Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa
File: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (raw, json)
Hash identifier: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=
Subject key identifier: 50:38:57:F0:1B:AF:1C:E6:0C:4B:97:BD:BD:83:85:8D:68:C6:05:89
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 01941FFA5AA3C39A46D09CAFA203DB6D45C9
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30816
IP address blocks: 193.27.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5a:a3:c3:9a:46:d0:9c:af:a2:03:db:6d:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=503857f01baf1ce60c4b97bdbd83858d68c60589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:02:b4:83:55:54:a1:30:09:bb:3f:35:3a:
23:22:3f:98:6c:99:a4:4b:48:42:50:96:bc:9d:61:
c1:e9:e4:8f:f4:6f:3d:97:82:00:dd:52:37:7d:81:
fd:b6:f6:9e:fe:73:d2:a2:8a:36:02:4f:fb:4f:56:
c6:68:7b:52:94:fd:d3:ec:03:b8:ad:68:4b:2b:4a:
a9:7b:e5:36:15:12:c5:91:47:c3:65:f2:34:e2:3c:
2d:67:e1:d1:12:0a:c1:1b:5f:c4:1b:a6:55:5a:11:
58:bb:15:ab:1a:e4:b3:94:5a:53:45:86:f1:9c:b9:
bf:f7:b3:a7:3a:5a:58:be:ec:5c:5e:85:c9:19:1a:
c8:a5:2a:a0:f4:15:d2:ff:e7:a3:5e:79:52:2d:1b:
51:8d:3c:73:e5:1d:9f:ba:ba:8b:3c:26:14:a9:54:
2e:95:d2:b7:6a:dc:e1:30:2b:a6:9d:4e:98:3a:12:
bd:f4:b7:c4:46:a6:66:a4:f0:91:b6:05:73:94:eb:
72:5a:c7:5e:72:8a:3a:ee:dc:29:04:17:e6:c4:95:
d8:c4:bb:47:ba:14:34:05:96:d4:a7:cb:0e:8f:81:
55:5e:b2:dc:a5:17:f0:e2:f6:cf:25:0d:f1:9c:bc:
44:b9:12:93:26:a6:c6:96:40:1f:6c:ef:a8:85:8d:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:38:57:F0:1B:AF:1C:E6:0C:4B:97:BD:BD:83:85:8D:68:C6:05:89
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.6.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1e:d8:b3:2e:a6:75:f0:bc:87:ef:c3:00:63:d1:33:8d:a1:
ec:e7:c0:38:7b:6e:5c:9e:8a:38:b7:0a:06:66:15:c0:37:b7:
83:65:24:ea:9b:6e:95:e8:e6:9c:d3:49:b6:97:e3:2e:b0:1a:
14:0a:01:43:ad:eb:e6:af:b1:42:51:07:ca:4f:81:1b:dc:74:
c3:82:e9:9e:48:dd:b0:4d:7b:8d:d6:3b:d6:85:e6:2a:ba:b2:
2e:2d:d1:a9:cb:da:8e:cb:33:23:9e:bd:25:d2:33:f2:e2:ea:
43:cd:97:1d:2e:1f:9e:34:c9:eb:d9:3d:e3:f4:42:c5:ec:4a:
17:35:f5:28:b5:fc:0c:c8:38:96:7c:7f:31:8d:54:58:6b:b4:
a3:3e:49:63:b1:78:17:f1:b8:85:17:ac:50:be:fe:e4:fa:18:
79:b0:7c:b8:91:95:0e:3b:fb:9f:43:86:e2:0c:53:02:1a:36:
13:49:03:34:6e:2b:26:c0:e1:de:93:4d:0e:0e:9b:b6:41:f7:
9e:f5:8b:8d:19:54:4e:70:e4:46:8f:58:8f:75:d8:a9:b8:3f:
94:f7:48:48:e3:e6:0a:8a:8f:ef:2a:6b:16:32:94:b3:7b:bd:
8e:ae:e3:a3:31:cd:fe:e6:e6:53:0d:20:13:20:e0:7c:cc:a8:
ac:9b:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:40 2025 by rpki-client