Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UEYPaIJk57iANe2fXLEYrDHuBW8.roa
File: UEYPaIJk57iANe2fXLEYrDHuBW8.roa (raw, json)
Hash identifier: vVCdcBaBVIiJ2UFubFblYlCEyga/mYmujS2FPpjWlf8=
Subject key identifier: 50:46:0F:68:82:64:E7:B8:80:35:ED:9F:5C:B1:18:AC:31:EE:05:6F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0194D96DE9D61EA18436F823982D8D4839C6
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UEYPaIJk57iANe2fXLEYrDHuBW8.roa
Signing time: Thu 06 Feb 2025 04:04:06 +0000
ROA not before: Thu 06 Feb 2025 04:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24875
IP address blocks: 185.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d9:6d:e9:d6:1e:a1:84:36:f8:23:98:2d:8d:48:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 6 04:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50460f688264e7b88035ed9f5cb118ac31ee056f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f9:51:2d:3b:9b:b8:fb:54:5c:41:39:30:ab:
32:78:4c:7f:7d:55:58:66:95:76:20:58:d7:64:2d:
49:22:47:0e:8c:3d:ff:00:86:b3:ef:39:cb:e6:05:
05:4c:e6:44:2e:7a:f9:d7:ab:c2:15:c4:15:f3:76:
38:a2:f1:22:2e:d5:3e:78:5c:02:24:b7:77:67:f2:
de:00:ac:03:8c:1a:c5:94:88:87:1f:51:7b:ec:94:
e7:13:d1:14:65:d2:e3:1d:15:51:93:16:4e:db:3b:
92:ff:2d:42:c1:32:2d:bc:47:26:77:45:93:10:da:
22:9f:a6:00:04:3a:99:00:ce:35:24:ce:49:ca:1c:
d0:22:70:7c:c4:d9:f1:f9:d5:d8:be:7e:c5:51:3c:
1c:aa:85:09:07:c0:c9:08:52:6e:99:82:9c:20:75:
76:eb:bc:e1:c1:9d:4e:34:35:47:ed:1d:f2:77:51:
5d:d5:4b:a9:93:01:43:c7:44:31:14:2a:13:63:0a:
6c:46:45:4f:3f:f8:b2:e1:b1:0c:78:7d:b5:45:f8:
6b:6c:3d:99:5d:3f:0b:54:b1:97:99:4a:97:10:5a:
8e:e9:67:1e:17:e4:85:cf:91:83:9e:45:e8:6f:55:
b9:e5:8b:6f:59:95:f5:93:7a:44:df:68:01:7a:54:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:0F:68:82:64:E7:B8:80:35:ED:9F:5C:B1:18:AC:31:EE:05:6F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UEYPaIJk57iANe2fXLEYrDHuBW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ba:3d:3c:7c:71:2b:a9:5b:93:99:d2:fd:08:47:62:a2:a6:
96:55:0c:20:5c:d1:40:71:1e:96:57:9d:5b:a8:21:a5:77:2c:
7b:35:da:fc:58:bf:2e:b7:99:e3:c9:0a:bd:92:70:02:f4:3e:
28:f2:99:7a:5b:4b:b4:e9:c9:50:b3:a0:c8:70:0f:52:41:ec:
c9:41:48:30:09:85:36:21:fb:bd:a5:8e:27:3d:c2:bd:8a:ab:
5b:ca:21:e5:7e:33:8c:5b:c5:3e:14:68:8c:85:bc:b0:38:15:
3c:d2:26:02:e2:a8:b4:ff:54:37:45:0d:8e:f9:7c:2a:92:42:
47:db:d3:87:37:6b:13:4d:3c:73:60:67:ef:2d:2f:53:0a:8f:
6b:60:bc:fd:88:80:69:75:b2:66:fb:f8:7e:d3:db:b5:2a:6a:
94:1e:ef:b5:1c:97:eb:87:c0:59:f9:e2:a0:88:4b:23:f5:74:
9c:9f:b9:82:98:05:0a:df:ef:fa:e8:f4:21:23:70:72:46:ac:
f2:b0:cb:ec:33:5e:fb:c0:bf:44:6a:6f:f1:1d:a1:da:33:bf:
d4:a9:0b:32:69:2d:d1:99:5e:0e:a2:8e:99:10:6d:69:2a:4b:
95:44:53:23:11:0f:66:26:52:34:77:ec:26:0f:b0:d3:20:58:
06:67:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:13 2025 by rpki-client