Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/UkVGZcePqwW-KxvbBYt50liz4UM.roa
File: UkVGZcePqwW-KxvbBYt50liz4UM.roa (raw, json)
Hash identifier: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=
Subject key identifier: 52:45:46:65:C7:8F:AB:05:BE:2B:1B:DB:05:8B:79:D2:58:B3:E1:43
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825D1690F45689D6BCC9A145E7ED1BC
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/UkVGZcePqwW-KxvbBYt50liz4UM.roa
Signing time: Thu 02 Jan 2025 17:52:34 +0000
ROA not before: Thu 02 Jan 2025 17:52:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35470
IP address blocks: 213.249.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d1:69:0f:45:68:9d:6b:cc:9a:14:5e:7e:d1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52454665c78fab05be2b1bdb058b79d258b3e143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:f0:8e:8b:e1:09:ff:e6:a4:72:ca:13:37:
8a:8c:2f:e4:f6:de:5c:54:91:d3:dc:2a:ba:ab:a4:
c7:57:c4:a4:23:6f:ff:26:88:42:62:25:1c:7e:1f:
40:15:f2:b5:38:fd:50:47:e1:31:5d:63:57:13:c2:
6b:62:d9:f0:ab:7d:af:79:4a:ed:6f:5d:8a:c1:0f:
bf:18:e5:26:47:a5:1d:c4:ac:67:da:3c:33:e3:77:
e3:50:bb:21:87:30:e6:40:db:93:3c:a8:3f:a3:f9:
8d:81:b1:49:65:13:d2:c5:bc:d5:3d:d3:06:57:7c:
54:4f:f7:68:3a:2b:90:98:de:fd:92:e6:e1:ca:3d:
fa:25:87:58:2b:69:40:f4:79:6b:52:d5:3c:d8:3a:
73:1c:ca:00:99:e3:3b:0b:13:0f:94:55:13:05:67:
ac:96:aa:4f:a5:ab:3e:71:51:1b:cc:f5:2f:05:25:
6c:d9:a9:12:2d:83:fa:4c:27:55:11:bb:4a:de:26:
eb:b4:8d:a5:68:d3:ac:58:e3:e1:0c:66:c8:f1:de:
d8:d9:11:69:f1:12:31:e3:4e:a6:6d:a8:c3:11:15:
6d:b9:5b:e0:38:93:42:1a:28:47:f9:3b:14:25:2b:
bb:fc:17:17:40:3f:96:a5:6a:b1:4d:92:9c:9c:09:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:46:65:C7:8F:AB:05:BE:2B:1B:DB:05:8B:79:D2:58:B3:E1:43
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/UkVGZcePqwW-KxvbBYt50liz4UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.249.80.0/24
Signature Algorithm: sha256WithRSAEncryption
03:eb:61:e6:b7:18:7b:31:5f:67:8f:b0:46:91:48:a8:66:eb:
2a:de:73:e1:b7:77:f5:fd:be:3a:64:73:99:46:b0:c7:90:b8:
f6:88:6c:03:59:ff:7b:1b:ce:e7:d9:94:cc:85:52:62:1c:a6:
84:d0:f3:88:e1:3f:b0:53:eb:b9:d6:16:ed:51:36:bf:c6:0d:
1c:1a:3a:df:20:69:48:ac:c2:0b:67:01:e0:8a:fd:a6:b2:95:
ba:ab:9a:7c:90:b1:5c:4a:08:78:8b:d8:8c:b0:b0:4d:eb:5d:
ec:f9:b8:4a:07:6a:0b:10:bb:72:63:b3:c6:2d:cf:19:39:c8:
6d:5a:9a:1e:6b:d6:7f:e4:11:d9:22:6a:42:bd:ad:ab:03:55:
d1:db:41:73:0c:3b:58:9e:d9:a5:71:4e:04:1a:95:d6:40:9e:
6a:77:26:c8:37:41:3a:e1:6c:62:38:03:dd:dc:37:29:82:a9:
46:b0:ba:92:e2:fd:01:42:c3:7b:42:4a:14:13:31:85:ba:d6:
10:c8:0b:45:94:a3:98:a9:be:88:93:53:b4:64:10:9d:d6:46:
4c:52:cd:dc:7d:e2:d1:f0:e7:e9:f8:65:6f:70:1a:7d:5c:c2:
07:a7:ee:e5:55:5a:27:d4:39:69:1f:c9:61:b1:66:94:f0:d6:
c0:2b:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:15:00 2025 by rpki-client