Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/utnanlwrMPvqo9oUFO7C-isrnws.roa
File: utnanlwrMPvqo9oUFO7C-isrnws.roa (raw, json)
Hash identifier: hoqvLMB2exZaW3zQIo0VGKfu9n9CN2+OhypTj5cWUUQ=
Subject key identifier: BA:D9:DA:9E:5C:2B:30:FB:EA:A3:DA:14:14:EE:C2:FA:2B:2B:9F:0B
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 0194221FAE585BA63EEBEA210445B527BA26
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/utnanlwrMPvqo9oUFO7C-isrnws.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216090
IP address blocks: 84.23.51.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ae:58:5b:a6:3e:eb:ea:21:04:45:b5:27:ba:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bad9da9e5c2b30fbeaa3da1414eec2fa2b2b9f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c3:9a:5c:e3:1d:e6:ec:d8:ee:39:fd:62:1f:
6e:c0:d3:ea:38:89:d8:16:37:5e:2c:1a:81:fe:0d:
f8:fc:55:fb:21:e3:76:d7:1a:6f:50:16:0d:64:fb:
76:f9:a5:13:6d:43:9e:73:86:61:df:d2:01:af:d2:
e5:f1:0c:85:26:c3:40:ca:c8:9c:b9:94:82:ce:4f:
6b:36:76:e3:92:58:55:59:b2:31:07:7e:17:47:18:
b2:13:8d:8a:f7:b5:25:01:74:a9:30:01:ea:ae:b5:
42:d0:b8:a3:1c:f3:dc:c9:6f:47:e8:a0:5d:52:b6:
71:29:1f:e3:98:0f:50:f5:9d:27:ce:33:12:e4:e1:
6e:79:fa:98:6c:76:40:37:04:af:04:6f:7a:4f:05:
73:07:4a:fb:cf:9d:a0:2f:ff:df:39:3c:66:5a:81:
16:ea:c8:57:b0:2f:22:86:75:42:1b:d7:29:55:3d:
d5:e5:d3:22:c8:1f:74:73:bc:86:0b:ad:c3:83:c1:
24:ff:a2:7d:0f:45:80:27:61:b1:30:69:33:80:1d:
70:1f:27:a6:b9:d8:2e:21:76:b0:32:56:46:97:37:
0b:17:1f:8b:44:29:6a:3e:67:51:77:53:45:3b:d6:
d3:a8:cb:ff:bc:48:f8:cf:a6:a5:7f:fc:c8:54:c9:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:DA:9E:5C:2B:30:FB:EA:A3:DA:14:14:EE:C2:FA:2B:2B:9F:0B
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/utnanlwrMPvqo9oUFO7C-isrnws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.51.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8e:a3:b1:14:d4:5e:b1:9a:ca:57:71:2f:d8:09:7b:7f:5c:
65:8f:c3:12:8e:b1:2d:06:a6:4f:8c:59:70:d4:6b:5a:c3:21:
c3:c4:53:5d:8a:95:93:c9:2f:74:88:fa:65:d0:e1:52:f5:04:
12:1e:5c:ea:fb:df:25:9e:77:a4:b0:e7:ee:e1:87:7c:29:bf:
ed:ec:f8:49:2d:8e:4d:ac:9d:ee:55:3c:4e:c6:a4:d5:46:90:
b4:61:d6:8b:a2:65:d3:be:9e:cb:56:42:65:9a:6d:0e:96:86:
8f:2e:91:70:23:34:ac:d5:16:dc:a6:e6:00:30:7c:c0:03:e2:
64:9f:b3:a0:b4:4a:46:06:c9:48:4d:cc:94:62:62:a1:3f:f2:
69:3f:6d:2a:2f:18:ec:3d:f1:6d:53:6d:3d:c5:66:2e:0f:30:
d0:4f:39:2a:7b:f1:96:b1:90:f5:f3:e6:69:ba:88:f2:4c:88:
88:df:7a:7e:50:f4:85:a6:70:87:64:44:7e:db:95:8e:57:15:
74:fc:a5:ef:50:37:3a:3d:0e:32:39:1e:a0:79:c1:31:66:db:
fb:d2:6c:e5:7d:c3:d7:65:53:46:9f:b3:f2:d3:ef:14:7f:c1:
73:2e:5d:c1:00:1f:45:7e:fc:26:4e:e8:69:ea:b3:b1:6f:4a:
d6:8b:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:45:26 2025 by rpki-client