Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/uEsfVd8NIzUxBoG774jECjWdTsY.roa
File: uEsfVd8NIzUxBoG774jECjWdTsY.roa (raw, json)
Hash identifier: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=
Subject key identifier: B8:4B:1F:55:DF:0D:23:35:31:06:81:BB:EF:88:C4:0A:35:9D:4E:C6
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF4DC398F8B2611512B1850F81917
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/uEsfVd8NIzUxBoG774jECjWdTsY.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50065
IP address blocks: 82.135.216.0/24 maxlen: 24
195.12.182.0/24 maxlen: 24
2a00:1eb8:c001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f4:dc:39:8f:8b:26:11:51:2b:18:50:f8:19:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b84b1f55df0d2335310681bbef88c40a359d4ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:ab:d2:e9:32:44:c2:d7:1f:10:2e:53:ed:
0f:12:39:dd:c7:ba:b7:2b:a3:c6:5b:72:85:c1:1b:
c3:79:80:c5:eb:e4:5c:9e:52:ef:96:a8:82:8d:22:
43:5d:af:eb:6c:a1:3a:73:34:d3:f4:f9:22:bb:03:
5a:b3:68:2b:e2:54:1c:79:1f:8a:35:7c:e4:1f:70:
f4:7c:a5:7c:4f:49:b2:30:98:6c:08:fe:3b:93:d4:
af:69:31:3e:0f:a9:75:21:70:60:84:6b:cb:14:d9:
ba:3f:2b:fb:40:86:c8:83:c2:1e:b7:2a:8e:db:dc:
0a:c3:f7:10:b2:35:9b:c7:36:e9:36:02:80:25:32:
45:91:c8:8b:a5:0c:ed:80:21:24:86:d8:d0:24:1d:
5e:e4:7b:ab:8b:ca:df:e0:3d:27:56:5d:7d:0b:95:
a1:e0:a7:e2:19:d7:0f:9b:58:6a:95:51:e2:b6:49:
e6:d8:a9:0b:62:1b:bb:cf:7f:29:4d:f3:13:f3:08:
34:26:0b:ba:3d:32:e1:dc:16:92:12:a6:85:c8:5b:
d0:3d:4a:53:5d:5e:cb:30:2b:12:20:eb:1b:bf:a8:
c8:1a:d9:93:ba:63:ef:43:83:d3:cb:44:43:ef:be:
c4:5f:0e:88:7a:5a:52:d7:41:99:fa:85:eb:bb:72:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:1F:55:DF:0D:23:35:31:06:81:BB:EF:88:C4:0A:35:9D:4E:C6
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/uEsfVd8NIzUxBoG774jECjWdTsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.135.216.0/24
195.12.182.0/24
IPv6:
2a00:1eb8:c001::/48
Signature Algorithm: sha256WithRSAEncryption
33:da:22:77:86:44:87:6c:e6:1e:c7:d6:e5:28:1d:a4:03:cd:
08:3a:48:c6:35:f1:2b:82:97:c5:5e:62:9f:9f:b1:72:26:51:
c1:01:88:15:12:99:01:42:25:18:69:69:66:d2:bd:37:4e:df:
c3:2f:4a:c8:59:fa:e9:8e:35:61:e0:25:67:66:62:ca:7f:5f:
84:13:9c:ee:3f:fa:28:77:7d:ee:d8:54:04:2b:c6:2c:89:38:
fe:08:9b:25:4f:79:16:df:df:27:7f:64:67:3f:8f:7c:de:aa:
dd:5f:fa:81:57:cf:37:d6:b6:8c:4c:4d:f9:58:0c:1c:65:5e:
ab:40:c7:98:32:84:26:a0:7e:cd:6d:c4:fe:9b:3e:fd:4a:6d:
dd:08:f9:c3:9e:bc:45:48:13:95:89:7a:a8:a0:b2:88:28:ed:
95:45:6a:38:5c:25:9e:ac:ad:cc:f5:c2:74:9c:88:29:75:98:
3a:2d:12:e6:02:16:21:de:37:24:1a:34:0f:f0:55:0b:c6:ed:
94:4e:7e:94:2a:b0:51:58:82:37:bc:56:77:5b:99:2f:cd:d0:
e7:f7:34:ef:bf:c1:2b:3b:e7:c0:a0:9e:b0:2d:3c:f9:b1:19:
d5:6b:ca:26:f6:52:42:e7:52:b3:35:76:a5:22:fd:3b:26:68:
2d:7a:e2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:25:03 2025 by rpki-client