Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/UFrxJgzTwVdJL_jkED60zsAU8jc.roa
File: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (raw, json)
Hash identifier: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=
Subject key identifier: 50:5A:F1:26:0C:D3:C1:57:49:2F:F8:E4:10:3E:B4:CE:C0:14:F2:37
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 01941F8C9C32347DA9C61C39A31EF6EFADED
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/UFrxJgzTwVdJL_jkED60zsAU8jc.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21449
IP address blocks: 91.217.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9c:32:34:7d:a9:c6:1c:39:a3:1e:f6:ef:ad:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=505af1260cd3c157492ff8e4103eb4cec014f237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:85:bf:19:01:48:49:7a:b8:b0:07:d7:80:
21:4d:6e:03:80:fe:28:73:9d:e7:4f:af:a2:7b:52:
3f:fd:39:36:f4:68:bb:78:99:c0:e0:45:47:ee:da:
8e:47:1d:21:55:cc:ba:0d:b4:17:4c:56:05:8f:09:
b1:cd:56:68:ca:53:ae:e2:a8:bd:16:03:74:a2:09:
56:ec:f8:03:9f:54:c6:b0:34:cd:e7:1a:51:5f:b5:
49:63:65:40:3e:52:23:65:ee:40:a3:5a:42:31:d6:
a6:80:67:13:0b:5a:b6:5d:0f:c8:f6:c0:6b:cc:9e:
75:1e:20:23:ff:75:94:ed:92:ec:fa:74:31:94:36:
e5:49:b9:81:ea:b3:35:51:eb:45:1a:a6:bc:17:d2:
b1:86:fa:55:97:47:ac:16:63:4f:4c:8e:fc:e7:b7:
34:0e:15:15:b7:7c:cd:77:8b:90:59:9c:26:38:47:
5c:24:df:53:68:62:53:84:52:66:8e:83:c1:58:56:
96:1a:23:0e:67:af:d3:38:1d:6f:b6:6a:a1:21:fe:
14:b5:47:c8:8f:e4:f4:13:3f:07:08:fd:b7:0d:7e:
bf:56:b5:48:11:08:f9:57:e0:0e:a6:c0:48:e0:e0:
25:46:69:2c:a6:3e:03:4c:c8:c8:2c:90:1b:17:b8:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:F1:26:0C:D3:C1:57:49:2F:F8:E4:10:3E:B4:CE:C0:14:F2:37
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/UFrxJgzTwVdJL_jkED60zsAU8jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:44:b3:40:52:e1:b1:cc:4f:b8:08:07:4a:2e:dd:0b:02:2d:
f5:67:25:4b:d4:93:bd:56:1f:a6:23:63:54:84:44:bc:ef:8b:
de:ee:ea:88:78:56:8f:be:e9:b5:66:f9:55:02:ab:fc:2f:82:
4f:0d:9b:fa:4d:8a:7f:be:1c:91:96:bd:56:dd:af:db:75:04:
a6:f6:97:1a:46:87:35:46:79:df:d7:5c:3e:3a:e7:75:47:4a:
64:b0:40:d4:2f:6a:c4:05:c5:09:0e:30:c9:03:f9:e2:8e:a7:
74:2c:5a:e5:3d:33:99:d8:d6:1e:c6:64:90:c4:13:e6:5f:e8:
32:27:ee:65:de:6b:dd:5d:c2:0a:8a:5e:4c:48:0d:28:c5:17:
66:cf:17:91:ef:12:c5:96:4a:18:a7:82:c6:27:43:a2:88:40:
4f:6a:8f:32:d5:28:d6:cc:02:15:dd:f3:1a:7a:43:26:fe:e5:
c6:e5:39:36:12:3d:c8:0c:86:e5:85:7d:91:6d:7f:19:99:d1:
de:3d:b8:d0:bf:ce:dc:22:89:e0:a6:c9:44:54:ca:8f:7f:3d:
ae:7b:87:87:e1:20:17:b2:41:30:3d:95:89:2b:9b:cc:08:07:
c7:81:e6:a5:44:72:89:73:f0:49:64:2e:a7:3c:14:89:a4:c1:
74:70:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:12 2025 by rpki-client