Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa
File: Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa (raw, json)
Hash identifier: mWAWf/tUyMqSuERI1NnQLYVJLUvPjig1mh8WLVGNkto=
Subject key identifier: 53:2D:55:F5:BD:30:16:97:4C:97:30:D1:8A:94:D8:E8:E2:3A:35:5D
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 019423D6D36BF305E341C1ADCDC8567B9771
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56574
IP address blocks: 192.166.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d3:6b:f3:05:e3:41:c1:ad:cd:c8:56:7b:97:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=532d55f5bd3016974c9730d18a94d8e8e23a355d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:b1:62:98:8f:e5:1c:78:0b:6a:c2:04:76:
f3:46:4d:4d:08:c8:1a:e4:15:9f:2f:19:08:a8:fd:
28:26:c3:98:b1:1c:25:57:90:c3:92:e2:23:6e:bc:
98:6e:77:4f:64:64:af:aa:8b:0e:15:b5:60:e2:fd:
ac:44:58:40:ea:ac:8c:4b:b5:07:c4:42:8d:aa:c8:
90:72:b1:80:3d:8f:36:cb:54:05:b2:3a:7e:9e:a6:
7c:35:41:f9:dc:3f:94:cd:64:44:38:38:e8:f0:6a:
7d:57:89:59:06:82:e8:a2:9d:b1:ec:47:8d:c4:cd:
5c:3d:a6:58:63:7d:5b:f2:74:68:44:a3:17:d9:a0:
df:65:b1:27:fe:24:af:48:b9:3d:b1:7c:2f:af:6e:
cc:4d:f3:37:bf:10:33:77:c2:21:52:e7:a8:06:95:
6d:17:fb:6a:af:84:88:95:b9:77:85:b4:4a:3d:6f:
30:0a:5c:ab:88:22:d0:40:1c:e6:cd:45:3c:a3:5c:
34:55:31:18:41:46:50:6f:73:02:13:ee:9a:3b:1d:
67:a8:b1:61:3c:e4:de:8b:b7:2a:44:15:ad:83:01:
b8:0c:7b:1e:d9:67:05:c6:fd:87:bf:07:75:fb:54:
8a:5a:a7:cf:45:e3:5f:fe:0c:c4:19:ab:89:ea:63:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:55:F5:BD:30:16:97:4C:97:30:D1:8A:94:D8:E8:E2:3A:35:5D
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:b3:0a:47:f1:e0:85:c9:71:90:25:12:ba:c8:00:9b:a3:fa:
6a:36:f3:37:67:a7:e4:1f:b9:d2:9a:1a:b0:b7:d5:2d:4e:54:
52:96:f4:2a:4a:83:db:92:f1:cb:24:e4:4b:24:c0:87:99:da:
1c:f0:36:f5:f4:a1:b1:a9:75:21:fa:af:b5:3d:01:85:2d:65:
d2:ec:5c:ba:47:84:d3:83:a3:ea:c4:7f:0d:2e:86:62:70:38:
63:29:35:b0:67:1e:ec:d2:a2:5d:76:56:1b:25:f8:57:10:2e:
49:8e:fb:53:2a:36:56:03:15:4c:ee:52:52:69:d3:53:0f:72:
33:c9:de:f0:e9:ff:c6:27:c6:a0:e2:1d:22:d2:38:b2:bd:81:
30:35:4e:66:71:d5:cd:ef:0a:56:fe:dc:ab:d9:a0:22:68:96:
d0:9f:d1:4e:62:a8:0e:39:a5:57:c0:59:d3:e7:e2:fb:c8:f3:
65:4b:80:9b:b3:45:f5:2d:9c:5d:eb:95:30:93:32:5b:81:d6:
fc:50:98:08:f0:c0:df:c9:eb:b5:87:0d:26:a6:3e:b8:ee:23:
87:f0:f4:77:04:7f:ee:81:a8:04:79:24:4d:59:d5:72:25:be:
f0:66:44:c5:8d:09:c2:7c:68:b4:78:1b:64:0d:00:d7:0a:70:
52:50:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:51 2025 by rpki-client