Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ukthWbt9IBTYp2qjhm6wEM_S8bQ.roa
File: ukthWbt9IBTYp2qjhm6wEM_S8bQ.roa (raw, json)
Hash identifier: hLJ5DfNnIhrPfuhQuZUHczljjIx1xrwCTZTviqsN+WM=
Subject key identifier: BA:4B:61:59:BB:7D:20:14:D8:A7:6A:A3:86:6E:B0:10:CF:D2:F1:B4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCC85349405DB14F75E858E650D94
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ukthWbt9IBTYp2qjhm6wEM_S8bQ.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59734
IP address blocks: 93.171.32.0/23 maxlen: 24
95.46.120.0/23 maxlen: 24
95.47.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cc:85:34:94:05:db:14:f7:5e:85:8e:65:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba4b6159bb7d2014d8a76aa3866eb010cfd2f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:34:f1:ce:2e:53:fc:3d:55:cd:5e:c8:76:
6f:45:5d:85:6d:88:31:85:1d:37:4b:12:ad:bc:a8:
4c:9c:f9:e2:89:4d:19:8d:1b:8a:b7:39:d1:62:1d:
9e:15:ac:d5:e4:5b:dc:37:6c:8b:6e:77:48:f8:de:
9d:56:0a:52:27:f8:fe:fa:5a:62:a1:00:38:0b:80:
bc:64:3b:42:f1:a7:b4:00:a6:76:89:ac:66:5b:ec:
63:b5:67:38:5f:40:be:75:e9:1f:2c:e4:f1:ee:0e:
0d:b2:b2:34:de:d8:d2:04:59:d0:42:f9:3b:8f:df:
aa:ca:42:73:33:82:d0:8b:c2:3c:10:eb:9e:f3:c7:
7e:f9:1d:de:da:a4:d7:10:18:df:ae:db:dc:47:16:
a5:a1:65:51:5c:bc:4a:c1:fe:cd:5b:7c:a7:9e:5f:
31:32:69:1f:42:65:31:ed:3f:f9:9e:87:60:c9:c1:
d9:8c:4c:6e:15:0a:30:3f:e0:b1:92:c3:6d:65:53:
d5:d8:07:5f:f9:fc:53:fd:88:02:a9:f1:03:91:ff:
d9:39:22:1b:77:fe:e5:1b:b5:0f:63:a9:fa:20:3a:
5b:df:57:10:1e:08:2b:7c:d5:ba:66:e3:3c:25:e6:
37:d5:f0:bb:45:b0:08:dd:69:2e:eb:10:90:ac:3b:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:61:59:BB:7D:20:14:D8:A7:6A:A3:86:6E:B0:10:CF:D2:F1:B4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ukthWbt9IBTYp2qjhm6wEM_S8bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.32.0/23
95.46.120.0/23
95.47.240.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:38:a0:8d:04:26:dc:dc:fd:bb:1c:54:9b:eb:08:38:35:80:
19:34:36:17:12:b1:e7:3e:0c:c7:8f:4b:15:53:8b:7c:7b:1a:
27:b8:c8:f2:bb:a1:c2:1a:64:79:b9:c0:89:3e:a2:29:9b:eb:
d3:37:bd:cf:fd:e8:05:51:a2:a1:50:3b:f6:97:d3:57:24:a6:
8d:f2:6e:6f:aa:21:d0:62:c4:e6:b0:67:f6:ed:d4:89:38:a9:
36:fd:e5:c2:fa:5f:eb:69:ce:43:6a:cf:67:ec:4e:d2:93:86:
fc:f5:94:91:87:ac:05:86:fa:2c:b9:47:eb:80:23:ea:5a:88:
26:20:94:2a:5e:6a:17:cf:40:a1:fd:af:60:4e:76:ce:c5:0c:
e3:3b:b4:fd:44:1e:43:73:e9:af:e1:f7:e5:71:e0:a0:da:b8:
e7:48:2d:59:f4:86:26:15:1c:08:1f:9f:52:dd:73:4d:64:8b:
73:fc:b5:60:52:69:e0:77:92:2b:ee:82:b0:70:50:1e:19:8a:
c1:c1:96:8a:0c:cd:85:9f:51:0e:64:de:e7:5a:82:45:1d:a7:
0d:5c:d4:7d:3b:76:71:78:b6:85:f6:58:10:87:fa:ce:59:9d:
27:65:d5:af:f7:b8:a1:f0:c3:42:93:68:29:71:c4:65:af:a0:
9e:18:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:47 2025 by rpki-client