Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/U2paNb4m2qyQATbnhVbTs0-s6jM.roa
File: U2paNb4m2qyQATbnhVbTs0-s6jM.roa (raw, json)
Hash identifier: S1RxCh/LJopZIJfT5SmUwql4+1cPwTZJIOK40saTkcw=
Subject key identifier: 53:6A:5A:35:BE:26:DA:AC:90:01:36:E7:85:56:D3:B3:4F:AC:EA:33
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 019427466871FDFCCE2A4C5B257DFBE0DECE
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/U2paNb4m2qyQATbnhVbTs0-s6jM.roa
Signing time: Thu 02 Jan 2025 13:48:33 +0000
ROA not before: Thu 02 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8677
IP address blocks: 82.195.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:68:71:fd:fc:ce:2a:4c:5b:25:7d:fb:e0:de:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Jan 2 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=536a5a35be26daac900136e78556d3b34facea33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:4f:46:75:dd:39:e9:7f:98:6d:f4:bb:27:
11:2d:8f:81:17:bf:00:13:99:d4:57:84:bd:aa:aa:
98:81:e3:95:ee:4a:73:c3:88:66:fe:bf:ff:42:a3:
8a:6b:a1:dc:09:8f:dc:dc:93:c7:ff:96:5f:2a:6d:
83:62:1c:19:48:8a:0c:6b:59:83:47:9a:38:d7:b4:
cf:85:36:3d:7d:ac:64:8c:76:db:91:6c:db:fb:5f:
89:a9:ee:f2:c7:9a:74:24:89:e2:ef:05:1d:b7:23:
de:48:6d:4b:9f:ee:6c:64:ec:d9:d1:27:7e:73:60:
ba:3d:ac:ef:9e:5f:89:df:fd:a5:f1:22:4f:9e:34:
f3:d5:f8:f4:df:78:c8:b4:49:aa:57:0e:9f:01:d8:
4f:1a:a3:b2:6d:7f:ac:e2:ff:79:e6:be:9f:41:8a:
a7:5d:28:7b:6d:63:47:be:ef:1a:43:20:67:09:c5:
e1:c5:ee:dc:a5:71:67:09:e8:55:af:29:ea:d3:63:
69:90:34:13:51:27:05:bc:79:5a:be:9c:5f:9b:11:
84:59:8c:20:4d:f2:41:7c:8d:c4:59:2b:bc:50:62:
cb:49:7e:c5:7f:4f:92:ca:26:b3:4d:a1:ce:43:85:
c8:16:78:c4:6a:a8:f9:fb:ff:04:29:b3:85:99:ef:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:5A:35:BE:26:DA:AC:90:01:36:E7:85:56:D3:B3:4F:AC:EA:33
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/U2paNb4m2qyQATbnhVbTs0-s6jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.32.0/19
Signature Algorithm: sha256WithRSAEncryption
33:94:83:c8:b2:37:23:c2:3e:4a:77:ff:69:bf:cb:d5:34:fc:
5b:ff:ca:dd:e1:bb:76:16:6d:37:48:c1:3c:63:57:4b:19:8b:
39:e0:48:af:fe:e7:ae:71:bd:82:29:62:48:f2:b6:78:f0:17:
ab:98:9d:40:f8:8a:c5:10:d8:6f:d2:6a:6b:f7:b6:cb:6c:8a:
49:18:5f:62:2f:69:41:0e:2d:bf:6a:ee:e5:6f:13:f1:c1:7f:
15:37:54:a1:57:8f:bb:8c:df:61:be:75:76:3a:13:ba:0e:99:
67:ef:56:c5:53:5b:fc:a4:ae:34:3a:ab:d0:c0:9b:56:44:d5:
42:5f:a9:ae:ac:d2:e6:d8:5c:f2:92:66:9b:ad:d7:c9:97:27:
ff:16:cf:14:c0:9d:d9:dd:fd:df:ed:b6:39:2c:97:b7:64:c1:
c5:60:10:8a:49:19:22:e3:6e:6b:e6:63:d5:dd:44:e2:0e:c8:
20:e2:d5:e7:56:76:d0:87:f5:ff:14:b5:ae:b5:f3:00:6c:7a:
f6:48:5d:2c:6a:3a:02:15:2a:af:79:85:d0:f5:5f:2d:5a:e1:
84:06:e6:bf:8e:aa:a1:fe:2e:78:10:f3:6a:e8:48:82:f8:7d:
13:1f:65:5b:1e:22:b7:1f:47:29:92:1d:0f:df:64:36:ef:27:
1e:30:1d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:24:42 2025 by rpki-client