Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2ujhB6VtG1wsMePDSGyrLHuqsz4.roa
File: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (raw, json)
Hash identifier: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=
Subject key identifier: DA:E8:E1:07:A5:6D:1B:5C:2C:31:E3:C3:48:6C:AB:2C:7B:AA:B3:3E
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 0196DEA9C860F11FCEAA1B22506AF7E6B035
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2ujhB6VtG1wsMePDSGyrLHuqsz4.roa
Signing time: Sat 17 May 2025 14:33:10 +0000
ROA not before: Sat 17 May 2025 14:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 213.238.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:a9:c8:60:f1:1f:ce:aa:1b:22:50:6a:f7:e6:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: May 17 14:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dae8e107a56d1b5c2c31e3c3486cab2c7baab33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:4d:b9:f6:6b:c5:61:9a:0c:ac:aa:1d:42:
14:bd:a8:2d:9e:7d:2d:7d:6e:b2:d5:94:a0:8a:b7:
b9:e9:73:82:2f:e8:c8:ba:a7:c7:06:b4:95:b6:74:
93:f2:b9:20:4b:4f:3f:e7:8d:a8:33:87:78:2b:ad:
13:6a:f5:2f:95:a9:fb:3e:77:eb:c9:c6:a7:ad:f2:
13:c0:e6:f8:85:29:b5:8f:9e:a6:d4:d6:90:b6:3d:
75:a9:7e:e5:a1:f4:16:c1:2a:6f:e7:83:a5:72:4f:
6a:60:6e:5b:8b:6d:2d:43:7c:d8:e6:c6:34:1e:68:
e6:b6:44:6b:cf:0c:f5:e8:95:e0:3d:04:a1:9c:a0:
b2:66:8d:bc:0d:2d:f8:f4:41:54:f3:da:97:10:e1:
ee:b3:46:6c:c9:b4:9b:0a:7e:0c:eb:48:14:69:29:
61:bc:83:7e:cf:8f:2c:f7:2a:d5:f3:36:ef:48:f3:
fd:f6:84:77:ad:d4:d1:8b:cb:d3:59:b4:ee:b0:00:
3f:a5:49:b8:5a:c2:1e:8c:f1:f3:eb:42:df:13:9c:
e4:4d:50:51:ef:29:62:ca:67:75:c6:c2:f2:db:b1:
fa:53:f2:73:46:08:b3:f4:8f:75:b0:28:40:0b:44:
58:c7:7f:2a:71:1a:b5:cd:c6:ad:ea:e6:fa:9a:74:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:E1:07:A5:6D:1B:5C:2C:31:E3:C3:48:6C:AB:2C:7B:AA:B3:3E
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2ujhB6VtG1wsMePDSGyrLHuqsz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.168.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7c:29:05:1e:e6:4f:65:61:29:fb:55:2e:62:b6:23:51:d3:
54:df:04:cc:2c:bd:c6:06:99:82:c8:1b:f9:e1:30:21:52:b9:
12:7d:7f:c7:2b:90:b9:6a:73:c4:8e:86:2c:a5:14:39:b6:42:
dd:14:34:79:ef:ff:88:de:cf:8d:2d:41:ff:01:64:be:90:82:
f0:4d:bb:2d:81:e5:2d:c8:01:4e:1d:75:21:34:7b:1d:bd:7e:
8d:cb:95:5f:42:c2:53:4b:5d:56:71:74:74:43:b4:dc:3b:d1:
88:41:72:49:a0:2e:14:06:56:82:90:e8:b6:79:16:17:62:a3:
95:4a:19:f0:11:3e:f2:4d:4a:f5:db:89:3c:02:e9:5a:4b:d5:
a8:6a:be:20:84:f8:19:6c:2f:b1:b6:ba:91:d9:81:cf:2f:e9:
db:57:98:7b:de:65:8e:81:0f:3a:c9:f3:09:78:73:b2:f4:0c:
8d:53:f6:32:de:63:f7:f5:88:24:5f:bb:e2:d9:17:10:ea:aa:
a3:ad:ec:9f:7e:1c:ab:44:6a:18:36:94:84:a2:fa:0b:0b:04:
d9:77:69:5f:3e:46:ae:1b:0c:af:a2:06:71:65:80:81:e6:07:
a4:27:ba:75:97:c8:26:8b:2b:fe:b6:91:1d:bb:48:36:c6:1a:
81:6e:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:34 2025 by rpki-client