Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa
File: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (raw, json)
Hash identifier: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=
Subject key identifier: B9:59:C4:AD:F9:7E:C7:06:E3:92:08:98:2C:FB:CA:46:2F:50:FC:A4
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F6C942A089B5D04FF10CD1685F4E2
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17650
IP address blocks: 57.68.248.0/21 maxlen: 24
57.100.0.0/21 maxlen: 24
57.100.64.0/21 maxlen: 24
57.100.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6c:94:2a:08:9b:5d:04:ff:10:cd:16:85:f4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b959c4adf97ec706e39208982cfbca462f50fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:69:50:fa:52:6c:83:89:96:d4:02:dc:bc:
0f:2a:15:ee:e9:04:e8:ef:f3:9b:24:a2:e3:a6:d6:
06:f4:2a:94:66:0b:f4:7d:85:99:5e:97:98:e0:0b:
6a:38:bc:e4:06:63:ef:0a:43:b7:7b:d5:2d:65:c4:
d6:69:2d:08:44:a5:a6:4a:da:74:6f:34:60:74:18:
da:cd:86:2b:12:3f:16:38:df:72:a0:78:22:aa:02:
99:1c:89:0f:6f:f7:00:74:e8:66:0e:5e:ac:9c:67:
ff:2b:10:7c:43:01:40:15:41:09:37:4f:75:e5:18:
34:77:db:da:10:9f:b0:1b:22:57:9f:a1:58:43:f8:
59:2c:90:f1:40:64:77:d7:ba:f2:4a:7c:e2:6e:4a:
30:90:b8:8b:6d:55:f4:0a:01:1e:19:52:c2:88:27:
1d:45:c8:01:01:d1:92:5f:2c:56:b7:86:b6:5d:4a:
95:d4:a3:79:e5:fe:4d:04:e8:a5:e4:a0:67:65:b5:
eb:b9:33:14:06:fd:07:a8:23:53:b7:14:5d:f4:62:
90:b4:eb:0a:2e:69:af:1c:a6:b3:c4:5f:fd:1a:b9:
95:53:c7:d3:d7:fd:2b:48:71:cc:10:ad:f5:33:a0:
06:a3:14:fc:3b:3b:22:01:99:8c:d9:d7:73:51:fc:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:59:C4:AD:F9:7E:C7:06:E3:92:08:98:2C:FB:CA:46:2F:50:FC:A4
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.68.248.0/21
57.100.0.0/21
57.100.64.0/21
57.100.96.0/21
Signature Algorithm: sha256WithRSAEncryption
56:5b:7b:db:16:ca:74:f2:f6:1d:46:08:9e:52:58:c0:fa:0d:
5b:d5:1e:c1:6a:a5:df:47:53:6d:15:d2:0b:b0:20:14:7c:82:
bb:ab:3f:0a:b9:03:5b:ff:0d:99:08:3e:2d:a4:4f:3d:ec:18:
8f:e9:52:d6:aa:1c:82:99:93:fe:24:db:6c:8c:a4:c6:2c:38:
f5:9b:fe:f3:a6:c6:d2:88:c6:4e:78:ae:f9:f2:ed:ed:33:58:
26:7a:7a:fd:27:5e:54:55:f6:04:74:ee:28:b4:fc:50:f0:d1:
81:94:9b:ea:b1:30:d9:70:17:ed:b9:d6:e4:4d:bc:f6:8f:05:
df:39:ce:b7:de:9a:f6:b6:c2:e3:4f:07:4d:ef:cd:19:ed:d9:
5e:3f:2a:ef:29:da:dc:b2:18:ee:a4:89:25:9a:df:62:23:3e:
77:1a:6e:ae:f4:e1:b5:07:e4:55:98:f9:d4:95:7d:64:e6:eb:
e8:0a:b2:ae:c6:3b:53:5b:f2:eb:56:fa:e3:08:ba:1c:74:1f:
8f:00:a7:cf:84:7e:ef:48:40:30:d8:3f:6b:73:e6:f0:0a:68:
d7:2f:6e:77:7a:f0:6e:4e:96:9a:71:36:9f:63:53:aa:7f:75:
4a:cd:13:1b:a0:84:1d:5a:d8:93:1f:f4:0b:78:43:6c:6e:50:
93:21:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:17:05 2025 by rpki-client