1B:4B:77:B9:3D:E4:EA:59:57:4D:20:4B:D8:BF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 0194A825F18D97B490422827406E50765971
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/uklhr2EyG0t3uT3k6llXTSBL2L8.roa
Signing time: Mon 27 Jan 2025 14:24:06 +0000
ROA not before: Mon 27 Jan 2025 14:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48219
IP address blocks: 91.216.49.0/24 maxlen: 24
91.223.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 14:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:25:f1:8d:97:b4:90:42:28:27:40:6e:50:76:59:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jan 27 14:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba4961af61321b4b77b93de4ea59574d204bd8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:bc:ba:81:85:2d:e5:f5:69:3e:b4:bb:82:
fa:b3:58:45:34:5d:90:68:95:f7:17:96:5d:c6:78:
ed:2f:bc:78:27:70:24:3c:55:27:e9:0e:ca:2d:46:
4c:39:26:24:e6:79:db:01:0a:5e:f2:c7:0c:37:da:
71:3f:50:62:f5:20:82:de:da:5e:6f:4e:39:71:41:
74:b5:55:6b:6c:58:50:5d:ef:84:55:71:db:f8:e1:
09:13:50:de:92:f3:72:de:40:77:da:44:ad:bd:46:
6b:ca:9f:df:b6:e6:64:e9:96:67:1a:bf:7b:54:01:
fa:7c:f0:51:c9:17:8d:00:9f:d2:ee:4a:c1:61:fa:
cb:3f:22:eb:4b:51:0c:ea:f2:0c:04:6e:1b:2d:f9:
23:54:32:ea:cf:3f:02:19:c0:98:61:a7:5c:fb:01:
7d:21:8d:5c:c8:b5:2c:e9:d6:ec:0c:52:89:68:d1:
9c:67:6f:36:37:11:08:f9:33:59:d6:cf:84:80:a3:
f3:33:6d:7a:82:9c:25:f4:a8:8b:09:60:bf:03:ba:
9c:72:39:f8:28:17:19:b7:fe:9d:a3:ee:2d:25:ea:
40:1f:00:c4:e7:20:d9:4c:a6:9c:88:b0:68:74:98:
93:d9:7a:91:40:81:ce:4e:22:be:e3:85:92:39:ab:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:61:AF:61:32:1B:4B:77:B9:3D:E4:EA:59:57:4D:20:4B:D8:BF
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/uklhr2EyG0t3uT3k6llXTSBL2L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.49.0/24
91.223.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e0:83:da:f0:cb:86:cf:d4:93:6e:01:29:eb:1e:2a:79:e7:
86:14:95:a6:50:1a:86:91:58:65:ab:54:2e:47:6d:5a:24:b7:
74:5c:c8:15:00:2d:e7:07:5a:d1:b5:ab:ab:61:43:b6:c9:c2:
c0:64:8d:22:df:50:56:c6:b9:72:92:84:b8:f9:51:5e:bd:a6:
18:5d:f0:ef:18:ab:63:1e:e0:e0:98:85:15:31:f4:c1:e6:af:
7d:35:cf:88:01:59:f9:1f:9d:af:11:bc:02:3b:d9:9e:ed:24:
98:eb:13:d3:4c:f5:40:ed:76:7f:fa:fb:d4:33:9c:ed:b8:7d:
44:c4:a4:06:22:48:c1:9e:1c:ee:66:ab:66:f6:2a:b3:03:00:
cf:12:b1:58:ff:95:c0:66:82:93:89:20:6f:3e:78:dc:40:0e:
fa:9b:a3:1e:0d:df:9b:dd:30:bb:cb:11:c6:a3:fb:61:2f:e8:
73:c5:19:90:07:d9:26:49:e8:78:b3:e0:72:ff:0c:a6:b1:aa:
f4:09:8f:92:78:79:f0:5c:47:dc:52:db:c9:84:f8:41:ae:5e:
99:9a:d2:51:3c:82:69:8b:d0:3b:16:ad:36:65:50:c4:09:19:
9e:b8:12:43:4b:72:84:95:77:73:43:9d:ac:ed:0b:01:38:00:
af:59:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:52:52 2025 by rpki-client