Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/UonFdVxRB-HOOyUD446SJsVcabg.roa
File: UonFdVxRB-HOOyUD446SJsVcabg.roa (raw, json)
Hash identifier: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=
Subject key identifier: 52:89:C5:75:5C:51:07:E1:CE:3B:25:03:E3:8E:92:26:C5:5C:69:B8
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019421B1A888DED328A377E3585B65CD644C
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/UonFdVxRB-HOOyUD446SJsVcabg.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.9.128.0/24 maxlen: 24
45.9.129.0/24 maxlen: 24
45.9.130.0/24 maxlen: 24
45.9.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a8:88:de:d3:28:a3:77:e3:58:5b:65:cd:64:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5289c5755c5107e1ce3b2503e38e9226c55c69b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:b2:53:b5:4f:0f:37:d8:55:8e:eb:d8:64:
ef:63:08:d4:29:fa:33:d3:68:b1:80:7e:ee:00:45:
79:06:98:6b:7a:2d:38:5a:ab:9c:2e:bd:57:4f:11:
6f:a4:da:25:24:97:ff:0d:e7:64:b5:17:10:5a:9c:
d7:a2:4d:f5:59:b7:e4:49:54:f0:17:2e:52:2c:be:
93:77:27:f7:cf:47:dd:02:96:f2:22:40:1e:74:9d:
8e:35:07:5f:6e:87:fe:aa:48:36:bb:65:d0:ff:a5:
54:34:16:79:49:91:b4:43:30:a3:1d:07:53:3a:40:
db:0e:dc:cd:c6:c6:83:e1:30:d5:b6:a8:95:47:12:
2d:5e:2d:43:3a:7b:12:e5:5a:5d:33:53:ac:ed:fc:
ad:b5:5b:d9:4a:95:23:85:10:06:ea:58:ee:c3:37:
2b:4d:a3:23:04:a3:13:70:f3:1a:9d:c2:30:e5:ef:
ac:03:6a:f2:53:26:7b:64:7f:74:80:61:76:c4:f1:
72:43:3e:82:36:f5:a9:91:66:c1:8d:f7:f2:ae:90:
5f:49:0d:d6:9a:cc:bc:45:5c:79:b7:d3:32:4b:9a:
38:bf:dc:0b:31:ae:d8:16:e9:e4:5e:50:21:1c:89:
90:fb:9a:84:47:29:61:57:59:9f:9b:61:74:bf:65:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:C5:75:5C:51:07:E1:CE:3B:25:03:E3:8E:92:26:C5:5C:69:B8
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/UonFdVxRB-HOOyUD446SJsVcabg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.128.0/22
Signature Algorithm: sha256WithRSAEncryption
92:c3:84:49:7e:09:c7:fe:07:1c:58:de:19:24:89:40:08:45:
a8:fd:77:fa:fe:75:10:8b:ea:7b:17:db:45:d1:99:fe:08:7a:
fc:2b:de:a7:d2:b8:6f:e4:8d:b1:8e:60:e5:aa:f1:38:ae:84:
98:4f:f4:59:cb:65:54:61:73:66:67:7f:fb:87:93:2d:e1:10:
20:5b:b8:b7:b4:0f:7a:30:a7:b6:64:46:c2:e6:93:3d:0a:e3:
3d:e7:f0:d2:2c:67:d8:f9:47:31:2a:43:b6:a3:4f:5c:a5:79:
5c:18:5a:dc:6d:1d:e7:e8:66:62:d4:9b:84:33:1c:c1:7b:1f:
7c:2f:34:13:01:dc:e1:65:0a:89:1c:79:5c:27:1d:92:04:78:
1e:4c:7d:22:0f:45:b2:dc:5b:12:04:6e:b8:b9:9a:9f:82:59:
02:8d:35:12:59:d8:92:41:3b:fe:38:a7:92:f0:54:6b:0f:36:
27:a8:92:11:03:b1:e7:ab:01:77:1e:58:83:b2:84:93:ab:98:
ef:cc:f2:2f:12:86:1d:8e:fb:4f:c0:89:59:71:4d:88:47:94:
45:a4:96:49:48:8a:35:c0:62:06:e1:a8:b3:36:25:a2:e5:00:
c0:19:ca:f5:84:0c:7a:22:ac:e6:06:88:80:65:9e:d5:0c:1d:
79:a8:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:28 2025 by rpki-client