Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uU0TbauRasq_XylQweM05YDy8nw.roa
File: uU0TbauRasq_XylQweM05YDy8nw.roa (raw, json)
Hash identifier: 1IJiYIyUcDQRiNaHsqdl6YIgW7yrUG7/W91MEVCuGJ4=
Subject key identifier: B9:4D:13:6D:AB:91:6A:CA:BF:5F:29:50:C1:E3:34:E5:80:F2:F2:7C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01971FAFA8FA6BD927947B20FB2291A2FE4A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uU0TbauRasq_XylQweM05YDy8nw.roa
Signing time: Fri 30 May 2025 05:34:55 +0000
ROA not before: Fri 30 May 2025 05:34:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205220
IP address blocks: 46.102.237.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1f:af:a8:fa:6b:d9:27:94:7b:20:fb:22:91:a2:fe:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 30 05:34:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b94d136dab916acabf5f2950c1e334e580f2f27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:b6:e7:02:4b:dc:1c:d1:b5:d1:e6:83:1f:
07:c0:aa:04:a4:70:a7:c2:2f:db:4c:f2:63:51:fe:
68:42:09:cf:c5:94:72:0c:61:5a:54:69:b6:bc:12:
93:d0:ca:51:4b:b9:5a:ed:86:ad:fe:80:5e:49:cd:
a4:3d:7d:0c:69:de:a1:79:ca:0a:2c:fa:58:58:cb:
76:81:8d:48:fe:d8:61:56:2a:ce:d4:ba:32:2d:81:
bc:f8:be:02:af:f5:85:7d:1a:86:e1:11:84:74:28:
17:6e:b0:da:6f:2a:5c:65:92:25:7d:e0:2d:23:61:
90:d5:75:12:08:dd:1a:76:7b:3b:be:1e:1a:ae:eb:
47:e8:70:9c:a4:09:3f:6a:d1:8c:d4:95:25:1d:5d:
1a:b8:da:09:a1:49:bc:5e:3c:8c:94:35:26:b7:2c:
24:31:d6:5f:50:29:66:cd:7b:8b:e6:4e:a5:d1:f2:
79:86:f2:8a:c4:7c:c2:f4:93:fa:f7:36:38:9d:22:
20:04:fc:53:0c:b8:05:a0:68:b2:4f:ce:80:c8:1d:
bc:4e:48:87:93:03:07:89:31:d9:30:d5:48:ee:48:
94:66:72:79:1b:e1:a2:05:18:17:d9:50:1b:7e:ae:
63:66:94:b2:0f:8f:27:4c:2c:8b:28:ad:17:e7:43:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4D:13:6D:AB:91:6A:CA:BF:5F:29:50:C1:E3:34:E5:80:F2:F2:7C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uU0TbauRasq_XylQweM05YDy8nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
94.176.215.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ae:70:57:0c:8b:67:d0:92:d0:fe:5e:82:9d:8b:bc:43:84:
bd:bd:60:93:6b:32:b0:bc:38:49:fc:fc:66:4f:16:d9:53:0a:
08:7e:85:e0:4d:d3:5e:58:45:75:f4:c5:dc:a9:ad:14:f2:a4:
a8:e4:9f:30:19:8c:46:2e:10:c6:0b:2e:1f:21:2c:a8:9d:e5:
ff:6c:cb:6e:83:f4:98:93:fa:30:bb:b6:27:1a:18:fa:76:60:
01:df:37:e2:93:0d:c1:f4:83:0a:b3:94:9b:e4:f5:f6:5e:36:
13:0d:d5:b9:54:aa:6e:25:3a:bc:50:4a:28:82:5c:4b:d7:72:
4d:5d:fe:bd:1a:1b:b5:60:4a:ff:8a:fd:95:94:67:c0:ea:77:
cc:55:65:c2:49:de:9a:60:3f:c7:40:99:8b:75:d4:32:4a:3a:
3a:43:fd:72:2a:cf:06:b6:b2:65:6b:05:2e:67:c6:4a:e3:d9:
28:cf:8a:80:5d:00:99:ff:b8:7d:1b:46:a6:4a:76:fe:e9:2c:
f0:22:f6:7f:ea:b0:a3:80:5b:55:0b:31:09:e7:73:65:be:26:
9a:66:43:3c:7f:63:09:f6:38:6a:ac:e2:8d:35:8e:2f:57:de:
78:37:bb:26:1f:80:f9:e1:f7:4b:e1:6c:9d:e0:93:e1:fe:9f:
b3:c9:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:16 2025 by rpki-client