Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/uOExWuSOVw3WsjvU2eYOWMWKUpM.roa
File: uOExWuSOVw3WsjvU2eYOWMWKUpM.roa (raw, json)
Hash identifier: hA0HItJlYM+q1aZPrXih9b73zlhaFUPXGNtsx6XoxS0=
Subject key identifier: B8:E1:31:5A:E4:8E:57:0D:D6:B2:3B:D4:D9:E6:0E:58:C5:8A:52:93
Certificate issuer: /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial: 019421B19EE841DD69B668D6B59CA0E99DF4
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/uOExWuSOVw3WsjvU2eYOWMWKUpM.roa
Signing time: Wed 01 Jan 2025 11:47:56 +0000
ROA not before: Wed 01 Jan 2025 11:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198223
IP address blocks: 195.88.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:9e:e8:41:dd:69:b6:68:d6:b5:9c:a0:e9:9d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ed275c5a738888d580695edd36715959447921
Validity
Not Before: Jan 1 11:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e1315ae48e570dd6b23bd4d9e60e58c58a5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:f1:cc:16:c8:fb:f6:3b:af:06:98:2a:b4:
10:83:c6:e0:a3:35:9a:6e:7c:54:40:7b:4c:af:bd:
b3:00:78:e3:f5:a8:8f:cf:74:1a:1a:03:c3:4d:8d:
19:b8:0a:6b:39:08:3e:ad:fb:dc:4a:3a:7c:b1:ff:
db:f6:9d:b1:0a:df:92:83:d8:06:3d:bc:01:5d:9a:
e4:a7:65:21:80:b6:75:77:c4:00:9c:08:d3:c1:cb:
2c:3e:f5:7a:ee:7b:08:6f:6f:4f:80:0d:ac:20:38:
cc:fc:f5:e6:31:c2:ba:65:9a:97:77:52:d6:e8:03:
ba:90:fc:74:0b:40:55:7c:b1:3b:00:bf:db:0b:26:
9c:a4:e1:3d:cd:37:08:60:75:d9:3d:68:de:f1:c9:
ba:62:ac:db:90:2f:85:a6:e7:7a:72:a5:aa:50:80:
7e:00:df:4e:cc:04:79:1f:e7:aa:b7:80:49:fc:98:
c8:5e:d8:5c:6a:e8:a8:cf:6c:68:cf:1d:85:3c:53:
4b:92:e0:a0:57:26:62:01:38:a6:5e:60:e5:d4:36:
a0:47:30:0f:21:3d:4f:7c:ef:10:64:7d:27:70:79:
43:9b:e9:22:ed:06:fb:0f:9e:be:eb:1d:a6:6b:2c:
92:c4:ce:35:aa:8a:62:c7:b5:a9:18:c9:10:aa:eb:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E1:31:5A:E4:8E:57:0D:D6:B2:3B:D4:D9:E6:0E:58:C5:8A:52:93
X509v3 Authority Key Identifier:
keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/uOExWuSOVw3WsjvU2eYOWMWKUpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c5:f5:86:c2:05:f3:55:44:15:b6:54:41:15:ec:66:c2:ff:
66:9f:55:73:0a:6b:fb:8d:45:71:68:0c:9a:21:0c:a8:24:27:
cd:98:10:42:3a:b8:58:83:46:e8:01:2f:01:2f:63:f5:b7:11:
2a:d6:79:fa:fe:9c:6e:e4:d5:38:72:01:2e:d4:5b:af:e1:8d:
2e:c3:44:df:c8:b8:c9:bd:ca:5a:ff:e8:d8:00:5f:f7:39:e3:
da:e8:33:0e:c1:d0:a4:bb:1d:eb:ce:ec:fd:0b:dd:95:53:9e:
48:ef:24:8c:41:cf:c3:72:f6:4c:32:b9:8d:df:ed:af:f6:4f:
f0:6c:21:e2:dc:f1:e6:68:73:98:ff:32:31:05:2c:39:44:f5:
2c:3e:85:54:6e:21:99:e5:53:f4:88:75:1b:b1:1d:e9:97:be:
d3:dd:20:f4:1a:d1:89:d8:69:28:e8:47:83:49:78:be:ec:cb:
90:14:38:17:30:f1:80:e3:04:94:11:ba:e1:a2:2d:ab:8a:5d:
7f:0d:b0:af:74:53:59:ae:41:09:dd:b9:a2:96:5e:7b:d1:77:
f7:74:51:e0:40:83:64:17:55:45:03:31:1d:38:df:08:05:35:
4e:af:d6:80:2a:f8:0d:1c:e3:d2:44:7e:93:e3:61:4e:f7:b2:
13:6e:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:11 2025 by rpki-client