Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa
File: UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa (raw, json)
Hash identifier: p032VP0xM7qM67uVYdhb1lo+Lr6r8lZKSQd50sPMvZQ=
Subject key identifier: 53:23:13:27:CB:DF:69:93:19:DC:AE:71:70:87:CA:89:19:3F:E6:82
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0195F116FBC77501EBD4FD35967A4B003D64
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa
Signing time: Tue 01 Apr 2025 11:22:49 +0000
ROA not before: Tue 01 Apr 2025 11:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 213.192.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:16:fb:c7:75:01:eb:d4:fd:35:96:7a:4b:00:3d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Apr 1 11:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53231327cbdf699319dcae717087ca89193fe682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:4b:9f:74:33:20:e7:0e:f7:ce:cd:11:a3:
34:af:3f:c9:35:c1:ae:ac:c9:36:62:ac:1b:74:af:
5e:e4:00:a3:8b:f8:ab:6a:60:51:b5:06:da:db:5e:
c0:fb:37:c5:fb:67:3b:bd:61:5c:1b:67:98:96:ec:
4e:c8:0a:88:c2:ea:fa:0f:21:6a:e0:a6:f2:47:26:
1e:ed:d2:eb:be:f6:4d:0d:42:f7:a8:5f:95:65:b9:
b5:74:3e:2d:38:94:f2:85:f8:94:ea:29:4c:28:57:
7c:71:1f:f9:a1:bf:67:9d:69:4e:8a:56:c1:cd:2d:
d1:c4:4f:5d:70:6c:ee:92:06:59:6d:77:01:7f:16:
2b:3a:b6:66:95:7e:c3:96:50:c5:c3:76:b8:f8:50:
c2:c1:33:5a:95:30:f3:30:aa:61:4e:4b:e1:81:d4:
0d:bc:f4:c9:0f:0a:a0:bb:19:11:eb:65:cb:13:cf:
07:22:c3:60:1b:73:d9:26:82:fa:58:c9:83:27:26:
2e:c1:31:36:7a:e1:ac:74:4e:28:b8:88:10:ae:59:
31:1a:89:87:30:74:8e:8d:e0:7e:74:bc:9e:39:76:
e3:7d:fb:25:5e:d5:3c:d3:41:b1:8a:b6:25:78:b8:
4d:fb:43:8b:c4:9d:cf:18:3d:91:1b:05:c4:48:6b:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:13:27:CB:DF:69:93:19:DC:AE:71:70:87:CA:89:19:3F:E6:82
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:70:55:21:b2:a9:8b:4e:c3:00:2c:17:67:6f:ed:8a:4d:9a:
71:e6:91:34:29:5b:6c:4e:79:51:6f:bf:c3:86:13:9d:cb:77:
73:d1:d2:fa:ef:74:95:83:e2:13:1a:89:64:56:11:ce:c0:c6:
4c:49:1b:11:6e:6f:4d:c2:27:3a:76:9a:b5:e1:b6:de:f2:14:
4f:78:79:41:a2:76:4b:8d:c2:ff:98:c1:b1:02:00:be:12:c6:
cb:7a:9c:b4:13:58:71:27:a8:32:57:10:67:2d:2a:d1:a7:83:
5f:04:40:ef:1b:73:76:c9:f5:c2:77:b9:83:f2:ae:1f:6e:ae:
92:25:36:d2:20:b8:40:d6:f4:e6:47:e3:ce:42:93:2a:ff:d1:
22:0f:84:b7:e6:a4:d5:66:4d:73:e7:ca:36:23:03:af:f0:67:
77:11:15:0c:68:b6:0d:d0:29:44:be:a5:fc:e5:f5:bf:07:9e:
4e:21:d3:bb:e5:c0:60:ac:e3:04:13:78:b4:4b:c8:80:80:c2:
42:34:7e:86:e6:6a:06:04:31:15:d1:ba:d6:21:63:af:de:97:
80:32:90:c2:ad:7a:3d:0d:80:93:61:cb:d5:84:c2:b7:b5:ed:
5c:8d:85:ed:3d:15:a6:38:bd:3b:1a:68:54:c4:06:18:dc:e5:
98:72:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:58:27 2025 by rpki-client