Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/t5-UWdTdiMSI20SfoWThGHmUmkI.roa
File: t5-UWdTdiMSI20SfoWThGHmUmkI.roa (raw, json)
Hash identifier: u89CpCdmqr7rKA71HZJcUjE6g736IrSgJ+2hOF705ak=
Subject key identifier: B7:9F:94:59:D4:DD:88:C4:88:DB:44:9F:A1:64:E1:18:79:94:9A:42
Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial: 0194214408B9AC5BCC5871C6D287B043B4AB
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/t5-UWdTdiMSI20SfoWThGHmUmkI.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203036
IP address blocks: 91.194.104.0/23 maxlen: 23
91.194.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:08:b9:ac:5b:cc:58:71:c6:d2:87:b0:43:b4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b79f9459d4dd88c488db449fa164e11879949a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:a9:72:f9:bb:ba:88:c4:a1:bd:c5:6b:5b:
79:16:e5:90:a6:2d:09:6b:f1:ce:6e:0f:d2:83:2f:
f8:ce:84:81:13:f8:5a:71:d9:82:78:d4:a2:ad:e2:
2a:31:ea:ff:bd:09:5f:0d:f2:61:9e:fa:26:f8:1f:
61:e6:64:b7:b9:15:43:57:a1:0d:52:7e:51:ba:bb:
ed:be:a4:41:38:2c:55:55:e4:55:ec:54:cd:a0:51:
a5:a0:b1:f8:34:ff:f3:06:18:80:36:58:c9:16:72:
a4:c4:61:89:46:da:2d:b5:04:19:fb:ee:f9:ac:ef:
98:0d:a5:6a:a8:64:58:df:75:67:a0:10:5f:96:4b:
3b:81:66:99:ee:bf:a5:64:c8:a6:a4:43:25:9d:6c:
86:9c:70:08:4b:f7:5e:7b:1c:af:f6:b3:31:39:fc:
21:3f:f7:94:51:15:4f:ab:24:09:a2:5b:99:e3:3e:
32:e1:a8:6b:d9:a3:71:6b:17:e4:92:7a:ae:34:ea:
e9:09:0a:8c:40:ef:c9:ab:bf:4b:88:f3:2c:95:e6:
99:1b:e6:38:ec:83:8b:c7:55:33:1d:ed:c0:2e:d9:
d2:cd:ca:a1:7a:7b:44:43:d7:f4:e8:68:20:26:55:
37:bf:f9:9c:0d:5e:d0:e8:ec:a9:88:84:81:2b:62:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:94:59:D4:DD:88:C4:88:DB:44:9F:A1:64:E1:18:79:94:9A:42
X509v3 Authority Key Identifier:
keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/t5-UWdTdiMSI20SfoWThGHmUmkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.104.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:a0:1e:e0:7d:cf:99:7d:80:a9:99:47:b5:7d:3c:70:f1:4a:
0a:30:0e:51:f1:2e:ac:0c:3a:d8:33:44:69:3b:cd:b6:d6:9a:
32:cb:5a:d5:cc:d2:b3:9d:fa:ca:f9:7d:61:a8:72:e7:6e:36:
f7:c9:18:d8:74:ce:41:8f:5e:ea:aa:2b:30:eb:36:95:42:87:
59:e1:a3:84:37:27:33:d9:e5:80:e1:96:51:55:75:b9:f3:f3:
42:79:1d:a4:c5:f9:03:1c:68:5a:5c:d4:ea:c8:e5:22:9c:17:
70:94:17:37:90:63:6e:97:29:41:d7:31:a4:ec:78:68:6e:b1:
76:c1:a8:87:da:b7:25:01:33:fa:e2:a0:de:aa:70:b9:5e:d9:
aa:cb:0d:90:98:63:1e:57:25:8a:13:a4:b6:e4:18:f7:e0:cc:
38:60:15:8b:44:e7:26:17:82:09:91:d2:99:d1:c4:d4:31:cc:
1d:f8:8c:20:f6:39:38:b8:f9:62:67:4d:c9:13:4f:d9:c0:fe:
dc:b7:0c:ad:8e:78:31:c2:92:1f:dc:b5:58:16:f8:9a:53:84:
a8:9b:40:b5:09:60:9b:54:85:71:af:d7:30:64:7e:6c:f3:79:
b1:80:da:06:17:4f:f0:d5:4f:70:3b:ae:61:c7:b3:fe:2b:1b:
39:c8:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:19 2025 by rpki-client