Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/uxc5vfve3Si08_1CchI8ifdgJPY.roa
File: uxc5vfve3Si08_1CchI8ifdgJPY.roa (raw, json)
Hash identifier: /SI48xsbMIADKemEHZ6Oy1FfH6dit3gQxDwLPx1S1UQ=
Subject key identifier: BB:17:39:BD:FB:DE:DD:28:B4:F3:FD:42:72:12:3C:89:F7:60:24:F6
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0196BA66546515395EAA1364D3FF39713EE2
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/uxc5vfve3Si08_1CchI8ifdgJPY.roa
Signing time: Sat 10 May 2025 13:33:10 +0000
ROA not before: Sat 10 May 2025 13:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 109.122.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:66:54:65:15:39:5e:aa:13:64:d3:ff:39:71:3e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 10 13:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb1739bdfbdedd28b4f3fd4272123c89f76024f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:d8:1b:a8:ff:54:9e:3b:2c:f8:17:28:a7:
04:2f:63:83:f8:65:df:b5:89:2b:1c:80:ce:7e:ca:
54:04:d6:ea:43:6a:0a:e9:67:a3:ac:03:f1:37:11:
b7:77:2d:78:a5:fb:cd:a2:ab:19:ae:a1:70:6b:c9:
e6:37:5a:3a:cc:90:b1:96:cc:af:51:85:b2:fa:90:
87:5e:67:03:f6:de:30:8d:22:fd:30:cc:51:b2:62:
05:12:9e:04:ce:db:14:df:a6:c0:a3:58:c5:03:65:
77:6b:0d:d7:18:bf:81:6b:d4:ec:bc:44:0b:71:c4:
d9:96:5c:0f:65:df:84:ef:a2:5c:4e:09:1d:6e:5c:
75:5b:9d:ae:03:16:f6:ad:e9:44:2d:07:9f:59:5d:
8d:38:be:32:cb:ad:ed:fb:d4:1a:14:01:84:9b:35:
2a:e4:5c:7c:c2:85:97:a7:05:d0:2c:00:13:63:d1:
98:f8:f8:fc:04:8d:da:2f:11:ca:24:d6:72:65:26:
34:ef:93:f7:39:12:97:60:c6:85:ce:9a:10:24:38:
69:5a:80:72:83:4c:d1:77:b6:14:16:20:ab:28:76:
2a:83:a3:2a:e7:c0:30:ed:01:65:88:33:d0:98:dd:
8b:2c:24:67:4b:79:a4:2a:da:87:1a:62:d3:f9:6c:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:39:BD:FB:DE:DD:28:B4:F3:FD:42:72:12:3C:89:F7:60:24:F6
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/uxc5vfve3Si08_1CchI8ifdgJPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:70:8b:bf:ac:50:42:3e:a5:ea:f5:6c:ec:75:28:7a:60:0c:
ea:67:74:e9:26:f0:2d:1f:a0:42:3e:4a:7e:0e:04:c8:be:6f:
73:b1:7e:c5:56:c6:a7:c6:c4:26:08:cd:f5:41:ba:3e:95:bb:
08:45:a7:fe:83:09:10:b8:88:5e:02:49:ea:16:d3:81:f2:e4:
63:59:45:70:bc:d7:c5:5c:8c:dd:89:07:f0:e9:ec:d2:1d:bd:
94:51:f5:a6:17:2b:88:78:b5:ae:fb:50:2e:a3:ad:24:cf:f9:
c8:14:4f:08:93:fa:b2:fa:9b:f4:03:3e:7d:20:82:11:91:ea:
bf:bc:2a:3f:9d:fe:ee:49:75:fd:83:fb:c9:17:88:53:46:0d:
02:7d:66:75:c8:a9:b1:db:8b:07:8f:5f:c0:81:0f:22:6a:81:
65:e5:50:6d:2c:c4:b8:d0:89:2f:0a:5d:e7:98:e4:22:01:db:
66:c3:e5:a9:ad:77:11:49:a5:0e:e9:50:54:9b:29:f4:93:b9:
6f:96:df:f5:d9:40:b0:d6:57:04:84:31:8c:d3:a7:35:b8:c9:
c9:9b:6b:89:98:e3:46:d4:af:e0:e6:a7:c9:57:20:b8:90:72:
75:35:64:17:b1:9a:2b:9c:d9:3d:2e:fb:cc:3e:ae:63:02:48:
32:66:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:29:17 2025 by rpki-client