Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa
File: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (raw, json)
Hash identifier: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=
Subject key identifier: 50:AD:A7:E4:9F:36:63:C9:89:FC:28:47:F8:C7:F7:0F:D5:78:D3:91
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 01946A35EDA666A49C91CC516A4302686F17
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa
Signing time: Wed 15 Jan 2025 13:45:06 +0000
ROA not before: Wed 15 Jan 2025 13:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45022
IP address blocks: 195.5.184.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:35:ed:a6:66:a4:9c:91:cc:51:6a:43:02:68:6f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Jan 15 13:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50ada7e49f3663c989fc2847f8c7f70fd578d391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:3d:32:be:1e:01:3b:5b:1a:65:c0:44:a6:
89:d0:26:a2:25:91:8e:b5:8d:00:9e:b8:6d:85:95:
c6:67:57:59:d9:bd:56:56:a3:2e:11:f3:f3:23:51:
43:e9:f6:99:b2:d1:a3:ad:9b:e7:dc:a2:26:af:f0:
01:ea:6d:45:82:83:ef:64:3f:23:b0:f3:eb:9b:d5:
7e:c8:1b:69:37:11:4e:67:aa:fb:7a:a1:0c:56:b1:
6a:0c:21:53:a5:b7:09:a8:8a:fa:c0:3a:d1:f3:47:
81:b8:f0:bf:63:dd:24:f8:f7:8f:9d:db:61:bc:e0:
66:00:53:f1:3d:71:78:e6:df:c1:5e:7e:67:bb:ed:
97:df:48:68:0f:a0:d0:e6:b2:ef:00:65:b6:80:29:
3e:7e:95:32:2e:95:fc:c0:66:58:60:c2:1d:38:21:
eb:26:a4:d9:d7:d0:f8:b5:67:f9:f9:8e:4b:5a:bf:
9c:f6:8e:c4:77:04:7b:41:ec:a7:cb:60:5a:8c:b4:
39:81:47:a3:45:c1:e9:3c:e6:f1:9e:c4:69:96:72:
0c:c6:e2:17:67:f4:8a:1a:b7:02:a3:23:cb:2e:4a:
59:aa:2c:b5:44:2c:1e:77:0f:8f:ce:2c:85:19:c3:
ae:8c:ee:f8:89:f3:2b:0f:0c:ab:da:a7:99:c5:b9:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AD:A7:E4:9F:36:63:C9:89:FC:28:47:F8:C7:F7:0F:D5:78:D3:91
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.184.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f7:4d:08:55:5e:fd:95:44:cb:20:b1:6e:f2:28:ae:af:a7:
07:09:be:1a:1f:a6:09:4d:fa:55:6b:cf:79:a8:68:c7:66:a1:
bf:3a:d7:1d:97:1f:d5:72:c4:49:19:8f:a2:3a:f4:48:80:8a:
ed:90:55:07:cb:54:71:15:0c:40:8c:13:a7:7d:44:cf:68:4f:
e8:f7:7c:3e:16:cb:1b:ea:07:3f:52:de:28:0c:74:71:2b:ba:
b9:97:b9:69:e7:3d:c9:bc:92:df:e6:63:64:25:55:43:14:e8:
c1:95:a9:26:9a:7a:9b:e4:d4:e2:6a:f6:52:19:93:08:ab:b9:
d2:94:8b:8b:d0:f4:fd:22:f5:08:8d:45:ea:5a:52:54:3c:4c:
69:08:17:43:4f:cb:d8:04:94:07:68:e8:2a:04:fc:0f:a1:85:
52:31:99:0f:bb:09:5b:ed:f0:ca:26:0f:62:d3:e5:9e:8d:7f:
3f:68:78:e2:c9:b1:ee:9c:26:38:a0:a6:61:8c:d7:65:d5:ee:
fc:22:d5:f8:f1:4c:74:70:d5:8b:6b:84:8b:2a:b5:14:46:9e:
0e:fa:10:bb:18:ca:23:2f:69:17:91:75:de:3b:e7:7b:0f:f6:
04:77:15:79:0b:56:f5:bc:70:cc:a9:5c:1d:cc:00:4e:4c:8c:
9d:56:91:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:34 2025 by rpki-client