Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ukhYU1SLia5ipi_D8SlN_xWBxp8.roa
File: ukhYU1SLia5ipi_D8SlN_xWBxp8.roa (raw, json)
Hash identifier: QGZdJXPeoP+kTSKWHUevjq4NUn/Kb6d4UJjYckBnUT4=
Subject key identifier: BA:48:58:53:54:8B:89:AE:62:A6:2F:C3:F1:29:4D:FF:15:81:C6:9F
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445273E709EAAF59D29ADE989CE2E63
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ukhYU1SLia5ipi_D8SlN_xWBxp8.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60922
IP address blocks: 185.46.175.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:27:3e:70:9e:aa:f5:9d:29:ad:e9:89:ce:2e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba485853548b89ae62a62fc3f1294dff1581c69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:b2:4b:82:2a:9a:45:ad:0c:3b:18:88:3e:
76:7f:c2:54:10:9a:f5:ad:ff:f2:6c:26:f2:5e:8e:
95:bf:07:1d:fb:42:06:0e:f0:12:68:f7:0c:10:9a:
05:b0:b8:85:38:23:05:10:b2:eb:41:36:4f:8f:2a:
9e:a7:09:95:9b:69:be:54:86:b7:c2:95:7f:a7:06:
09:39:c1:1b:18:89:e6:4e:04:17:73:11:27:71:e0:
32:c7:1e:8b:51:46:22:79:86:bf:f7:f3:9d:20:01:
b9:53:92:ba:fe:e6:6f:b6:88:47:17:f9:c8:6d:cc:
95:36:00:75:e9:92:9e:e7:d3:98:33:29:d7:1c:cc:
04:e0:d1:15:5d:c9:3b:6f:0e:50:50:0e:23:af:91:
e5:0b:7c:08:55:ff:c0:6c:50:0b:5c:ab:81:e5:aa:
82:29:c8:43:98:7c:fa:89:d4:84:7c:ce:c7:86:5d:
02:72:91:f3:ea:01:50:ae:f5:2d:02:89:6b:3c:e5:
e8:e4:27:9f:2e:84:0a:9a:5e:18:91:84:ec:9a:45:
9f:8a:32:63:53:f1:cd:70:39:14:c1:43:ea:c0:cd:
7e:2c:4c:72:fa:32:aa:c7:7d:1c:41:1f:b9:2c:b4:
ff:20:9f:1e:8a:c5:e5:86:9a:eb:3b:12:70:00:e4:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:48:58:53:54:8B:89:AE:62:A6:2F:C3:F1:29:4D:FF:15:81:C6:9F
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ukhYU1SLia5ipi_D8SlN_xWBxp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.175.0/24
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:83:a1:92:33:0d:a6:94:7c:0c:d9:b3:61:70:88:8a:b7:85:
33:1c:f8:41:f6:02:7d:38:7a:84:7e:a1:06:1c:40:a6:d7:47:
d5:54:29:9d:8e:44:00:a0:55:7d:00:14:fd:e2:36:24:ca:c2:
a3:e4:a0:32:e3:a2:6f:98:c6:0e:ad:88:fa:4d:9e:01:7a:4a:
ca:74:e8:f1:96:03:d8:cc:f2:6a:2d:67:61:aa:55:a5:9b:3d:
fc:66:d1:86:07:d7:8e:7a:13:f6:45:83:6e:b9:71:a7:4e:0f:
96:62:82:98:51:d6:1b:42:c4:ce:82:be:6a:56:a5:de:4d:2b:
ca:1a:8a:0c:31:e5:fb:79:d6:de:15:cb:73:5e:4b:57:2b:df:
52:f5:90:2a:bd:3f:57:e2:63:fd:51:98:05:0c:c6:ae:be:49:
55:29:fe:3b:e3:8e:85:24:6f:9c:16:81:97:aa:a0:55:31:63:
09:62:6c:cf:eb:84:38:fc:73:62:aa:15:ae:80:dd:6f:fc:9b:
dc:46:9e:90:68:d8:a8:07:4b:24:d3:b0:a0:db:5e:47:17:2b:
6f:a7:02:50:d2:a6:2c:fe:49:05:2a:af:2f:22:db:4a:a5:6d:
38:b0:1d:a8:bc:7f:68:63:d7:8a:15:6c:d9:1d:60:7c:a5:5f:
3c:72:c4:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRSc+cJ6q9Z0premJzi5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTQ4NTg1MzU0OGI4OWFlNjJhNjJmYzNmMTI5NGRmZjE1ODFjNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWyS4IqmkWtDDsYiD52f8JUEJr1
rf/ybCbyXo6Vvwcd+0IGDvASaPcMEJoFsLiFOCMFELLrQTZPjyqepwmVm2m+VIa3
wpV/pwYJOcEbGInmTgQXcxEnceAyxx6LUUYieYa/9/OdIAG5U5K6/uZvtohHF/nI
bcyVNgB16ZKe59OYMynXHMwE4NEVXck7bw5QUA4jr5HlC3wIVf/AbFALXKuB5aqC
KchDmHz6idSEfM7Hhl0CcpHz6gFQrvUtAolrPOXo5CefLoQKml4YkYTsmkWfijJj
U/HNcDkUwUPqwM1+LExy+jKqx30cQR+5LLT/IJ8eisXlhprrOxJwAOSvzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLpIWFNUi4muYqYvw/EpTf8VgcafMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvdWtoWVUxU0xpYTVpcGlfRDhTbE5feFdCeHA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuS6vAwQA
uaFPMA0GCSqGSIb3DQEBCwUAA4IBAQBeg6GSMw2mlHwM2bNhcIiKt4UzHPhB9gJ9
OHqEfqEGHECm10fVVCmdjkQAoFV9ABT94jYkysKj5KAy46JvmMYOrYj6TZ4BekrK
dOjxlgPYzPJqLWdhqlWlmz38ZtGGB9eOehP2RYNuuXGnTg+WYoKYUdYbQsTOgr5q
VqXeTSvKGooMMeX7edbeFctzXktXK99S9ZAqvT9X4mP9UZgFDMauvklVKf47446F
JG+cFoGXqqBVMWMJYmzP64Q4/HNiqhWugN1v/JvcRp6QaNioB0sk07Cg215HFytv
pwJQ0qYs/kkFKq8vIttKpW04sB2ovH9oY9eKFWzZHWB8pV88csRA
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:56 2025 by rpki-client