Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa
File: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (raw, json)
Hash identifier: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=
Subject key identifier: 51:FC:7F:B8:65:F7:DD:83:11:26:4F:7A:F8:DB:37:39:56:28:62:46
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 019427B593EC913CB93015484C2C9D9EE82C
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.129.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:93:ec:91:3c:b9:30:15:48:4c:2c:9d:9e:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51fc7fb865f7dd8311264f7af8db373956286246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:2b:df:07:8c:88:53:39:db:e9:30:d9:a1:
a7:16:27:de:94:a0:5d:40:7e:ae:92:43:96:e8:e3:
9d:5b:3b:34:75:c4:81:2b:4d:15:66:04:45:06:ac:
67:cd:86:e1:2a:5e:c5:fe:83:a4:19:c0:ff:f4:e0:
ba:f0:04:94:76:ae:2c:a0:e4:d1:fd:7b:1e:24:66:
a2:dc:ca:18:97:67:60:9a:2f:b1:4c:ad:59:59:73:
56:fa:3c:69:7a:50:98:8d:53:46:40:97:63:c9:b5:
0f:e4:64:6b:b9:b2:e2:13:61:f0:b8:6d:de:b2:13:
98:32:db:15:7a:02:dc:8a:ca:c8:ff:52:2d:c7:9f:
03:2c:ca:9d:d4:d1:07:f0:ad:48:1a:fc:92:80:6e:
2b:46:44:0d:0d:b9:b4:e3:78:7b:d3:97:5b:a3:0a:
7e:d2:2a:8d:be:6b:dd:8d:cb:8c:70:b7:ac:d1:35:
d3:8d:ee:4a:ea:38:5b:c5:b5:c0:a9:7d:f2:ed:9b:
1a:94:1e:a2:71:98:20:a5:b6:af:d2:c1:23:b1:13:
4a:08:35:db:94:6f:e1:36:09:a1:a7:3e:2c:9b:9d:
30:d6:bd:8d:a3:30:11:e0:b6:2f:16:fd:fa:46:53:
a2:26:5c:ca:50:d9:19:74:4d:8e:f5:6d:0f:59:f5:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:7F:B8:65:F7:DD:83:11:26:4F:7A:F8:DB:37:39:56:28:62:46
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.192.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6f:7f:79:32:60:18:1e:4e:d9:87:99:e4:5b:71:87:3b:89:
cd:43:74:fc:8f:75:2a:43:d7:b6:e7:78:59:51:ea:8f:36:36:
d9:c8:70:d9:e9:4d:9c:48:8a:0b:51:8a:3c:c8:5c:86:ac:51:
3f:8f:0c:26:da:85:ff:ef:09:f0:1b:15:0f:50:e4:a0:66:28:
fa:a7:89:50:9f:35:4e:bc:0c:96:fb:f6:3a:a1:14:6c:4d:f1:
07:67:ba:c0:d5:25:6a:c1:2a:e2:24:85:d7:28:c9:ea:90:f9:
da:61:ec:2e:91:5a:38:89:ff:de:ae:d1:30:2e:9d:1b:84:18:
7b:65:0d:82:65:c7:1a:37:8c:41:a5:d7:c7:a4:49:03:0c:50:
70:9b:58:a2:04:b5:36:01:ec:89:51:8f:6c:b9:cd:33:df:96:
cc:06:fb:41:3e:62:83:46:f2:06:37:d5:47:d3:2d:aa:6b:4a:
a8:03:f1:b0:98:31:a8:1f:d1:ea:6a:4e:0b:e9:d7:9e:24:fc:
94:b4:cc:c4:32:ac:4d:77:9e:02:00:42:99:5c:1e:99:b7:8a:
05:7a:fc:57:1d:c7:e0:eb:16:45:b3:63:b3:c6:e8:28:74:87:
d8:04:b8:53:62:9d:db:d2:30:7b:c9:f5:eb:cb:fc:dd:cd:11:
f3:ec:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:48 2025 by rpki-client