Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UJBeVJRkGD42lBFz0gve2BhFTN8.roa
File: UJBeVJRkGD42lBFz0gve2BhFTN8.roa (raw, json)
Hash identifier: 6q5ySKAhxBwTWO/VjF8TadBqF+zmdt8HYmYvZ6xlcYw=
Subject key identifier: 50:90:5E:54:94:64:18:3E:36:94:11:73:D2:0B:DE:D8:18:45:4C:DF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0197211183922E145FB4E7267B6BC8B44036
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UJBeVJRkGD42lBFz0gve2BhFTN8.roa
Signing time: Fri 30 May 2025 12:01:25 +0000
ROA not before: Fri 30 May 2025 12:01:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 178.173.232.0/22 maxlen: 22
188.209.156.0/22 maxlen: 22
193.36.73.0/24 maxlen: 24
212.90.100.0/22 maxlen: 22
213.173.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:11:83:92:2e:14:5f:b4:e7:26:7b:6b:c8:b4:40:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 30 12:01:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50905e549464183e36941173d20bded818454cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:58:ad:dc:50:f2:34:80:c8:42:0e:04:11:
92:fc:2a:f4:18:58:fc:fb:14:00:51:08:dd:63:ce:
cb:d9:78:95:bc:0e:7e:63:96:46:68:47:1c:e4:b4:
2a:f6:83:d5:b3:5b:98:50:5e:6b:6d:e1:fc:7a:e9:
d2:60:9d:c4:c8:71:e4:26:65:a3:6c:1a:1c:07:43:
fc:53:84:b7:a9:e1:67:de:6a:ad:92:5c:51:5c:b9:
c9:eb:52:b1:38:a9:4b:a0:6b:f2:97:5e:3c:2a:68:
9a:bf:ce:e8:21:01:ab:b6:74:d2:ea:a3:9f:b7:5a:
21:0f:8f:25:00:b6:98:87:3c:d1:7a:2c:27:df:7e:
74:bd:bf:5b:5e:68:84:d4:56:7d:46:57:c2:14:04:
fd:d9:b9:66:43:e0:94:ac:12:c6:06:68:e9:03:9c:
48:62:fe:08:fd:83:29:32:6d:c8:06:30:a0:43:cb:
1a:fa:6c:94:8a:e3:ca:2f:c9:63:69:10:3c:84:51:
41:02:b6:92:38:d7:4f:eb:f6:8e:fa:ed:85:0a:e0:
95:f4:49:a2:1b:4c:74:7d:0d:a9:fb:13:8a:51:3d:
97:b1:e0:c5:8e:81:04:65:52:ec:51:03:e7:de:8a:
da:10:5d:e5:8c:a5:c9:3c:4a:d0:24:0c:27:f3:10:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:5E:54:94:64:18:3E:36:94:11:73:D2:0B:DE:D8:18:45:4C:DF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UJBeVJRkGD42lBFz0gve2BhFTN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.232.0/22
188.209.156.0/22
193.36.73.0/24
212.90.100.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
92:66:8b:a4:a2:f8:b0:d2:90:71:f5:da:25:fd:eb:c7:ff:e6:
fe:52:d1:04:ff:06:10:a8:90:c6:40:86:b4:db:da:07:c0:ef:
5c:ce:e7:33:1c:c6:3e:ff:85:30:d3:c4:cb:7c:e7:e8:9d:65:
15:f3:d4:86:c5:44:60:eb:21:fa:c4:d4:fd:47:c1:88:9e:7d:
46:71:e0:4f:61:e5:6e:af:fe:38:7f:44:8c:20:fa:50:f2:42:
5b:d6:69:bc:21:09:0f:55:d2:4c:ad:bf:0a:93:bb:4a:7a:f0:
f5:46:cf:31:67:9e:68:4a:6c:c1:92:6f:ea:df:a8:39:83:dc:
64:61:61:d3:cb:58:0d:43:42:33:a9:29:c9:a7:07:43:75:26:
d4:0d:af:65:8f:04:f0:72:3f:ec:b1:68:8f:6f:4f:c3:3a:4d:
88:d2:d4:01:85:9a:2d:c0:a7:25:e3:80:74:d0:30:a1:6b:b3:
0c:44:1f:f5:f9:71:2a:d4:78:8d:d1:51:06:88:5e:30:d9:55:
f7:10:dc:29:5f:e0:80:38:61:f9:70:6c:9f:ab:75:42:9d:dd:
8a:00:a4:81:8d:b8:42:3a:de:4c:8f:34:db:98:4a:69:51:37:
69:83:d6:0f:b3:4d:98:a3:80:06:d5:1e:5d:45:13:a1:68:d7:
ef:a7:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:17:44 2025 by rpki-client