Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/UohPfLpYQFWq1aE3FZr-DrIx55E.roa
File: UohPfLpYQFWq1aE3FZr-DrIx55E.roa (raw, json)
Hash identifier: KnJXUEOwlaB/y/AXpGglu/TyZvgBRRpzdQU4qGeto24=
Subject key identifier: 52:88:4F:7C:BA:58:40:55:AA:D5:A1:37:15:9A:FE:0E:B2:31:E7:91
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 019423D74783F1080A347A52AD39F4D6B17E
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/UohPfLpYQFWq1aE3FZr-DrIx55E.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42812
IP address blocks: 193.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:47:83:f1:08:0a:34:7a:52:ad:39:f4:d6:b1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52884f7cba584055aad5a137159afe0eb231e791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:f8:61:85:19:ec:cc:18:95:04:b9:70:61:
19:25:d2:fb:a7:02:43:2e:32:a3:e3:83:a9:af:28:
a2:a5:e0:55:a9:ba:26:47:ae:d7:8d:f2:45:e3:12:
05:fe:4c:9d:36:b9:0f:df:cf:6e:27:14:8e:05:14:
48:05:93:74:c9:91:31:aa:a6:23:7e:0a:a6:4c:ac:
e9:ce:cd:ff:6a:fe:96:22:b3:e3:a0:45:9b:13:48:
d6:8e:10:8e:ab:02:75:de:4b:22:d4:c9:b4:fe:b8:
81:d4:10:22:4c:94:a1:7f:d8:45:71:12:75:39:c3:
63:16:68:eb:e2:79:fd:81:a4:41:8c:61:90:31:e5:
ee:93:1b:29:6b:1c:da:a9:b0:49:61:2e:87:06:17:
bb:c2:63:13:d7:73:ff:86:6b:b0:69:05:6c:70:85:
b2:af:2a:82:1e:97:ff:25:03:21:87:ad:c7:e3:71:
79:a9:20:c4:cb:39:27:61:00:7c:dd:4e:d3:4e:7a:
a9:10:a2:09:22:4d:c0:ac:45:73:5a:a4:49:76:2f:
43:f6:77:d7:af:81:fb:af:f3:5d:d1:4c:fc:7a:8f:
a0:3b:3b:6d:19:00:12:93:ec:d4:5a:ca:22:b8:54:
39:17:f2:36:d0:3f:55:ae:7c:85:6a:45:a6:87:f7:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:4F:7C:BA:58:40:55:AA:D5:A1:37:15:9A:FE:0E:B2:31:E7:91
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/UohPfLpYQFWq1aE3FZr-DrIx55E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:28:61:01:7e:01:03:f4:47:1f:84:f4:9c:2c:79:e0:3f:d2:
5b:a1:0d:8f:b5:af:80:9e:05:7e:62:e9:4b:0d:2b:18:e6:37:
71:a1:3b:38:b6:05:3a:3b:8d:8c:c9:25:8b:9a:21:35:b1:2e:
08:3a:2e:47:39:6c:62:e1:8f:ea:9b:09:8e:5c:06:65:e4:b3:
14:49:5f:d1:1a:0c:ab:fb:fd:5b:b9:5d:b2:a2:20:6b:94:18:
d8:c7:a3:a7:9f:9a:10:d9:e8:64:3b:95:6a:91:80:ee:2d:50:
5e:de:97:3b:cd:36:c5:3d:f7:18:2d:9e:2e:06:04:e6:1d:01:
06:8e:99:42:f2:7a:8c:04:ea:fa:17:1c:32:5d:62:8c:43:ed:
cf:7e:8f:4d:f3:18:ec:b2:a6:e3:3b:1e:b2:9d:b0:8a:86:05:
d9:9b:73:e4:25:f1:08:a3:8a:a2:70:ca:31:2c:63:00:4e:3c:
8f:03:b0:4d:a6:72:02:50:e9:ce:8f:bf:04:0f:ca:ca:44:25:
ef:79:81:9b:ac:80:11:a8:75:10:01:a9:12:58:56:20:2f:9a:
90:a8:0d:12:8c:53:65:be:c3:06:8d:59:1b:0e:39:9f:81:a1:
2c:00:45:b9:71:a6:82:4d:d5:5f:ef:18:f8:a1:e4:37:08:a9:
5c:d8:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:03:03 2025 by rpki-client