Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/UujBfWNQbvUkl0lkMK4V-9QiUlw.roa
File: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (raw, json)
Hash identifier: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=
Subject key identifier: 52:E8:C1:7D:63:50:6E:F5:24:97:49:64:30:AE:15:FB:D4:22:52:5C
Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial: 019427487EE0FF20222852332C53E6AED40C
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/UujBfWNQbvUkl0lkMK4V-9QiUlw.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51732
IP address blocks: 91.220.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7e:e0:ff:20:22:28:52:33:2c:53:e6:ae:d4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52e8c17d63506ef52497496430ae15fbd422525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:f1:c3:91:87:c1:f9:5e:73:fe:9f:f6:10:
61:45:3a:b0:e0:5d:df:b6:f5:b1:96:fe:0e:a0:fd:
1f:77:af:01:1c:91:38:d2:e2:26:45:20:53:d8:61:
38:4c:d1:cc:03:2e:e5:3c:53:36:e7:38:c2:97:8a:
1e:53:e2:8f:01:39:1c:95:a2:6a:d0:4b:b2:d4:39:
94:9b:da:15:3e:47:cd:c6:a5:17:80:99:37:7c:97:
1c:4c:2c:f1:11:d8:7b:d0:b4:04:62:65:df:2c:dd:
22:cb:db:31:29:47:48:31:19:4b:7c:b7:95:db:12:
09:8d:80:a6:29:7d:18:cb:fe:6e:c6:1c:d3:43:f3:
c9:ad:3b:35:c5:2b:81:5b:45:0e:8a:58:2e:b4:3c:
3b:c9:4a:a1:e5:0c:8f:b0:fb:b3:b8:23:7b:01:20:
71:c0:c2:c7:ee:64:f0:24:33:38:2c:da:dd:79:ad:
c2:42:c9:6c:48:bd:de:ef:ad:9a:24:28:5e:7b:2c:
35:0e:f3:b1:c2:da:f1:b5:d7:e9:c9:bb:94:6c:0e:
b5:b6:7b:74:96:9a:ac:11:8e:3f:f2:4d:65:87:de:
e6:50:eb:2f:15:ad:7a:4b:03:f7:f8:33:d9:aa:29:
f8:2c:37:3c:51:20:36:e8:6c:e4:9a:db:4e:0c:25:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E8:C1:7D:63:50:6E:F5:24:97:49:64:30:AE:15:FB:D4:22:52:5C
X509v3 Authority Key Identifier:
keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/UujBfWNQbvUkl0lkMK4V-9QiUlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:97:89:6d:45:40:77:34:0d:a6:21:cb:e0:17:b3:f0:51:fd:
84:f0:3c:fd:d8:0a:c0:3f:c2:2c:88:ee:19:bc:bb:5d:3a:17:
6f:e4:63:2a:43:d7:22:80:b4:ab:25:bc:60:f1:95:64:6a:9b:
23:14:11:83:67:33:6d:9f:ed:8d:08:00:d7:82:22:9b:cd:d1:
44:0d:61:1a:5d:2f:a8:cc:1b:a4:10:74:55:39:c3:07:9b:1b:
87:ed:e8:18:c0:7f:db:6f:a8:1e:9b:11:9e:9e:9a:7c:18:3f:
06:b2:b6:dd:97:72:9e:21:e9:1c:7e:2c:20:4c:a8:fe:53:d7:
7c:56:dd:04:b6:46:44:04:f6:9d:97:05:36:c5:c0:3f:2a:a4:
68:a5:42:e2:b8:d4:f2:63:a0:60:5d:0b:fc:c0:e2:e0:29:26:
99:08:de:8f:1a:83:64:06:b1:55:47:09:07:ee:88:eb:9a:98:
5d:cc:1a:38:c0:6e:9c:df:73:81:16:bf:2e:2e:77:e2:e1:9d:
b2:2e:a4:74:69:ab:63:a7:84:f5:5c:f5:3d:77:02:b9:5e:c7:
54:e5:65:36:01:7c:0f:5e:33:0d:41:86:5c:06:7c:11:b4:5d:
03:72:47:a7:ef:b7:a4:56:69:e1:02:06:a7:ef:c1:71:c8:c2:
c0:83:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:57:07 2025 by rpki-client