Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rpUidfPLaFOcta7e_Cd7vj4f2yI.roa
File: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (raw, json)
Hash identifier: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=
Subject key identifier: AE:95:22:75:F3:CB:68:53:9C:B5:AE:DE:FC:27:7B:BE:3E:1F:DB:22
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019426D9F2E5B9F64B022694BE1DE705F814
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rpUidfPLaFOcta7e_Cd7vj4f2yI.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 93.89.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f2:e5:b9:f6:4b:02:26:94:be:1d:e7:05:f8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae952275f3cb68539cb5aedefc277bbe3e1fdb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:9f:07:05:d8:82:3a:b1:0e:1b:3b:99:e6:
f4:d9:d4:49:c7:f9:8f:fe:e9:ab:39:1c:99:65:07:
13:52:ac:a3:0e:f0:04:1b:01:da:0c:6a:45:6e:25:
f3:d4:a4:c0:0d:8a:07:f3:4f:8a:fb:ee:c8:83:b1:
a0:78:d1:a8:ca:b2:02:dc:b4:52:94:ac:5d:16:8d:
ed:af:7d:f2:e4:cb:67:be:8a:a4:c1:6b:0a:3b:c1:
f6:a6:75:1d:c1:7b:36:de:68:43:1b:81:61:0a:ba:
48:3a:05:cd:30:44:a6:06:1d:fb:2f:ff:03:2c:99:
02:76:8d:c7:a7:9d:1e:79:8b:1f:3f:fa:d1:25:60:
b3:95:35:54:22:26:2a:fd:87:bb:3b:d8:15:98:e8:
25:d2:35:c8:f1:2e:32:28:96:c9:50:88:c2:30:9d:
ac:2c:af:d5:c3:c4:2f:65:38:b4:b9:db:37:67:e1:
49:bc:f3:71:4b:3a:f9:3a:b2:7f:94:07:3f:ca:57:
f9:1e:3c:30:aa:b8:c9:70:88:52:80:ea:0f:a3:14:
51:a4:5e:f8:ac:90:96:b9:8d:31:af:59:51:14:32:
f7:2f:97:4b:32:5a:70:dc:2e:bf:4d:13:43:06:78:
b7:e2:20:ec:30:5f:dc:65:83:9c:af:c1:34:8a:ce:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:22:75:F3:CB:68:53:9C:B5:AE:DE:FC:27:7B:BE:3E:1F:DB:22
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rpUidfPLaFOcta7e_Cd7vj4f2yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.220.0/24
Signature Algorithm: sha256WithRSAEncryption
63:de:2f:97:cc:e1:33:76:31:2b:f9:49:2f:6b:56:0d:d3:3c:
b5:8c:6f:b5:8a:22:65:14:56:b3:6e:12:0a:34:fb:9e:0c:9a:
56:cb:dd:24:bd:24:d5:94:70:26:2e:d5:67:88:fc:fc:cb:cb:
8d:e3:d6:0b:f0:eb:67:bf:0e:c3:a9:dc:a3:29:e7:62:98:87:
6b:98:1f:46:e6:ea:31:86:84:0c:2d:e8:8d:39:c9:d3:0e:f9:
87:8e:e0:63:6c:c5:0c:cb:26:f4:c7:a8:11:5e:66:54:2e:78:
0e:db:81:7a:d2:32:68:5b:43:d8:81:e5:79:cc:8b:62:99:8a:
35:26:d7:70:f3:79:fb:fa:f6:68:9f:69:76:51:32:b1:af:38:
cd:23:ba:a3:29:45:2b:c8:e2:f0:85:1b:70:c7:37:10:87:da:
8e:bd:19:ee:fa:63:8f:36:74:a2:c3:ec:22:25:e1:2b:00:8c:
1a:46:d8:90:0c:d4:5c:a1:38:ba:1d:87:39:79:78:6c:15:a9:
0a:3f:7a:71:f1:6b:5d:08:4c:76:be:61:84:f9:01:37:c7:d8:
a5:e5:7b:60:d7:19:78:b6:09:7b:f2:51:ed:92:bf:67:84:32:
de:c8:8f:ad:0d:80:f9:73:bf:eb:19:d4:c3:3b:a3:8b:80:e6:
b8:a2:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:11 2025 by rpki-client