Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/U9VsXfCDsGKpry_AQUbKGYz8tRI.roa
File: U9VsXfCDsGKpry_AQUbKGYz8tRI.roa (raw, json)
Hash identifier: SBzZHW/ujJ7yylMaWV4gG1R9SCvZEB29AnTHypdaXgY=
Subject key identifier: 53:D5:6C:5D:F0:83:B0:62:A9:AF:2F:C0:41:46:CA:19:8C:FC:B5:12
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019420D65FD7F53FDBD239D5C21244FD7EB0
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/U9VsXfCDsGKpry_AQUbKGYz8tRI.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 185.42.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5f:d7:f5:3f:db:d2:39:d5:c2:12:44:fd:7e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53d56c5df083b062a9af2fc04146ca198cfcb512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:70:6f:87:69:77:6c:f4:c2:f2:cf:39:0c:
9e:27:df:e6:e8:4d:7b:64:d4:3b:ff:0a:be:c4:3d:
a9:00:1a:f0:61:b0:31:a6:7e:0d:6a:fe:2e:a0:e6:
8d:80:2c:f5:9e:62:80:ec:c3:93:76:aa:b2:b2:eb:
bc:21:6c:e7:f0:55:dc:47:73:e5:cb:e4:6c:2c:84:
bb:81:dc:c5:0b:78:75:1d:23:87:f0:09:54:e6:2d:
e7:61:0a:a1:f4:7e:a2:5a:3b:01:b2:eb:37:4b:3c:
83:dc:87:73:24:09:e5:5e:52:74:95:10:fe:e0:b9:
e5:ae:23:ed:76:b1:60:f9:03:4e:4a:0c:4c:ba:fc:
d3:83:9f:eb:60:32:67:70:53:35:90:87:5f:13:40:
54:13:53:47:bc:14:ab:ef:6e:3b:d0:44:f7:52:26:
c9:39:74:a5:53:60:9f:4b:c6:e4:5d:0c:99:57:46:
53:b1:5b:63:9f:9b:b2:21:33:ee:99:f1:4b:3a:22:
72:80:9c:f2:4c:e6:c0:fe:d9:73:b5:af:96:2d:f6:
7d:2e:de:95:b8:37:63:34:d3:5a:ea:7f:ce:57:91:
61:f4:eb:f7:5b:b5:41:63:34:52:a7:8c:ec:ba:c8:
8e:ff:d2:cf:82:cf:cd:b2:89:58:11:38:4e:4a:b0:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D5:6C:5D:F0:83:B0:62:A9:AF:2F:C0:41:46:CA:19:8C:FC:B5:12
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/U9VsXfCDsGKpry_AQUbKGYz8tRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:9c:28:58:a8:28:75:c0:12:50:70:f1:f6:5f:70:b9:74:dc:
40:e0:3c:9b:55:19:4a:cf:b8:2d:35:71:5b:06:35:3f:02:d5:
49:bc:78:75:ef:e8:d3:20:78:97:df:58:06:01:7f:9f:37:9c:
b5:69:64:1b:43:57:d7:3a:b7:db:33:0d:10:2a:8e:db:c8:eb:
67:ea:1e:58:a0:06:7e:c7:a7:ae:51:c8:64:32:9b:ba:aa:00:
9a:4e:95:cb:7a:9e:40:1c:96:cb:28:e7:6f:fd:14:ad:d6:02:
7f:95:39:a0:ae:60:fc:e5:8b:22:51:21:dc:60:ba:74:76:b5:
2e:e9:bc:66:55:d1:b6:e6:f3:17:28:39:1f:0c:34:10:35:a2:
23:86:d3:37:18:39:a9:ee:1f:f1:3e:e1:19:ff:a8:e8:21:45:
14:f0:21:c8:b5:75:c0:6d:01:33:3c:f1:94:58:07:57:f0:6f:
6d:7c:be:68:93:88:c5:61:28:40:64:aa:37:3d:e6:52:a0:83:
f8:99:2d:2a:30:da:37:a7:e6:11:77:c4:b9:82:b3:34:cf:37:
78:36:63:34:c5:ea:45:a9:1c:0a:c8:83:18:f6:a1:4c:6b:0a:
a0:9e:43:0b:a1:c2:41:53:81:11:39:ea:ae:d9:db:14:ac:7f:
80:2c:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:56:25 2025 by rpki-client