Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/Uug84sytKC8kkK1Rr2IkRJKpHOE.roa
File: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (raw, json)
Hash identifier: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=
Subject key identifier: 52:E8:3C:E2:CC:AD:28:2F:24:90:AD:51:AF:62:24:44:92:A9:1C:E1
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 019427B5B3D2D937075DA30D195588B3F165
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/Uug84sytKC8kkK1Rr2IkRJKpHOE.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 91.232.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b3:d2:d9:37:07:5d:a3:0d:19:55:88:b3:f1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52e83ce2ccad282f2490ad51af62244492a91ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:83:fa:54:2c:52:9d:2e:5d:44:ef:71:2a:
27:da:3b:61:8a:11:5e:b6:1f:d5:7f:94:c4:54:b8:
d9:0d:fa:f9:a5:3f:82:ff:bb:ab:c1:f8:de:fa:d4:
c1:b1:21:2b:8b:c4:4f:81:b5:c2:bd:67:2e:d3:d2:
9b:e1:da:2d:35:04:5f:b9:67:66:df:4d:98:26:f8:
2d:89:6b:06:8f:96:0d:50:a9:44:36:e9:c2:5e:0e:
01:77:42:83:fc:9a:64:c6:e4:b1:0b:cb:05:1e:48:
e7:f4:66:eb:15:47:82:0d:ce:e8:00:af:08:23:7e:
aa:86:36:b9:f1:bb:9c:ef:ca:9c:dd:fa:ff:d2:9c:
d9:f6:23:16:97:fe:19:5f:74:72:07:61:43:f2:29:
cf:f0:7d:74:39:8a:80:54:3b:0e:8d:12:f2:87:38:
a2:db:7d:bb:63:72:9f:91:2c:5e:9f:f4:87:0e:e4:
e3:2e:75:fe:20:48:8e:57:72:a1:98:8f:f7:b5:6c:
ec:46:73:c0:c8:74:64:0c:b2:ac:c0:58:ea:50:b3:
a9:65:87:d8:04:46:7e:28:e4:86:8e:6f:72:51:cf:
d8:5d:f9:e2:a9:6f:cd:7a:41:ea:e0:61:c8:66:6e:
05:4e:a0:93:5e:ae:15:d0:1d:84:08:8a:99:12:83:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E8:3C:E2:CC:AD:28:2F:24:90:AD:51:AF:62:24:44:92:A9:1C:E1
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/Uug84sytKC8kkK1Rr2IkRJKpHOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.83.0/24
Signature Algorithm: sha256WithRSAEncryption
43:86:d6:c9:fc:5b:4d:27:21:1c:5a:82:68:92:f7:61:3c:3d:
01:9f:13:4d:dc:ae:b2:d4:5e:d3:07:3e:84:ea:ae:42:6d:bc:
bf:52:2a:29:de:6e:90:03:b0:5b:31:e7:0e:00:a7:d8:02:37:
cc:81:3f:f0:3e:a2:32:e6:fb:8f:1e:6a:bb:4d:3b:d4:1b:e6:
6b:15:5d:b5:cc:28:bc:63:4d:98:7f:3d:72:4e:c8:1d:85:a9:
0f:d3:4d:4f:4a:1c:3e:17:4e:fc:59:b8:2a:ea:75:b4:ae:22:
52:d6:41:e5:81:4d:17:1f:f8:a1:f2:88:3c:56:12:c2:f6:ce:
b7:8d:80:e1:2b:a3:ba:39:4b:3f:3e:b3:bf:89:d8:d6:47:4f:
e5:7c:ac:51:f0:f0:c5:cc:b8:24:b2:7f:ed:99:62:4a:48:7d:
e2:06:24:6e:d7:08:aa:4d:c9:7b:43:ed:e3:a4:f8:a5:ee:f8:
42:27:ee:e5:66:20:df:32:fc:bc:77:b0:53:5a:19:9f:4d:3a:
ee:c2:26:1c:74:ac:fe:3e:15:6b:cf:3c:ab:fa:07:e7:e6:7e:
a2:f1:b1:f7:a1:56:7b:b8:97:1b:6d:05:a8:f2:81:ab:35:0d:
9b:d6:d0:4e:48:45:89:65:c4:fe:78:ae:df:87:0a:4a:c1:31:
c2:b3:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:24:32 2025 by rpki-client