Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa
File: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (raw, json)
Hash identifier: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=
Subject key identifier: 50:95:3F:C0:62:BF:9C:A3:A9:4B:AE:8B:BF:EA:B0:E6:C1:F1:E9:87
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019420D5CE007B55375688F81657CEFA65A5
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8680
IP address blocks: 185.70.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ce:00:7b:55:37:56:88:f8:16:57:ce:fa:65:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50953fc062bf9ca3a94bae8bbfeab0e6c1f1e987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:fe:86:2c:4e:cb:f2:b9:ba:5f:f7:75:93:
af:84:51:82:9b:c5:53:12:26:e2:3d:74:b6:c5:1f:
0b:96:03:86:6c:db:90:ed:db:f3:c0:6e:6f:71:0f:
6d:04:56:fb:ce:ec:e0:c6:ec:86:71:6c:ea:ec:96:
f4:af:20:62:81:f6:19:13:63:37:9a:58:57:77:de:
62:da:ff:f8:30:40:ca:8a:1c:ee:d3:25:32:85:a2:
5a:c9:36:d9:54:f8:61:d2:a0:54:af:ff:63:40:5f:
1b:fd:77:5d:02:ec:c0:22:08:7a:37:4a:73:15:8f:
85:5d:f2:e7:d3:8f:80:a8:08:81:09:a2:73:75:c0:
56:53:24:f9:87:8c:30:16:c5:c6:a9:be:a3:95:0d:
02:57:6b:c3:19:00:41:ad:45:c2:58:93:36:6a:b5:
c0:5b:82:c9:f9:97:0e:41:a0:22:25:51:46:c3:6b:
91:db:a1:c6:fb:b6:84:eb:8e:76:18:cc:a4:55:5f:
10:c5:e0:0e:b9:0a:93:0f:6f:cd:14:a2:51:c1:02:
05:73:4d:5e:94:e2:14:f2:6e:e6:a9:e9:d9:44:b3:
2f:82:31:46:63:dd:df:fd:45:39:55:e5:fe:2d:44:
c9:f7:4f:79:48:ad:c6:27:21:51:5d:77:3b:aa:51:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:3F:C0:62:BF:9C:A3:A9:4B:AE:8B:BF:EA:B0:E6:C1:F1:E9:87
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.158.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:58:4f:ad:c0:07:36:c6:72:72:05:0b:6e:9f:63:0f:4b:73:
38:8d:b8:9a:f2:bc:79:6a:b6:13:40:35:be:0d:66:30:c9:2a:
d4:8b:b4:d8:0e:87:0a:19:37:d1:89:2d:b5:82:5c:6a:ce:f0:
5f:ea:5f:a5:81:ae:aa:6f:2c:06:ef:7b:3c:0e:5b:81:6e:2f:
97:2f:70:a7:e5:42:71:c4:58:22:e2:15:a1:3c:48:95:dc:5f:
2d:83:3a:3a:f2:90:53:22:98:f5:6e:13:47:4f:06:7e:88:4c:
c4:94:04:fb:36:78:12:f9:79:eb:d5:db:5b:d0:f2:36:7c:fb:
d9:b7:93:09:b1:7a:85:4c:25:8c:36:5d:9d:a6:78:3e:05:78:
3a:2f:1f:21:76:07:62:2a:72:63:9b:43:9b:f4:48:5a:81:37:
d5:64:e3:14:d0:71:ef:2b:26:2f:1d:84:ce:f2:6a:a0:78:35:
38:6b:f6:73:22:7b:cc:a4:82:55:67:48:22:96:65:b8:ff:57:
5a:6d:3a:31:e8:c5:10:10:a9:d5:c0:92:5d:ee:74:10:1f:6e:
96:9e:99:16:b0:bb:ee:3e:c2:27:fb:cd:e2:89:50:1b:10:e3:
4e:ca:f9:3d:99:1d:e3:1c:b4:0a:ed:e9:1d:0a:9a:ce:9a:a5:
37:de:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:14 2025 by rpki-client