Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/UlaIUZkK3B529LjdTkdHqn2YBxQ.roa
File: UlaIUZkK3B529LjdTkdHqn2YBxQ.roa (raw, json)
Hash identifier: PIB38ClEzEekziyvI7kD6lwcN8Tv1wlGPtaK62LmSRI=
Subject key identifier: 52:56:88:51:99:0A:DC:1E:76:F4:B8:DD:4E:47:47:AA:7D:98:07:14
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 01958EF7A740E9E35A9462E49C53573346C6
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/UlaIUZkK3B529LjdTkdHqn2YBxQ.roa
Signing time: Thu 13 Mar 2025 10:05:49 +0000
ROA not before: Thu 13 Mar 2025 10:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.179.128.0/17 maxlen: 17
92.235.0.0/18 maxlen: 18
2001:67c:794::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f7:a7:40:e9:e3:5a:94:62:e4:9c:53:57:33:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Mar 13 10:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52568851990adc1e76f4b8dd4e4747aa7d980714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:a7:b7:a4:02:76:fa:40:26:53:f0:dd:f0:
ac:11:c2:ad:e7:81:aa:be:e7:6a:f6:ea:0b:2c:ce:
f7:10:ce:ee:7e:11:b6:1a:21:79:9a:ac:97:78:95:
aa:39:0f:93:31:49:63:0e:0d:31:ba:02:e2:d3:ec:
ab:20:eb:c7:40:cf:f5:20:12:e2:87:ad:da:28:dd:
49:02:d3:ee:b1:5a:dc:f5:60:40:c9:e8:e2:3a:7c:
43:0e:e9:d9:01:79:eb:a1:08:02:9b:0f:6d:94:66:
f2:8a:30:d1:b2:2a:95:2a:56:42:39:1d:5b:da:dc:
4b:1d:27:99:e2:8a:c0:a4:e3:bb:88:e9:96:a9:4d:
29:81:46:91:f7:9a:e7:ab:2f:9c:c2:e4:a6:ab:3c:
70:01:b8:38:b1:f7:cc:12:e6:8a:62:f9:d4:58:ad:
f5:a2:01:46:d5:53:09:de:c4:08:46:10:1c:2a:b7:
0c:0f:fb:16:90:64:c6:c4:63:6e:21:0b:b8:97:a6:
84:68:3e:3d:4e:73:23:74:41:4c:53:05:05:2b:f4:
24:cf:68:a6:fe:68:52:70:2f:a4:fd:eb:e1:27:63:
30:c9:d4:59:0b:fc:8d:b7:ce:e2:c3:4e:16:d4:ee:
8f:45:fd:13:71:88:b9:dc:41:42:cc:cc:c9:ab:a8:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:88:51:99:0A:DC:1E:76:F4:B8:DD:4E:47:47:AA:7D:98:07:14
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/UlaIUZkK3B529LjdTkdHqn2YBxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.128.0/17
92.235.0.0/18
IPv6:
2001:67c:794::/48
Signature Algorithm: sha256WithRSAEncryption
45:bb:b2:5e:6c:14:29:08:af:d9:ef:b9:2f:8f:b7:80:b4:71:
a5:cf:db:4e:30:61:52:51:9b:54:98:45:c1:a4:34:e2:a8:d5:
9e:76:28:96:2d:32:4b:15:80:87:66:4a:ab:a8:41:1b:55:06:
52:50:4a:ba:93:de:8c:6b:0d:49:41:e7:02:eb:20:9e:de:b3:
95:2c:0d:ba:e8:c9:06:dd:5f:4c:c8:ad:5e:a1:c6:b7:9f:84:
31:4c:8e:45:5f:b3:44:06:e2:f5:5d:58:a9:70:89:95:c3:8d:
81:3a:60:f0:65:db:45:3f:1b:66:b6:64:16:20:31:7e:45:1b:
ee:62:87:c6:26:10:9d:fa:a0:00:68:6e:73:79:9c:36:b7:19:
07:fb:a6:da:0f:9c:b4:59:f1:e3:b7:73:cc:32:3d:5f:91:c3:
82:19:4f:6e:3d:21:e4:f9:22:6e:e4:9e:bc:12:7a:92:ca:f0:
0b:d9:ed:b3:6a:27:86:f1:99:8d:ec:07:90:dd:0c:90:91:d5:
0c:ad:02:66:d9:6c:95:0b:ac:ed:c7:01:cb:26:3c:5d:5b:a7:
1f:15:fe:08:fb:e7:17:8b:8b:3a:1c:9b:fe:77:f5:fb:1a:e3:
0b:fc:fe:01:e1:00:b4:73:08:cb:0c:bd:4c:31:bb:de:39:2b:
8c:44:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:08:03 2025 by rpki-client