Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/uJBF8l1YNTX1rQwpWIP4iAOZYes.roa
File: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (raw, json)
Hash identifier: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=
Subject key identifier: B8:90:45:F2:5D:58:35:35:F5:AD:0C:29:58:83:F8:88:03:99:61:EB
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 01942521968AACEDB6F148C23B58F8E6FF36
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/uJBF8l1YNTX1rQwpWIP4iAOZYes.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51731
IP address blocks: 46.36.32.0/19 maxlen: 19
2a02:25b0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:96:8a:ac:ed:b6:f1:48:c2:3b:58:f8:e6:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b89045f25d583535f5ad0c295883f888039961eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:f6:73:33:f0:d5:a7:ca:a8:46:f1:62:98:
d5:df:f7:1f:a5:b9:bd:80:1e:6e:47:f7:3e:64:59:
d7:24:e1:82:4a:06:c5:85:a3:6a:de:0d:59:ff:d0:
15:6a:f4:4b:b3:12:55:bd:2a:1d:e6:99:c4:a7:7e:
51:99:d4:58:10:71:d9:b6:a2:4d:28:31:3b:52:e9:
60:17:65:f3:ab:a7:47:0b:f3:26:fb:d3:c4:d0:68:
64:d4:87:08:2c:ce:6a:0f:f2:fb:5b:83:4c:52:d7:
15:25:78:cf:98:40:b6:e4:ce:eb:8d:d5:27:b4:18:
a9:b5:6c:19:85:0c:79:2f:1e:f6:7a:7e:12:1b:59:
78:06:4b:f1:6d:fe:24:5f:06:e0:99:9c:09:96:3d:
1a:47:8f:50:86:07:68:75:5e:ab:bd:2d:d7:4f:da:
1d:c3:47:20:aa:67:b1:6e:ee:72:b8:65:67:5a:03:
7d:ef:9b:89:b2:1f:02:a5:14:5c:0e:8d:56:2d:dc:
28:82:2c:95:9c:85:76:e9:6c:9f:07:c3:ee:df:16:
d3:7b:c1:33:52:30:15:2b:8d:d8:c4:8a:1e:a3:a9:
b3:f3:0c:9f:48:85:38:b6:e5:86:3b:d5:48:96:45:
3d:be:33:08:ea:f5:23:9f:34:02:e4:1c:63:a3:37:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:45:F2:5D:58:35:35:F5:AD:0C:29:58:83:F8:88:03:99:61:EB
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/uJBF8l1YNTX1rQwpWIP4iAOZYes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.32.0/19
IPv6:
2a02:25b0::/32
Signature Algorithm: sha256WithRSAEncryption
71:9f:2c:2b:74:9b:04:46:ec:43:ec:74:25:ea:3d:9d:e4:92:
b2:fc:11:7c:3e:81:fa:e9:28:7a:2f:ea:e8:c6:24:9f:26:08:
99:40:50:3c:37:b5:e6:eb:dc:5e:16:ad:24:42:af:8e:4e:86:
1c:8e:79:87:eb:ee:ec:fc:08:76:4b:9d:e2:34:4b:0a:33:02:
67:e4:f8:4e:a4:7e:5d:18:cd:f4:e0:3a:74:3c:d1:cd:15:c5:
72:ab:32:bc:17:18:ee:6a:fd:d0:d5:2e:62:af:4f:42:30:cb:
87:c4:79:e0:48:1f:3e:ad:40:53:aa:f5:d7:ad:db:e1:f8:08:
41:97:92:7d:89:d8:c2:a2:96:0c:0b:da:98:16:76:fd:7b:cb:
1e:aa:e8:50:73:26:8a:02:57:26:1e:78:90:08:99:be:d2:bf:
ac:8d:c0:a3:e9:6d:40:26:8e:1d:e0:9a:82:33:e1:ed:8c:78:
b6:5a:a1:1c:7b:00:3c:d7:f1:18:63:c2:0d:87:ba:9e:21:e1:
74:50:c4:8e:ff:3f:44:6d:54:18:40:39:3d:ba:fc:be:50:86:
9e:62:e4:98:e3:5c:5b:1e:56:6d:42:f8:27:70:3f:21:38:19:
7e:e6:27:07:21:6a:67:40:27:86:be:fe:9a:ca:61:1d:f5:53:
61:79:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:28 2025 by rpki-client