Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/UVYnKt_30APPOeuH0s5UjzlGPFA.roa
File: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (raw, json)
Hash identifier: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=
Subject key identifier: 51:56:27:2A:DF:F7:D0:03:CF:39:EB:87:D2:CE:54:8F:39:46:3C:50
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0194266C481ED0095AC49F42BF0F2F9AE08C
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/UVYnKt_30APPOeuH0s5UjzlGPFA.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 45.91.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:48:1e:d0:09:5a:c4:9f:42:bf:0f:2f:9a:e0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5156272adff7d003cf39eb87d2ce548f39463c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:c4:9d:71:71:ed:ac:f6:61:9c:1f:50:c0:
08:46:5e:13:aa:ef:3a:f6:0e:7c:e4:05:a7:d1:14:
6d:58:19:8e:51:de:9b:20:ae:f5:c3:c5:8a:65:99:
d4:42:cf:34:77:d8:b3:e5:62:8b:56:92:79:b0:df:
95:a4:f6:9a:75:eb:e2:f1:98:24:30:00:db:c1:a2:
8d:6c:c4:7c:6b:06:2a:de:a4:e1:95:52:c9:20:81:
47:a1:67:30:59:31:60:2c:ae:51:ca:e0:c7:3d:12:
a2:cf:1d:51:76:3b:d6:3d:a0:ab:01:f4:b9:1a:b0:
20:9d:54:9f:e0:a0:84:50:17:df:2e:0f:f3:40:be:
fe:0e:c4:e2:a9:1f:e4:f3:49:6f:1c:09:97:3b:31:
65:22:00:2a:a9:47:4d:cb:e7:92:8a:07:a0:59:3b:
c0:1e:51:68:99:a2:69:78:75:a9:b1:b9:9e:a6:46:
16:ea:e2:61:b8:9b:1b:0a:18:d5:f2:63:b5:02:78:
94:b0:9a:65:80:c2:67:a0:f7:5f:c8:b5:27:9c:5d:
2e:d8:c9:af:0f:00:47:5b:da:e5:a3:49:80:24:d2:
a2:8e:1d:6f:c9:a6:ea:14:b2:d3:94:e9:dc:7f:23:
d4:2c:d5:cc:23:c2:94:d7:8d:75:bf:d9:1c:4d:3a:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:56:27:2A:DF:F7:D0:03:CF:39:EB:87:D2:CE:54:8F:39:46:3C:50
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/UVYnKt_30APPOeuH0s5UjzlGPFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.196.0/23
Signature Algorithm: sha256WithRSAEncryption
57:56:72:6e:6e:5a:42:83:55:28:c9:d7:86:ef:c3:68:0a:97:
2e:4e:85:03:ab:d0:ca:4d:f8:a3:f5:6c:4d:46:e3:65:e3:da:
45:87:0e:24:bc:79:62:3d:1b:c4:a3:50:f7:a0:ec:e7:a6:09:
3b:dd:c4:36:7b:ad:b5:67:e5:1d:c3:e9:3b:59:dd:f4:f8:19:
68:24:fb:b1:16:01:59:78:f1:67:40:ef:3e:f5:8e:59:ed:02:
84:f9:b9:19:fc:38:1d:0b:64:e8:85:11:3a:69:0e:2a:cc:98:
5f:0a:df:22:52:ee:50:35:c0:23:ad:f1:99:1f:d6:a6:62:66:
2c:4c:4b:69:9a:31:f1:f5:bc:d1:70:f6:3d:a5:10:53:92:52:
f0:80:8f:5d:ce:44:0d:ba:38:02:77:67:b9:0e:30:eb:95:ea:
3f:c6:18:c5:2a:56:8c:1f:a2:da:9d:ee:c4:d8:38:07:18:2b:
93:df:6a:99:7e:50:5b:59:78:51:fc:40:b7:68:01:c6:c1:fa:
5d:92:72:34:88:9b:b0:df:40:b0:21:cb:3b:89:b1:ce:fa:3b:
12:32:4c:ec:89:79:05:ee:82:9d:94:c3:d9:cf:ac:be:1b:64:
0b:b2:8c:70:5e:d4:1a:0a:20:8f:9f:b5:0b:71:65:5e:a9:98:
13:03:6d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:46 2025 by rpki-client