Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uJxsFMSRjFMz-1vxj9GyI5Sv98o.roa
File: uJxsFMSRjFMz-1vxj9GyI5Sv98o.roa (raw, json)
Hash identifier: 6BzOtTEmPiHsiBcte0hywmNETidPENBi+3sPmPeiZM8=
Subject key identifier: B8:9C:6C:14:C4:91:8C:53:33:FB:5B:F1:8F:D1:B2:23:94:AF:F7:CA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195FB4668AD7FC362CBDD9108A3DCFDC1DF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uJxsFMSRjFMz-1vxj9GyI5Sv98o.roa
Signing time: Thu 03 Apr 2025 10:50:50 +0000
ROA not before: Thu 03 Apr 2025 10:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215211
IP address blocks: 217.60.196.0/23 maxlen: 24
2a14:6e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:46:68:ad:7f:c3:62:cb:dd:91:08:a3:dc:fd:c1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 3 10:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b89c6c14c4918c5333fb5bf18fd1b22394aff7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:98:f1:83:8a:e3:45:af:8d:b8:70:f0:26:
e3:cf:6f:09:ae:fd:c8:42:e0:79:91:bb:b0:fb:e5:
44:01:5c:03:29:90:12:1a:f5:a8:77:6a:3b:c3:02:
a0:ab:76:03:a9:b6:2c:2e:d2:5b:e3:10:07:b2:45:
09:a1:77:d3:6f:bf:a5:82:b4:10:68:58:e8:06:94:
18:41:de:ff:86:2c:f2:8c:31:ed:7e:4c:f1:81:db:
e8:17:73:4a:79:af:da:b2:0f:04:d3:85:be:70:ae:
3f:4a:0f:b9:5d:42:98:0e:6c:09:aa:1e:db:95:f1:
ce:c3:ae:b9:69:db:28:43:94:fa:f8:03:29:2a:6d:
8b:8f:99:6a:70:a5:7b:fd:9e:b9:a9:31:57:1a:d8:
46:bb:82:10:23:96:a0:29:fa:92:54:cf:99:b6:e0:
1a:f6:54:e5:b1:9a:c7:6c:b9:bc:06:0c:59:2d:15:
3c:aa:42:46:42:33:73:81:e2:96:4b:9b:ec:76:06:
32:52:8a:60:9f:fe:96:57:dd:d4:94:30:ad:c2:c9:
97:19:64:77:98:15:8e:e7:17:ba:de:4a:10:3b:9a:
71:47:b3:06:3f:a7:57:0c:a2:81:7d:3d:34:84:ab:
23:ef:7d:1b:92:f6:14:2d:26:b7:04:4d:3a:eb:b5:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:6C:14:C4:91:8C:53:33:FB:5B:F1:8F:D1:B2:23:94:AF:F7:CA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uJxsFMSRjFMz-1vxj9GyI5Sv98o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.196.0/23
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
96:c9:38:d7:70:f4:ed:74:56:47:2b:c7:c7:c3:50:d2:ce:93:
35:b5:d5:d7:6a:2d:51:c5:0e:5c:b1:f6:5c:79:6a:5d:79:a1:
ee:0c:4f:14:08:b6:1b:ec:14:37:8e:70:02:01:cf:67:f9:a6:
f5:57:52:2e:fa:7c:87:b3:df:cc:46:0a:71:d8:03:ca:6f:42:
b5:94:8e:3a:7f:51:7d:31:82:95:53:82:f2:55:f1:34:f4:56:
5d:51:52:92:36:72:df:7f:cb:c0:41:0e:03:af:cc:80:19:af:
01:9f:65:f7:49:a9:50:0a:ce:6d:f2:ba:67:39:2a:94:b6:a2:
01:b6:ca:42:88:3b:91:df:51:35:ea:8c:c7:d2:02:c8:b7:0a:
94:25:f3:b4:3a:b2:74:96:30:f6:b8:50:ba:24:99:95:3b:47:
8d:02:1b:cd:70:8c:21:1e:4d:78:28:28:9a:f3:be:d7:a5:b4:
09:27:7e:29:2e:61:ba:aa:a3:5f:42:76:97:4a:8d:c2:02:12:
52:ea:e8:6a:1f:1c:49:d9:5a:7a:e0:f5:30:2d:1a:3d:a3:50:
cc:7f:0e:6c:a6:74:0d:3c:ac:a1:c1:0f:05:3a:6d:e2:7d:68:
db:99:0d:c8:7d:80:9f:78:ae:bc:f8:82:54:6d:9a:c8:34:85:
e7:95:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:28 2025 by rpki-client