Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uyfgFoWlD8VUu1sf7p2McC7VKMQ.roa
File: uyfgFoWlD8VUu1sf7p2McC7VKMQ.roa (raw, json)
Hash identifier: avuCXtyIVTxJjhMnuWlbYglBLFMarEzrZbShCJCCKOA=
Subject key identifier: BB:27:E0:16:85:A5:0F:C5:54:BB:5B:1F:EE:9D:8C:70:2E:D5:28:C4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276419B66228DEF12C9BA4CAD8D46E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uyfgFoWlD8VUu1sf7p2McC7VKMQ.roa
Signing time: Thu 02 Jan 2025 17:54:17 +0000
ROA not before: Thu 02 Jan 2025 17:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201575
IP address blocks: 89.36.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:64:19:b6:62:28:de:f1:2c:9b:a4:ca:d8:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb27e01685a50fc554bb5b1fee9d8c702ed528c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:fe:a1:c9:8d:e0:f0:a8:b2:24:2b:16:53:
d9:fd:c7:55:98:22:a1:8a:cc:d8:07:3f:9d:de:27:
0f:f8:60:d1:e9:64:e0:37:16:96:d3:9c:fe:88:41:
46:85:75:1e:86:f9:bc:eb:35:d3:9e:1b:26:f3:9b:
e0:11:b6:5f:5a:56:97:48:0f:ee:27:14:6d:04:b2:
d5:28:74:f1:eb:d4:0c:e9:69:65:20:c5:a6:b8:ea:
9c:80:e6:fb:0f:bc:46:e9:1a:c8:d0:18:da:ba:7a:
89:e3:ef:06:1f:7e:88:18:66:27:e1:c0:ff:21:68:
6c:05:45:c0:06:57:81:f6:55:ad:26:d9:1e:99:8f:
b9:8b:71:ac:58:6e:bb:e5:eb:c7:84:08:82:d3:a0:
18:7c:56:d1:33:d4:66:30:a1:5f:0f:65:e5:47:d9:
bb:dd:0e:a6:60:cd:71:e5:54:cf:65:bf:e5:d5:8e:
ca:3e:21:8f:8c:78:2c:69:38:6f:5d:ac:16:8d:32:
9d:bc:c6:74:9b:ac:af:21:35:c8:9e:86:a0:8e:0d:
e2:5b:b3:ed:5a:34:c8:ec:a9:5c:50:3b:11:29:c5:
a9:32:63:80:68:1f:97:5f:dc:33:40:c5:7b:76:79:
99:62:f8:dc:92:2f:a5:00:4e:5b:69:81:da:9c:67:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:27:E0:16:85:A5:0F:C5:54:BB:5B:1F:EE:9D:8C:70:2E:D5:28:C4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uyfgFoWlD8VUu1sf7p2McC7VKMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.137.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bb:79:b7:8f:95:f8:aa:14:c9:1f:c6:87:69:93:8d:09:a9:
e1:10:5f:8a:e4:35:4f:95:63:9f:91:a6:f8:eb:4e:9a:44:bd:
6c:a4:54:12:eb:2b:66:e0:b4:3d:a9:ed:d5:31:94:72:22:5c:
5c:f0:d0:50:2b:13:5b:b2:37:f5:2c:c6:82:e7:29:2c:56:52:
bd:a3:70:6c:1b:10:94:f8:db:3f:15:69:b8:2f:12:d0:ee:4e:
25:ff:4e:a3:1f:a5:1a:fc:8f:f9:23:26:ac:4d:09:13:00:cd:
24:13:d3:66:05:9b:d0:1b:ce:27:1e:b2:0e:47:91:70:d7:b9:
b5:2d:f1:f4:5f:cf:7a:61:9e:5e:80:b0:de:84:4f:1f:12:e9:
91:06:30:85:9e:3d:96:50:7c:84:50:f6:0b:9b:8f:a4:e4:97:
ed:a9:02:05:8b:a2:c8:15:02:41:f6:a5:36:37:64:22:2e:a2:
17:04:e8:a4:cd:63:b0:f1:d0:51:e6:f6:4c:a8:16:fb:32:c7:
c6:53:e0:2d:a0:12:f5:6c:40:62:4c:ee:7c:fb:bf:eb:43:4d:
f6:8a:8a:a6:95:b5:cb:df:e6:07:73:5f:ed:19:bc:b4:e8:15:
0a:df:48:cf:bd:a5:87:7c:61:74:e8:dd:be:c7:22:03:d7:9a:
d9:0d:7a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:50:09 2025 by rpki-client