Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa
File: Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa (raw, json)
Hash identifier: s1GZLf7plSCgtr1IS112uCKjESCTLhOVLDfOPf7Q6wA=
Subject key identifier: 51:CE:B9:4A:5D:D9:1D:AF:AE:B0:46:C7:BF:8D:59:11:71:DD:67:BC
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825C7F3F7806F73463719D97051F2BB
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa
Signing time: Thu 02 Jan 2025 17:52:32 +0000
ROA not before: Thu 02 Jan 2025 17:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60413
IP address blocks: 80.79.249.6/32 maxlen: 32
80.79.249.7/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:c7:f3:f7:80:6f:73:46:37:19:d9:70:51:f2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51ceb94a5dd91dafaeb046c7bf8d591171dd67bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:4e:e4:58:07:c6:ff:c2:74:46:26:d3:70:
44:60:a5:ba:e5:c5:b0:c1:34:a4:78:e5:74:46:00:
6b:19:07:51:64:89:d5:9f:61:45:d4:4b:2a:d4:6f:
11:3a:1a:07:a2:bf:c8:25:a5:c3:e0:55:0f:11:42:
ee:05:38:ab:78:73:a5:4f:e9:bf:a9:29:8a:ac:1c:
76:05:b0:ba:e6:eb:b4:bc:6b:bf:85:5b:98:4a:d5:
e0:8e:7c:18:00:95:57:67:d1:79:e2:2a:4f:5c:43:
a5:91:02:46:75:62:2e:56:41:74:9a:28:c4:35:0d:
7b:15:db:59:10:ce:da:e4:d1:71:8f:49:ac:7a:39:
bb:06:78:c7:f8:9d:0c:4d:45:5d:fe:b3:5c:37:a0:
86:b4:cd:f9:b2:7f:77:93:af:f5:00:cf:a9:13:46:
0e:18:0f:f9:dc:35:e4:7d:d1:a6:5e:fd:32:44:7c:
08:e7:15:c9:7a:35:6c:98:14:f2:ad:58:a2:33:0d:
a2:69:2f:6f:68:47:d6:dc:d3:19:d9:f0:4e:41:d6:
d6:2b:44:d4:7f:47:0b:ed:16:7e:a5:1d:62:4d:51:
fb:f8:72:1f:ae:b2:2a:32:62:33:c7:17:30:37:18:
21:44:41:a8:d8:1b:4a:a8:85:e4:db:5a:cb:9e:23:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:B9:4A:5D:D9:1D:AF:AE:B0:46:C7:BF:8D:59:11:71:DD:67:BC
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.249.6/31
Signature Algorithm: sha256WithRSAEncryption
73:4a:c2:01:b1:ad:27:16:9d:43:61:3f:43:8a:d7:31:e7:75:
f9:c7:b5:9c:72:c4:c1:91:9c:f6:7a:c3:e6:43:9b:08:dc:50:
e7:64:d5:6e:96:e7:00:78:34:79:0a:85:cc:d6:97:a7:f2:3a:
10:f8:26:fb:07:32:94:f2:8d:1d:bb:2e:d6:c2:f3:e7:5c:36:
bc:69:f2:b6:17:a2:e4:33:ef:55:52:87:b2:c6:14:11:da:b5:
d2:6c:d4:61:f0:f4:de:26:80:7b:43:49:c6:ef:c4:0c:c0:f0:
68:99:f4:a3:67:d2:25:28:ab:9b:53:a6:ac:69:b8:47:9a:99:
28:ae:24:b4:35:51:be:b6:3d:d8:96:f0:d8:c0:a5:53:40:85:
7e:ab:94:b2:2e:8d:19:0f:ba:a9:f6:d9:0e:67:38:04:7b:b4:
b3:80:00:69:35:12:bd:ca:1c:d3:8c:cc:a1:af:d9:3d:38:1c:
b6:b0:a9:3e:2c:e6:11:8a:b5:f7:e9:dc:b3:3d:7a:f1:30:9b:
e4:a9:bf:44:f6:f7:97:42:d5:ff:cf:16:d6:0d:46:af:4a:96:
1a:78:37:20:90:de:10:95:2d:d9:3a:d2:0d:52:7c:6a:00:8e:
a4:d5:ca:2a:bb:b0:fb:81:ca:eb:6b:44:c5:d2:89:32:79:e9:
82:7b:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:35:51 2025 by rpki-client