Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa
File: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (raw, json)
Hash identifier: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=
Subject key identifier: 52:52:7D:A0:1E:FA:79:66:3A:45:50:D0:21:AE:44:97:11:82:B4:36
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 0194258F37AC62E44DC605D529DD710FADC4
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2643
IP address blocks: 2001:678:7d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:37:ac:62:e4:4d:c6:05:d5:29:dd:71:0f:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52527da01efa79663a4550d021ae44971182b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:45:73:8c:bf:12:62:b5:46:1d:05:b6:9b:
77:d7:1b:5f:31:0a:0a:16:5b:4f:3a:c5:e7:2f:14:
0a:c7:5a:8e:e7:cd:30:c8:ac:d7:b3:9a:a7:11:da:
b0:f3:9e:c2:eb:a0:0a:84:16:59:48:c7:81:3e:d4:
37:cc:df:4c:ca:29:82:f4:95:98:d9:50:07:7e:6e:
40:ca:3d:69:ef:07:02:92:64:cc:01:60:74:0d:42:
a1:18:50:8a:5b:aa:3a:a9:06:23:d0:83:d5:fc:2d:
ad:2a:35:17:95:75:7d:69:ab:6b:e6:aa:61:43:55:
94:8c:8e:07:5b:e4:31:cb:38:66:a0:6b:3f:27:3b:
46:5b:ab:52:89:a6:f4:5e:8d:2a:ad:a3:b4:76:fc:
71:f8:29:85:28:9b:92:a7:ef:89:6d:fa:69:e0:f2:
bd:5c:bb:de:ba:67:ed:21:50:0b:c5:a3:76:1f:00:
2b:f8:59:1a:14:71:36:7e:4a:19:0f:41:15:af:d4:
4f:ef:51:af:27:d2:8a:b4:de:a4:91:87:c6:48:17:
45:42:89:92:aa:2c:11:5e:76:c6:46:da:8a:cb:f2:
32:90:13:3e:8c:2c:cd:9f:f1:87:e3:af:1d:47:b3:
94:c0:55:50:ca:8d:b2:c2:9c:67:58:7c:37:54:dc:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:52:7D:A0:1E:FA:79:66:3A:45:50:D0:21:AE:44:97:11:82:B4:36
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7d8::/48
Signature Algorithm: sha256WithRSAEncryption
9a:00:ae:57:8e:ff:c3:e3:d7:96:a1:3f:f0:ac:68:e1:29:6f:
f5:35:d3:da:38:d6:fa:90:b1:43:d3:62:71:b7:98:40:ed:dc:
cc:33:6a:77:75:70:8e:f5:8c:c8:84:d8:65:0e:8e:77:8b:85:
44:cd:35:85:7c:39:70:fe:eb:81:e0:c9:15:3d:70:15:2e:86:
d2:80:bb:7e:b9:a5:7e:2d:57:b5:22:0e:64:31:76:a4:7b:a6:
c1:40:cb:d0:11:25:f8:26:26:ef:10:26:44:15:c8:b7:92:af:
72:8e:3c:e8:79:17:73:b5:f2:3d:f3:bf:9c:f3:ba:6f:a1:a9:
dc:3d:2e:50:8c:b2:39:07:57:bf:db:03:64:41:f3:3e:24:d6:
fe:da:f6:e2:7d:8f:4b:73:2e:93:c8:64:0a:53:4f:b2:79:04:
cd:54:15:9d:55:2c:a4:00:a2:a6:45:b2:1a:1d:9a:10:7b:05:
51:d1:fa:94:e5:8d:bb:0d:17:8a:94:6e:35:f2:6a:7e:4c:c6:
57:f2:a0:f6:88:7e:f2:f0:3f:fc:c2:e7:a6:da:f4:81:a9:75:
9a:42:77:77:3c:ea:68:25:e6:27:5c:62:54:e0:fe:0f:68:df:
35:d8:d0:c9:91:1e:29:ec:13:33:1c:4d:23:e8:32:92:69:f3:
4b:5f:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:21:40 2025 by rpki-client