Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/UGApytPJPEIPFbzs4L0oU_KIdHM.roa
File: UGApytPJPEIPFbzs4L0oU_KIdHM.roa (raw, json)
Hash identifier: cf5ZtJTmEf4eW9FhhtNmIkoS04da9/P7WQkJtlas3+0=
Subject key identifier: 50:60:29:CA:D3:C9:3C:42:0F:15:BC:EC:E0:BD:28:53:F2:88:74:73
Certificate issuer: /CN=aaf1c8dd40884b49f088064d3c100d2a189a8474
Certificate serial: 019425213EABC7BD2EE549E5DAF9C8FA6AC9
Authority key identifier: AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/UGApytPJPEIPFbzs4L0oU_KIdHM.roa
Signing time: Thu 02 Jan 2025 03:48:43 +0000
ROA not before: Thu 02 Jan 2025 03:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214213
IP address blocks: 2001:35c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3e:ab:c7:bd:2e:e5:49:e5:da:f9:c8:fa:6a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf1c8dd40884b49f088064d3c100d2a189a8474
Validity
Not Before: Jan 2 03:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506029cad3c93c420f15bcece0bd2853f2887473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:90:d8:6d:8d:8e:5f:41:cb:70:6a:a3:fe:
67:d3:72:d3:df:ea:11:2e:69:54:fa:6b:44:e4:30:
75:76:57:a5:d9:d8:78:71:c3:8c:dd:b1:3f:2d:f6:
af:a0:a1:20:e5:65:a1:86:03:3d:43:71:39:53:89:
90:85:cc:a8:24:90:79:d5:e1:e5:cc:27:53:04:9d:
22:9c:02:25:ca:4f:1c:e3:3b:a7:d1:7e:2a:8e:85:
4d:bc:b4:db:a2:b2:69:94:50:0d:7a:4b:23:9c:54:
56:0c:cf:25:8f:19:33:9c:88:36:98:a1:18:be:1d:
0e:0f:79:c0:d9:7f:33:db:4d:0e:f8:a7:3d:a5:a6:
d1:e4:24:a3:87:b0:ca:b2:1d:4a:a7:63:5d:4d:bb:
23:a7:6d:48:8c:64:d8:ad:0e:d5:a9:58:72:3c:b8:
1a:89:c4:91:6c:fb:12:84:4a:aa:4f:68:9f:f6:ad:
54:c9:f3:b9:a5:66:55:b2:d1:bb:77:58:72:51:75:
ae:6d:7c:e5:18:06:dd:cb:be:b0:77:7d:84:39:65:
68:64:71:dc:76:9a:a9:69:ae:a0:5d:c5:4d:ba:03:
c0:12:b7:22:36:dd:a3:18:29:af:b1:c3:0b:38:e9:
c9:d2:7a:02:20:f5:d8:8e:dd:ee:bd:95:58:b4:2a:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:29:CA:D3:C9:3C:42:0F:15:BC:EC:E0:BD:28:53:F2:88:74:73
X509v3 Authority Key Identifier:
keyid:AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/UGApytPJPEIPFbzs4L0oU_KIdHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:2e:81:8e:ee:8f:21:6c:95:0b:21:3d:d6:a0:de:3a:d7:aa:
bf:01:ec:f2:f8:47:c5:0e:8f:72:b9:e5:c9:59:cd:2e:d2:44:
46:7a:cf:60:1b:fa:59:ec:32:97:75:01:6a:4d:21:b7:cf:32:
72:65:6d:f1:65:d1:0a:71:bb:3a:aa:d4:9f:7e:6a:bd:8c:a3:
45:1a:d7:1e:d5:cc:ad:09:24:c4:42:4c:d2:54:f1:92:d3:aa:
db:34:c4:08:85:97:50:65:4c:a5:91:51:44:bf:d5:3e:35:c1:
86:f2:66:69:ea:48:19:cf:d3:5b:05:10:80:8a:2b:f8:be:4b:
bf:0a:92:43:b7:b3:88:38:cb:48:ba:57:fb:9f:53:09:d5:3d:
ed:01:b4:46:55:6b:7c:08:bb:37:6f:4d:af:3f:d3:59:cd:d9:
68:55:da:70:c0:ab:a8:2d:b6:4c:20:91:14:ed:03:22:17:d9:
f7:d4:6e:e2:c7:c7:ee:a8:92:87:d3:06:34:a9:ab:0a:1c:06:
36:7c:45:42:a7:bb:6b:60:fc:7b:5f:f3:70:c4:dd:8c:54:1c:
cb:87:c6:bc:d8:7c:b7:74:86:f9:11:d9:62:c9:9a:9b:82:4c:
75:f6:56:5a:fc:cb:09:70:44:e7:5a:51:02:f2:07:a4:8f:0f:
54:1c:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:44:33 2025 by rpki-client