Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa
File: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (raw, json)
Hash identifier: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=
Subject key identifier: 52:39:0B:D7:24:F0:1F:45:20:7F:2D:9B:AF:62:69:1F:40:BC:56:A5
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019428239DA8741952FF9861FEDF4A1CE3D9
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa
Signing time: Thu 02 Jan 2025 17:50:10 +0000
ROA not before: Thu 02 Jan 2025 17:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208733
IP address blocks: 2001:678:3b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9d:a8:74:19:52:ff:98:61:fe:df:4a:1c:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Jan 2 17:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52390bd724f01f45207f2d9baf62691f40bc56a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:d5:8f:4a:a8:f7:8a:fe:c8:a4:cf:8f:e2:
c8:79:d8:c7:4a:b3:5e:66:7a:18:b9:90:48:f6:d9:
af:aa:03:3f:70:2d:70:9c:2e:cc:78:8d:5e:36:ab:
d3:39:d1:40:64:be:22:49:1c:2e:87:e3:89:c4:b2:
26:04:8b:1a:cb:70:f3:fa:63:80:6e:89:05:bd:f8:
ab:43:de:ba:01:2d:f4:a3:b8:d0:c3:19:5e:c4:52:
45:03:41:d2:6f:71:90:35:b6:f4:c1:d7:f1:e5:60:
ec:32:f6:f1:c4:88:9b:d7:9b:8b:ff:00:2a:76:f1:
dd:46:f9:6a:e2:dc:a1:e6:11:1e:5e:43:cc:bf:60:
db:c9:2a:9d:ba:6d:d3:e2:fc:02:e2:dc:ea:45:fc:
3e:0b:d0:8b:e9:54:35:f1:cf:7f:63:cf:a8:8e:01:
e1:95:e5:1b:04:c1:3d:2a:9b:90:4d:4c:e0:dc:25:
a2:75:22:72:41:3b:a1:e0:c9:b4:6b:f3:c5:d5:c3:
0f:a3:f2:89:fa:3f:08:c5:df:cd:b2:40:7b:f5:95:
24:69:ea:cd:ee:1a:58:37:24:16:fa:00:ca:55:5a:
d0:bd:fb:00:4e:1e:42:54:3b:9f:7e:68:db:fa:ca:
2d:23:94:6a:76:9b:04:bb:59:13:eb:ba:e8:0c:ef:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:0B:D7:24:F0:1F:45:20:7F:2D:9B:AF:62:69:1F:40:BC:56:A5
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3b8::/48
Signature Algorithm: sha256WithRSAEncryption
a7:01:f7:80:7b:2a:20:6c:10:2b:58:73:11:2d:40:30:e6:2f:
db:55:ee:28:a3:3d:ed:cd:44:36:a7:6d:aa:cc:9e:11:32:bd:
65:bd:e4:b6:c6:5d:ba:61:b1:52:9e:62:db:b7:3c:87:06:10:
0a:ba:ff:ef:2f:22:c7:81:fd:c2:b0:03:d3:7b:b5:60:63:8f:
9d:d9:2d:3b:4d:d7:77:ed:e1:c9:ce:2b:c2:b4:d0:69:3c:11:
38:d6:b2:8f:05:c6:de:d2:20:f8:61:e7:35:09:ff:a8:92:d9:
e6:40:ca:db:b3:f3:20:0a:69:c6:1f:57:3f:d4:d8:2f:84:22:
63:56:db:e1:1c:75:36:0f:19:03:09:13:ac:9c:79:7e:39:03:
3d:a6:e2:4c:5b:ed:e6:4e:f3:11:19:0b:cd:b2:cf:90:f7:e5:
ca:79:18:6b:fe:96:d0:d8:47:9a:7d:72:3d:4d:cd:3c:8d:7c:
49:4d:2a:39:47:66:d1:fa:e6:08:bf:8b:c7:35:ec:04:8d:7f:
5e:b3:82:fa:29:f5:89:77:c4:b3:9e:03:b5:4a:9a:72:0c:7d:
a3:01:cc:23:60:d5:72:f1:8b:bf:90:20:05:4b:56:af:34:60:
f9:a8:cb:04:ac:4d:e3:b0:a6:f2:9a:07:59:74:45:3d:be:51:
27:e5:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:08 2025 by rpki-client