Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Ufuhf0_wn9lleED4LQKhcdXKZLY.roa
File: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (raw, json)
Hash identifier: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=
Subject key identifier: 51:FB:A1:7F:4F:F0:9F:D9:65:78:40:F8:2D:02:A1:71:D5:CA:64:B6
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019427B53357FA08CF3CE982B02A2F804BC1
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Ufuhf0_wn9lleED4LQKhcdXKZLY.roa
Signing time: Thu 02 Jan 2025 15:49:34 +0000
ROA not before: Thu 02 Jan 2025 15:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33875
IP address blocks: 89.35.218.0/24 maxlen: 24
89.35.219.0/24 maxlen: 24
89.35.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:33:57:fa:08:cf:3c:e9:82:b0:2a:2f:80:4b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51fba17f4ff09fd9657840f82d02a171d5ca64b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:8e:88:ae:60:2c:49:39:3f:2c:77:21:a0:
8e:12:72:8b:e9:bf:2c:cc:eb:6a:33:98:0d:7c:d8:
4d:43:74:1a:fe:11:7f:12:aa:08:a3:8b:94:85:08:
49:7d:b3:c2:fd:ac:c6:05:2e:27:07:e1:88:d5:6e:
c7:15:d1:ea:a6:d6:40:59:50:7d:4d:f7:e3:f8:af:
a7:ca:a2:f5:a0:1f:43:89:50:1a:c7:03:0a:95:3a:
3d:72:fb:e6:97:77:28:24:1f:7f:f8:f5:4a:ee:89:
28:2b:f9:fa:b9:6e:17:7c:d1:a2:2a:45:39:d3:5d:
88:4c:ee:1c:00:a0:89:8b:b6:51:5e:ef:5a:0e:80:
f2:28:30:e8:5c:f7:89:d3:32:c8:66:81:46:ed:7d:
e9:8a:58:ef:a9:d8:62:b2:53:ad:53:0d:07:58:13:
f1:32:7f:a8:48:27:8e:1a:c3:92:39:69:52:25:d9:
17:23:71:d5:9d:f2:e2:68:9e:95:47:8a:d1:e3:5c:
56:16:69:b3:22:fb:00:5d:34:98:b6:62:67:8f:64:
d7:12:8b:ce:95:0f:7b:4b:83:e2:b0:d9:14:62:f7:
5c:79:47:61:70:78:36:a9:f4:e5:80:fb:24:89:cd:
60:ec:37:24:85:ba:ec:60:05:05:fe:a1:39:12:00:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:A1:7F:4F:F0:9F:D9:65:78:40:F8:2D:02:A1:71:D5:CA:64:B6
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Ufuhf0_wn9lleED4LQKhcdXKZLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.218.0-89.35.220.255
Signature Algorithm: sha256WithRSAEncryption
34:da:bf:fc:c7:43:41:ff:c4:36:27:b5:a3:30:4e:99:c8:1b:
f6:cc:d4:bd:41:93:1f:75:9e:e6:6a:4f:c5:59:fc:df:71:57:
3d:7e:16:75:c7:43:7c:d3:a8:51:f4:60:8b:3e:b3:cd:95:b5:
65:cd:19:e5:cd:b7:37:83:a6:5a:7c:e6:c8:32:11:8c:be:6f:
fd:0f:db:f2:a1:2c:11:86:0a:22:b5:48:ec:0a:b9:dd:55:58:
04:5a:7f:bd:43:91:73:57:98:ad:41:e4:a3:da:7a:d3:0d:e8:
20:4a:ef:7c:14:d4:6b:bf:f4:ad:1a:95:0c:61:3a:84:03:cb:
ec:5c:91:79:6a:e3:9c:4a:02:95:9d:f1:41:8c:70:ff:99:8d:
f6:bd:a7:56:f3:8d:cb:d3:19:10:9e:4a:0d:b8:b3:d6:d4:3d:
0e:75:d0:e3:57:db:0d:85:20:17:4a:c1:2b:23:5e:61:ce:b5:
85:af:d9:05:23:d2:0b:64:7a:07:99:22:8f:8b:82:44:ef:30:
58:a9:57:ca:8c:49:dc:34:68:33:9c:f9:d8:f3:3d:aa:02:65:
bd:5e:2e:b1:b9:1d:f2:3a:df:9f:71:0f:34:40:8b:6f:e7:53:
65:48:ea:f0:1b:7b:4b:cd:41:39:b0:9b:52:ac:95:36:34:86:
36:4d:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:07:51 2025 by rpki-client