Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa
File: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (raw, json)
Hash identifier: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=
Subject key identifier: 50:70:41:81:43:4B:36:7D:62:1C:8F:5E:F8:41:A3:8C:EC:C1:84:5C
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 0194266BD573F19D755783F132BC7C2BA29F
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1213
IP address blocks: 45.144.8.0/22 maxlen: 24
77.87.24.0/21 maxlen: 24
87.32.0.0/12 maxlen: 24
91.123.224.0/20 maxlen: 24
91.193.188.0/22 maxlen: 24
193.1.0.0/16 maxlen: 24
2001:770::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d5:73:f1:9d:75:57:83:f1:32:bc:7c:2b:a2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50704181434b367d621c8f5ef841a38cecc1845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:5a:95:b3:30:5e:e3:24:f1:08:ed:17:e4:
95:6e:52:b1:69:b4:23:ee:b9:b7:00:cc:eb:62:64:
25:7b:04:5e:1b:5a:b7:b4:d8:1b:59:d1:f6:63:50:
72:a0:cf:4d:dd:ef:16:7c:d1:3b:ea:74:2d:b5:9a:
37:a6:65:19:98:e1:91:ab:ac:26:fa:c3:40:a1:a0:
f0:e1:c7:b9:f5:29:37:7d:0c:50:54:ab:d5:4d:51:
1e:2b:b8:9b:94:f5:dd:f6:42:0d:f7:5c:49:05:2b:
64:24:47:61:cd:c2:4f:02:bc:aa:51:82:f1:c2:e0:
f4:e4:39:67:fd:34:f0:79:01:b4:ab:7d:84:00:2a:
bb:10:fb:7e:e3:0a:62:74:92:11:73:d6:fa:ab:2d:
90:b6:8f:7e:7d:eb:89:da:0b:98:4b:1b:a7:0f:50:
9e:14:5a:86:4e:21:22:d4:af:6e:02:be:be:3b:81:
2d:76:c4:18:1c:4b:b6:5c:42:4e:79:5f:cc:dd:8c:
bc:b2:8d:9b:75:2f:25:7c:c5:09:9b:ef:f6:ec:56:
f2:0e:0b:f7:04:59:e9:d5:ce:0d:10:4f:53:0d:e6:
16:4a:58:fa:35:94:d1:40:0b:dd:a5:69:df:43:da:
3f:dd:00:5c:f7:27:e0:89:c1:db:94:ac:2d:a7:0c:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:70:41:81:43:4B:36:7D:62:1C:8F:5E:F8:41:A3:8C:EC:C1:84:5C
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.8.0/22
77.87.24.0/21
87.32.0.0/12
91.123.224.0/20
91.193.188.0/22
193.1.0.0/16
IPv6:
2001:770::/32
Signature Algorithm: sha256WithRSAEncryption
8f:47:e5:8e:4f:cd:74:06:86:64:9a:22:01:c5:c7:0a:e0:8f:
b0:fa:50:61:22:c6:9f:8c:25:ce:46:62:bf:34:10:a6:28:7b:
28:f2:68:36:8d:76:a2:07:f1:32:2d:b6:43:b0:54:c2:41:97:
68:78:43:ef:1a:0a:12:7a:c5:be:66:90:9f:7e:bc:05:14:fe:
c4:63:5b:de:be:26:66:80:b8:cd:97:b3:91:aa:61:0f:90:4c:
37:42:c7:e7:d1:b3:5b:5a:f0:e1:1e:d6:14:50:e4:55:5b:f9:
26:39:c3:99:ac:bf:54:f8:55:f6:86:e1:34:5a:b9:66:5c:eb:
53:9c:0d:8c:41:52:18:f5:5f:12:11:da:5e:2f:f4:96:cc:c5:
46:ab:e3:de:70:06:c7:c0:91:af:a2:6d:96:03:fe:4d:e5:f0:
f5:20:12:83:7c:9f:2a:60:05:0a:f6:cc:93:f5:86:2a:6b:b0:
d7:77:7d:0c:2c:bf:5a:c4:55:ea:97:ef:17:a6:5d:b1:71:e2:
77:d3:75:14:cc:b7:c4:76:6f:53:bb:88:e1:f4:6e:d8:92:25:
f0:37:f3:94:5b:26:e8:19:cf:7d:9b:8f:b4:41:39:b5:c5:b7:
7a:3a:0f:e7:c4:9c:96:dc:47:7a:98:7b:30:35:f9:07:75:c8:
da:b7:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:59:59 2025 by rpki-client