Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa
File: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (raw, json)
Hash identifier: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=
Subject key identifier: 52:0D:ED:E5:04:8A:89:27:95:EC:E6:87:F4:5D:D4:A6:11:3F:35:5B
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 019421B21169419489CB756B7A2C631002D6
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 980
IP address blocks: 5.249.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:11:69:41:94:89:cb:75:6b:7a:2c:63:10:02:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=520dede5048a892795ece687f45dd4a6113f355b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:78:49:07:ba:d2:33:b9:ef:47:b2:62:44:
08:b3:4e:73:84:e6:c6:7c:2f:7a:84:f7:37:cf:fa:
44:00:93:ca:81:2b:35:e7:dc:48:af:ee:18:db:e5:
69:a1:bd:97:aa:9d:fa:da:55:6f:21:57:b2:15:f4:
6f:e2:42:43:58:21:f2:4a:d1:ad:8d:48:1c:18:a0:
e1:40:42:ba:95:22:89:a1:e9:b7:12:bd:2a:b9:88:
98:61:0b:56:0b:91:fa:e8:95:69:0f:09:da:7d:02:
90:80:14:75:82:4f:68:38:2a:ea:d4:cf:77:0c:3e:
a5:ef:63:5e:04:bb:ac:52:4c:22:7f:38:b6:65:3c:
c0:2c:70:1e:7c:b4:0b:62:bf:3c:8f:18:85:fb:f0:
55:25:ee:2f:ab:0f:b9:fd:79:c8:18:cf:02:3a:06:
e1:35:65:f7:58:a5:41:7f:3f:c9:4a:ad:cc:a0:63:
df:67:92:e4:29:dc:77:d9:c1:d7:9f:05:ac:a0:50:
f4:31:1c:98:ce:77:00:64:88:d0:fc:86:4a:3f:bc:
4e:cf:88:9c:e3:37:b7:17:68:25:a9:bc:e4:4e:d6:
31:ac:a1:cb:ea:fb:b0:bf:7e:e3:33:01:7f:52:7e:
ea:9c:dc:ab:9c:d6:70:1d:2b:b5:9c:51:cb:fd:c0:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:ED:E5:04:8A:89:27:95:EC:E6:87:F4:5D:D4:A6:11:3F:35:5B
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:f1:71:63:41:5a:ac:0e:f8:7f:d4:70:88:e6:b8:2a:97:b6:
ce:24:39:b1:91:ea:a8:6c:b6:aa:0b:9b:37:7c:18:ae:19:d2:
fa:0f:eb:15:9a:4b:43:98:2a:6d:47:87:32:43:a0:6a:85:f6:
a5:8f:74:11:30:93:e3:35:ef:a4:75:26:a6:ba:58:19:70:80:
39:95:06:4b:4c:be:24:06:f2:f2:0a:b1:17:b5:b1:8d:ae:fb:
8e:2c:61:8e:f6:ac:e0:b4:f4:cf:db:cd:a7:93:f6:aa:b0:c8:
fd:d7:ad:48:e6:51:d8:fd:0c:e8:98:46:02:ac:e5:d6:e9:86:
b0:10:ec:21:5e:85:b7:b4:2d:f7:24:2b:ec:cf:ea:8e:47:ee:
ad:9e:e1:43:4f:30:16:9c:f1:38:36:9d:4f:92:32:b5:4c:0e:
84:f2:c5:c1:da:c7:a9:1d:80:29:84:a6:ca:16:8e:4f:0d:e6:
3b:88:11:e2:18:dc:22:96:92:f3:79:29:00:0a:a1:07:86:e1:
db:81:59:e7:2b:e9:ff:d0:a1:9b:c5:0a:49:43:31:f2:c7:f4:
da:29:68:13:b6:9e:52:55:8d:07:2b:cb:79:b3:61:5c:91:da:
9b:2f:ee:93:d5:55:66:f2:46:64:e7:08:52:e0:4c:4c:d8:7f:
3f:5c:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:36:02 2025 by rpki-client