Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa
File: UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa (raw, json)
Hash identifier: WlUQqIFYI5VcIHzcu2H+hLq92ENL7s5Vno3Whj19yac=
Subject key identifier: 53:19:F0:41:4F:99:18:0B:A8:B5:DF:1B:C3:3E:E7:94:45:42:B0:A0
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 019423D6DDFC0731C535ADC5A675CA560DAB
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 212.39.33.0/24 maxlen: 24
212.39.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:dd:fc:07:31:c5:35:ad:c5:a6:75:ca:56:0d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5319f0414f99180ba8b5df1bc33ee7944542b0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:a4:e6:71:22:de:14:af:3c:31:fc:67:24:
98:8c:76:78:0b:5c:d0:99:83:ad:df:47:56:e7:7b:
4a:e5:27:49:74:3b:3b:dd:ba:05:66:16:2b:a2:32:
e9:21:b7:18:07:a3:14:fe:a9:ff:7d:31:25:e3:66:
a6:6f:9a:d7:9a:66:56:8c:11:13:c0:14:4d:42:7f:
c8:32:c0:d7:f4:ec:5c:20:de:ea:db:c9:70:9d:77:
97:3b:4b:67:e0:8f:2f:e5:37:26:0d:28:16:29:ce:
22:6c:f4:5b:55:6e:5d:a0:38:3b:06:c5:87:cd:ea:
7f:84:9e:92:76:2f:35:c4:d6:fb:61:17:08:6a:9d:
78:06:23:02:d2:9f:ef:ca:59:ef:96:0e:a2:ea:16:
c1:43:c8:53:a1:00:28:99:c4:2e:8d:dd:2e:d1:6e:
9a:f2:41:29:c7:8d:be:30:e7:ca:ec:30:eb:97:0c:
90:74:fb:8f:43:7a:bc:94:36:e7:03:6e:9c:37:7c:
8f:33:5d:cd:25:e2:22:77:09:ab:eb:53:c0:ad:73:
30:4a:d8:90:e4:51:83:9e:08:f8:4b:81:b8:e6:c3:
de:1d:25:c1:f1:7c:53:23:d3:ee:3f:71:f5:92:b3:
5a:b0:37:8b:a7:52:5f:e5:63:af:e1:e6:5f:38:e6:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:F0:41:4F:99:18:0B:A8:B5:DF:1B:C3:3E:E7:94:45:42:B0:A0
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.33.0/24
212.39.42.0/24
Signature Algorithm: sha256WithRSAEncryption
18:db:75:8a:6c:59:0f:b7:2f:be:f0:95:7d:3f:91:5f:32:d3:
1c:01:18:b0:1d:e1:df:d2:e5:6c:f4:5f:82:27:e3:68:18:3d:
a4:3e:b3:4e:90:f2:12:c3:ce:b1:67:89:f1:b6:04:51:02:c1:
e3:95:02:d7:7a:be:e7:bf:81:44:5e:42:77:e3:9d:2c:d9:b5:
69:45:2c:95:a3:7a:a2:1b:82:9e:b7:62:6c:fd:2f:24:ee:6f:
4b:3c:87:f8:0d:f1:d3:3f:ce:87:85:dd:85:c9:79:67:a7:8d:
e7:72:ef:5d:53:9b:32:b1:9d:27:71:21:69:eb:d8:9c:19:d0:
77:ad:56:eb:10:fa:13:74:6f:24:89:96:0c:ad:f5:65:e4:a3:
49:90:d4:49:3e:cf:79:58:00:11:ad:9d:01:67:0f:34:35:41:
64:80:0d:ba:84:05:41:08:9d:c7:1e:20:d8:93:5b:e9:0d:6d:
c2:10:24:a2:92:91:37:10:76:c5:b1:31:7b:f0:d0:a4:d8:e7:
75:f6:bf:8a:11:0f:16:54:7a:bf:26:78:a9:4b:6b:50:b3:fc:
ad:4e:75:ed:5c:f1:df:b5:2b:0f:3c:e9:68:91:66:6e:ba:46:
cc:f4:c1:89:51:4b:72:30:f0:aa:ea:f4:a7:3d:4a:a4:6e:ae:
f6:47:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:44 2025 by rpki-client