Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/UwlL4l1LRiE3vykISfbzsy5TSkQ.roa
File: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (raw, json)
Hash identifier: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=
Subject key identifier: 53:09:4B:E2:5D:4B:46:21:37:BF:29:08:49:F6:F3:B3:2E:53:4A:44
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 019426D94C983BB15CA8A11C0FFB051C205F
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/UwlL4l1LRiE3vykISfbzsy5TSkQ.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41698
IP address blocks: 95.128.208.0/21 maxlen: 21
193.227.124.0/24 maxlen: 24
194.62.220.0/24 maxlen: 24
2a02:608::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4c:98:3b:b1:5c:a8:a1:1c:0f:fb:05:1c:20:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53094be25d4b462137bf290849f6f3b32e534a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:8e:a4:2b:86:a8:36:9c:b0:7b:35:44:48:
84:d1:f0:be:f4:02:b8:8d:03:25:61:ab:4a:eb:07:
0f:81:72:2b:dc:5f:ab:53:46:b4:88:5b:a6:36:b6:
64:cf:e7:5c:15:ad:2b:0b:8a:4e:ea:2d:fe:65:d8:
88:68:5b:1c:c5:fd:e3:f2:cc:e6:4c:a2:2c:f4:b4:
da:ac:8a:2d:d5:4e:76:81:e8:bd:13:50:6e:cd:15:
b1:8a:69:5b:08:5f:a9:15:b5:6c:c9:ba:0b:c5:c3:
31:0b:c7:90:7e:40:1e:4d:e8:45:86:a1:ca:3a:46:
fb:3f:4c:31:4e:11:be:f8:0b:be:b1:3d:09:cc:13:
b8:ec:c3:12:d8:20:48:b3:01:e7:41:d1:c8:c5:26:
85:1d:ce:3d:7e:7b:ca:1d:0c:72:95:f8:e2:a3:6f:
89:37:96:fd:a9:8f:48:f3:29:62:17:4f:07:67:4b:
90:23:3d:02:27:24:38:a8:41:13:24:ca:c3:47:de:
67:44:45:e6:94:0d:1d:74:d8:71:72:96:fb:65:4a:
a7:64:64:73:11:5c:cd:9f:3c:70:27:b3:77:fa:34:
6f:b7:43:24:81:8b:d8:59:12:48:e1:95:71:c4:aa:
1d:f4:01:81:60:4a:8e:18:ec:ba:32:24:03:98:3d:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:09:4B:E2:5D:4B:46:21:37:BF:29:08:49:F6:F3:B3:2E:53:4A:44
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/UwlL4l1LRiE3vykISfbzsy5TSkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.208.0/21
193.227.124.0/24
194.62.220.0/24
IPv6:
2a02:608::/32
Signature Algorithm: sha256WithRSAEncryption
73:b0:ca:72:af:d3:65:cd:1b:fa:e2:4b:77:5f:2b:c6:a7:69:
3b:53:a4:bb:65:60:79:95:84:75:31:09:d9:90:a7:b1:ba:79:
1e:bc:86:df:ed:22:af:25:fb:fd:fc:fe:39:d4:57:d5:dc:b0:
d4:a5:3a:ec:56:e8:21:2d:ff:38:7f:8e:9b:32:e9:7e:ca:6c:
a3:89:8c:c1:b1:11:10:22:b8:5a:2e:8f:f8:c9:c4:0e:b5:39:
ee:a1:74:4d:ee:b0:b1:d7:1d:5b:88:d3:34:a7:78:dc:a0:0b:
e4:1f:f5:68:31:c2:1c:be:e6:01:29:a7:fa:82:b2:6c:d1:7b:
93:55:fd:52:8e:2e:01:28:9a:92:4c:1e:57:10:ac:71:f1:db:
7c:73:9a:b6:31:94:64:f5:4a:06:22:01:bf:d7:95:35:bc:ac:
7f:81:97:f7:c3:1e:89:c3:0c:63:5b:a4:f7:84:4f:85:7d:80:
48:f2:c2:ae:de:77:01:e4:0e:a9:97:cb:4f:49:04:e6:8d:97:
8d:13:dd:85:8e:62:3a:cc:61:cc:b6:c0:c1:f1:2a:99:db:ab:
32:9b:49:54:02:f2:91:e2:cf:60:3a:f6:2d:37:68:1a:30:e5:
26:03:c0:6d:eb:8e:97:02:77:29:20:b0:ba:ee:a0:f1:36:92:
2f:2c:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:57 2025 by rpki-client