Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa
File: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (raw, json)
Hash identifier: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=
Subject key identifier: EE:4F:25:F6:34:5C:52:F5:14:D0:FA:05:8D:69:96:CB:9B:D0:E1:15
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019425FDA61F5C47C23147CECC8FC8F8DDB7
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50020
IP address blocks: 46.16.192.0/21 maxlen: 21
185.201.36.0/22 maxlen: 22
193.104.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a6:1f:5c:47:c2:31:47:ce:cc:8f:c8:f8:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee4f25f6345c52f514d0fa058d6996cb9bd0e115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:c5:47:9a:ee:af:fb:49:a1:64:d8:c1:0e:
9d:80:54:b1:a0:25:74:7d:32:aa:03:fc:b5:71:d0:
f8:76:4c:4b:06:19:96:49:30:41:1b:ea:52:d2:d5:
43:e5:df:44:97:23:94:50:fb:3d:87:e5:e0:11:db:
73:75:58:cb:ea:44:0d:72:d7:4b:2e:97:98:39:22:
19:9a:b4:a6:8c:22:68:0f:ee:9b:2c:c0:44:2b:6c:
e4:0f:d8:3d:67:b4:17:87:14:94:3b:a5:f0:0c:a2:
6c:5b:08:95:3c:44:67:08:28:99:90:7e:89:fb:3f:
f9:c0:96:15:2f:9f:62:38:35:5f:47:7e:2a:7b:21:
f3:28:af:8c:b9:c6:11:c0:05:f8:ce:cc:a9:ff:fc:
65:32:06:81:9d:5c:f9:03:72:1f:05:62:54:cf:04:
2c:d6:16:ca:3b:67:a1:77:fa:b5:81:08:c8:52:bb:
db:a7:48:0c:67:b8:d9:82:26:8f:b0:3f:93:34:14:
aa:84:d7:44:ab:16:94:6a:fd:ca:f5:eb:9e:a8:1e:
8e:7b:94:73:29:17:1f:f0:ce:ab:8f:88:4e:95:6f:
5c:ad:53:e1:d2:a7:f8:34:92:8b:74:e0:8e:43:8c:
55:24:65:f1:1f:4d:c9:b3:b4:e8:9e:13:3d:44:87:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:25:F6:34:5C:52:F5:14:D0:FA:05:8D:69:96:CB:9B:D0:E1:15
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.192.0/21
185.201.36.0/22
193.104.79.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e8:cf:12:c0:92:24:c5:e2:4d:bc:f4:08:ae:e8:77:87:d1:
41:b8:04:ef:13:96:8c:25:10:d4:ef:8d:92:08:e8:2f:02:60:
76:b9:34:62:28:00:41:4a:a6:25:cd:23:a2:6f:21:c2:72:fd:
e6:8c:e0:a3:97:e7:25:fd:c5:7f:1a:75:df:4b:7c:6a:4e:9e:
7b:68:f9:20:b1:98:2d:f3:65:a6:d8:db:c7:b1:e1:b2:84:02:
53:ca:e7:87:2a:2b:f2:6b:89:55:bc:2c:fe:66:9c:6e:6d:25:
1c:61:c6:7d:02:47:00:dd:96:31:8c:fe:2b:8c:f8:d7:d2:dd:
73:cf:be:a2:f3:fe:61:1a:74:31:a4:0a:8e:19:8a:6b:e5:d5:
af:28:7e:66:e5:9d:ed:0c:54:42:0d:c4:5e:b0:30:e5:d6:16:
3f:a4:3b:a0:e1:69:68:4f:de:cd:81:87:85:52:6f:c7:01:6b:
33:0b:ca:b0:8d:83:a6:8e:dd:0e:da:a5:40:c3:67:dc:1c:dd:
19:83:40:87:8d:aa:be:db:c3:dc:16:6e:49:76:a2:4b:6a:b4:
67:b1:e9:db:ed:0c:b8:1e:a8:8e:1e:65:1f:16:a8:98:37:1e:
49:cc:9d:e2:3a:b3:be:c9:f2:ac:15:c3:2f:aa:06:51:ee:8f:
56:cb:c9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:19 2025 by rpki-client