Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/UjncDvFxOlRCkAGtD0tzYyO0vwY.roa
File: UjncDvFxOlRCkAGtD0tzYyO0vwY.roa (raw, json)
Hash identifier: HR/S3qDlN6tb+Q3T8TNZutyXf0XfoqKmAw4PR5qJTgU=
Subject key identifier: 52:39:DC:0E:F1:71:3A:54:42:90:01:AD:0F:4B:73:63:23:B4:BF:06
Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial: 01942748444D488CAFD5FBE030441F73116A
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/UjncDvFxOlRCkAGtD0tzYyO0vwY.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205007
IP address blocks: 185.48.250.0/24 maxlen: 24
2a04:b540:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:44:4d:48:8c:af:d5:fb:e0:30:44:1f:73:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5239dc0ef1713a54429001ad0f4b736323b4bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:23:5d:eb:fd:ba:79:81:5a:d7:9a:ac:41:
3c:01:06:d3:1d:cb:c9:ad:b2:2d:5c:e7:62:6e:68:
48:89:ac:56:71:5e:e5:b3:4f:63:94:b7:b7:cf:80:
8e:dd:f3:32:31:fc:7e:97:ad:14:89:23:d6:97:4c:
5a:e2:6e:31:75:b2:c1:dc:5f:43:5b:7a:3a:52:44:
f1:1d:3e:82:a5:c9:8a:69:a1:bd:07:fa:cc:5f:2d:
f8:00:a7:b7:e8:8f:ea:9b:c7:c7:5e:56:98:ee:41:
dd:a1:5e:cc:0a:0d:ab:db:8c:28:33:95:30:e6:4a:
c0:9b:be:09:08:64:f2:24:7e:82:d9:be:f6:ba:6d:
34:0a:e5:7c:e9:32:b2:43:d5:62:20:f4:dd:db:de:
5d:28:93:9f:d0:10:da:8c:2a:ad:4b:7c:a9:b1:1b:
b4:fc:0b:e0:61:f9:5e:9b:f3:cf:de:83:0d:c8:a8:
3e:b9:5c:f5:ae:21:77:9a:d6:cb:6c:6a:03:bf:e0:
60:de:66:b1:b4:31:22:04:86:dc:af:f9:55:ba:ab:
d5:a0:51:a3:54:c9:7f:fc:88:05:6c:e2:94:af:ec:
9f:d8:46:de:03:a2:a5:1b:d5:78:0c:5a:cf:0c:d9:
4c:3d:7a:fd:44:52:d2:17:d7:61:6f:67:1a:4b:47:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:DC:0E:F1:71:3A:54:42:90:01:AD:0F:4B:73:63:23:B4:BF:06
X509v3 Authority Key Identifier:
keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/UjncDvFxOlRCkAGtD0tzYyO0vwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.250.0/24
IPv6:
2a04:b540:3000::/36
Signature Algorithm: sha256WithRSAEncryption
51:1e:a0:48:77:c2:6f:bb:12:e4:6e:c4:be:62:d2:a5:0c:01:
01:33:8a:c2:62:49:4e:c8:3c:c2:26:81:f1:1c:b5:b5:92:1d:
4f:1f:98:19:19:3d:e5:a8:fa:98:d3:ea:5a:cb:50:6f:ca:0e:
2f:26:6d:39:2d:b5:64:b8:1e:6a:d6:4b:f2:01:59:23:30:01:
7e:9e:76:2f:b8:cd:59:08:14:c8:ef:e7:4d:5d:5e:9f:8e:e4:
88:3c:23:1a:05:ea:8f:63:40:a8:5e:08:5b:34:43:41:ec:39:
1c:5c:e7:bf:b0:c9:ac:70:8a:05:3e:65:cd:dc:01:6a:be:d6:
34:72:ca:89:60:fd:a3:d6:aa:f2:9b:f4:86:f2:0e:bd:31:db:
22:80:78:c1:dc:35:b1:6b:cb:ca:da:7a:d1:ed:60:ba:c9:a0:
88:4f:d1:da:47:c8:71:cc:b7:ca:39:34:fa:54:3a:a7:40:c2:
74:37:cb:3c:8a:5b:4a:5d:6c:c2:7f:9b:7e:1b:f7:18:24:66:
36:f7:02:fb:22:9e:68:9b:b2:08:be:51:10:a0:7b:b9:cc:29:
af:07:3b:fb:18:c2:ce:aa:3f:4a:ce:f0:44:ab:2f:51:b4:e6:
a1:83:85:b7:d0:8c:91:7c:3c:09:18:75:47:8a:6a:46:34:79:
d5:a8:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:49:51 2025 by rpki-client