Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uPxOt98I1tBick-uHh01WFNrRvQ.roa
File: uPxOt98I1tBick-uHh01WFNrRvQ.roa (raw, json)
Hash identifier: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=
Subject key identifier: B8:FC:4E:B7:DF:08:D6:D0:62:72:4F:AE:1E:1D:35:58:53:6B:46:F4
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E0CB4048C0AB1522273C801559426
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uPxOt98I1tBick-uHh01WFNrRvQ.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6282
IP address blocks: 91.236.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0c:b4:04:8c:0a:b1:52:22:73:c8:01:55:94:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8fc4eb7df08d6d062724fae1e1d3558536b46f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:65:d4:5f:e9:7a:16:5b:1a:04:24:d4:a6:
cb:e9:78:d4:3c:dd:7f:3c:1e:65:09:75:05:67:df:
7c:a3:15:31:e2:18:43:20:37:ee:c4:f1:95:7d:46:
fe:fb:f5:6e:de:06:b3:4f:3a:9e:66:be:1a:41:2e:
ef:f2:e7:3e:ba:d6:ac:63:fa:6a:4c:bf:82:f1:6a:
e8:63:89:65:ff:f1:a5:a1:07:54:8c:1d:96:9c:4a:
c8:41:3b:6e:09:17:ab:e5:ac:36:74:e2:d8:60:9e:
51:fa:46:e9:3f:ac:4e:16:d1:e3:6b:24:4b:b8:b4:
f7:60:18:5c:d5:be:37:45:e8:1f:30:66:d7:25:fa:
81:62:65:f1:89:b4:14:9a:60:77:0e:ed:0f:71:99:
65:87:f9:da:54:08:a7:2a:61:87:28:af:02:1b:00:
34:74:81:e8:d6:f4:fe:e8:3f:59:be:43:b8:de:56:
f8:7c:df:99:7f:e6:9a:9d:12:e6:a4:01:71:be:0e:
fa:9b:0e:59:0e:1a:f7:7b:55:0f:46:fe:9e:5a:b8:
6c:60:13:c2:72:34:16:6f:f0:42:81:0c:3d:62:9b:
52:12:06:02:d0:af:3a:08:39:3c:97:f1:20:5c:a3:
f6:7a:34:7f:15:bd:dc:1d:62:9a:96:42:ec:5d:1c:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:4E:B7:DF:08:D6:D0:62:72:4F:AE:1E:1D:35:58:53:6B:46:F4
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uPxOt98I1tBick-uHh01WFNrRvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.90.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:f6:c3:c1:73:e2:75:79:ed:cf:8e:f9:ac:db:42:58:1e:84:
12:c5:da:db:a8:10:e7:1e:2a:03:6c:4e:f9:63:0a:3a:b3:cf:
ca:3d:3a:39:76:fb:75:8e:cb:e8:06:92:dc:22:f1:36:c0:ef:
f3:4b:71:3c:87:ed:b8:7c:16:cf:8d:d1:2f:6a:df:41:84:f1:
27:4e:69:7c:03:23:d3:22:f7:e4:37:27:67:3c:2c:f6:24:f2:
c8:46:5b:c8:78:5e:fc:4c:ff:54:ab:0a:cc:44:4a:14:f7:ee:
cf:b5:96:21:91:63:08:39:fc:6d:bc:ee:b7:e5:37:94:91:88:
82:a4:dd:b5:ae:8f:98:2a:18:7e:a5:68:62:71:5c:c8:fa:f2:
d0:41:a7:25:93:c1:ff:83:20:73:22:e8:bb:43:55:3f:9b:03:
b5:72:2f:f3:06:78:ad:0c:bb:52:8f:24:a5:e1:8c:a7:32:ad:
89:1b:a3:5d:78:ce:a1:3c:ce:b4:18:6b:56:76:ad:e5:11:d0:
a7:29:62:b6:65:b0:ca:87:05:06:3b:45:bc:33:a5:fe:96:2e:
51:23:c8:da:56:28:e1:6a:40:d3:79:10:db:28:c0:a1:52:8b:
9f:a1:b2:19:5f:76:22:9a:71:66:4b:53:da:ca:4b:68:2f:25:
d1:4b:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:12:34 2025 by rpki-client