Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/UCBeLj8xGXwN54FWy4ICeHeYT8c.roa
File: UCBeLj8xGXwN54FWy4ICeHeYT8c.roa (raw, json)
Hash identifier: UkYvtliZDLxpHtbCfbWlJJSbj0YcgaFaeBuzbsF3OsY=
Subject key identifier: 50:20:5E:2E:3F:31:19:7C:0D:E7:81:56:CB:82:02:78:77:98:4F:C7
Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Certificate serial: 0194221F8F1EF926A5A8F5DA4DA1EA9ABD27
Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/UCBeLj8xGXwN54FWy4ICeHeYT8c.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202354
IP address blocks: 91.205.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8f:1e:f9:26:a5:a8:f5:da:4d:a1:ea:9a:bd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50205e2e3f31197c0de78156cb82027877984fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:c5:b5:96:9c:ae:17:b7:09:54:04:16:7a:
4f:cf:4a:5e:89:d6:6f:a0:0e:f3:20:ac:5c:c4:4e:
14:9b:cd:1c:44:67:91:68:5f:65:ca:59:be:3f:ae:
bc:95:42:21:8b:d3:49:99:85:8e:c9:e4:51:df:3e:
3e:ab:8a:d9:8f:41:5e:d1:f8:93:dc:0a:51:99:3d:
00:4e:e1:f2:9a:38:6e:bb:0b:e0:68:91:09:0b:4c:
17:ca:b9:22:de:41:be:3d:11:e6:58:ce:44:e8:47:
ba:8b:a6:4c:c4:1b:aa:c9:7f:b5:7f:18:56:0f:65:
0a:06:cb:f4:38:e6:be:5b:15:f8:f3:0a:dc:8c:48:
42:11:51:48:60:de:b8:5c:63:11:0d:87:f3:7a:a6:
15:e7:81:6c:3b:c5:59:9b:30:6f:be:b4:db:c3:4e:
58:ca:1f:9a:d0:00:75:f7:36:e8:11:ad:4f:66:c2:
83:94:2d:ba:d0:ee:47:64:50:d4:98:82:de:67:04:
a7:80:df:31:cd:3f:5b:9e:f0:80:99:22:b4:ac:51:
de:dc:52:08:3a:b3:2f:c4:22:f6:ac:c1:d3:2c:8f:
1f:36:4b:b6:55:5f:a0:b8:1b:18:7d:96:23:36:95:
a3:80:df:db:67:b3:dd:a1:63:21:14:6d:26:d6:1a:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:20:5E:2E:3F:31:19:7C:0D:E7:81:56:CB:82:02:78:77:98:4F:C7
X509v3 Authority Key Identifier:
keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/UCBeLj8xGXwN54FWy4ICeHeYT8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.42.0/24
Signature Algorithm: sha256WithRSAEncryption
34:bf:90:29:d0:52:26:3b:f3:8e:39:e1:20:f1:d8:20:26:f4:
d4:db:97:0e:f2:85:32:81:82:e7:47:76:a8:bb:0c:7b:81:dc:
ae:d6:cf:c0:0f:8a:ce:c1:b0:9c:c9:b2:a8:cd:27:86:c0:dc:
01:0d:42:c5:0d:05:92:3c:30:00:2a:a2:4e:12:05:00:31:ac:
b2:37:85:e1:78:8e:c3:13:45:dd:86:37:fe:02:60:24:a9:7a:
ac:d7:a0:bb:00:49:0e:14:8c:82:1e:df:94:2c:90:48:74:e9:
9b:9d:30:d1:ea:77:ec:bb:79:83:e9:4c:99:2e:f9:95:96:ef:
17:87:b9:be:0c:3e:6e:6f:c3:14:95:99:af:36:bd:b9:1d:0c:
dd:92:40:55:d9:5b:1c:32:84:f5:66:eb:f1:6c:47:c9:78:31:
97:27:f2:a4:4c:1d:ed:4a:5a:b5:dc:33:87:93:57:1e:a4:3a:
65:43:43:fc:09:30:e7:b8:ee:69:0f:b7:cf:61:c4:e1:c1:af:
4d:78:59:58:28:15:c4:3a:10:b2:6e:b1:fb:f1:71:24:bf:93:
20:17:06:aa:be:49:f0:eb:67:cf:8b:3c:12:d1:4a:c5:c0:82:
68:e8:c0:66:19:2f:56:5e:d0:31:63:f4:69:38:c6:c5:a4:2d:
80:c8:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:46:58 2025 by rpki-client