Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/UryH-7kbyXWUJTfxmD8_iKhQToA.roa
File: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (raw, json)
Hash identifier: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=
Subject key identifier: 52:BC:87:FB:B9:1B:C9:75:94:25:37:F1:98:3F:3F:88:A8:50:4E:80
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194221FFFFBC74C56253E3CB1495049D734
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/UryH-7kbyXWUJTfxmD8_iKhQToA.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31244
IP address blocks: 45.131.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ff:fb:c7:4c:56:25:3e:3c:b1:49:50:49:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52bc87fbb91bc975942537f1983f3f88a8504e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:44:4f:17:ac:9c:3b:6b:b4:75:c4:e0:01:
90:c4:1c:9f:25:84:fe:eb:ea:2f:ea:e0:d9:e3:57:
a2:f4:55:57:09:e0:34:0c:2b:d7:b4:6c:4f:0e:be:
6f:8f:97:96:ea:0e:ff:65:18:8a:ad:58:66:a1:48:
a4:10:b8:69:b0:18:d6:2a:93:4f:df:e5:7c:00:b2:
37:59:66:87:88:35:29:4c:94:09:78:97:bd:1d:ad:
bd:1b:95:b7:4c:35:39:6c:72:ad:e2:26:56:82:01:
71:74:1b:e2:1b:2b:68:87:7e:de:9d:25:88:00:ac:
60:b8:a3:b0:71:28:b3:69:c4:c6:f6:d7:74:63:2b:
41:fc:96:b0:c7:2e:8f:34:aa:01:ed:09:96:bf:42:
89:d7:c8:9e:6a:92:2c:e1:a8:3f:b1:c7:39:70:32:
8a:e5:05:6f:7b:7c:b6:03:64:34:0f:68:92:1b:9d:
27:90:8e:60:c4:cc:12:6f:04:27:5b:92:3c:e0:ec:
15:e4:7f:eb:f5:e6:4e:22:5a:2f:45:ba:23:e9:41:
a4:2c:8e:26:bd:cf:d5:db:95:bc:82:02:9d:6b:67:
ac:4b:2a:20:d9:1d:b6:63:3c:03:f4:74:e9:5c:6a:
dd:e1:e7:7a:e3:12:75:16:4a:20:5e:33:a8:09:c0:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:87:FB:B9:1B:C9:75:94:25:37:F1:98:3F:3F:88:A8:50:4E:80
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/UryH-7kbyXWUJTfxmD8_iKhQToA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.107.0/24
Signature Algorithm: sha256WithRSAEncryption
71:37:25:44:f3:8c:b5:bf:31:61:61:3e:59:b1:15:58:f7:df:
3a:ca:82:14:e9:d8:2a:a0:41:8a:62:e5:63:6c:a8:6f:aa:93:
bb:8e:c2:15:01:8f:61:f6:b4:82:c8:13:b0:b3:c6:d5:89:bf:
e5:03:35:53:be:cd:ce:56:86:4b:c2:34:b9:c1:e0:2e:d6:63:
29:fb:18:37:84:38:a9:68:27:52:0f:f4:5b:50:5c:69:d1:c0:
69:26:d9:a4:1b:36:76:77:ca:bb:3f:c1:2f:72:06:35:31:e8:
19:97:42:61:c3:4f:28:52:8c:18:95:91:20:ac:67:47:8e:85:
f9:60:bc:de:3a:fd:60:c7:d4:2a:79:be:a1:16:a3:8a:0f:e6:
83:60:2b:5e:3e:b8:aa:20:4d:7d:1a:db:01:f4:d5:0a:35:3d:
b0:1d:f9:f8:f7:b5:c9:fb:ef:dd:d1:c2:65:5c:b5:b7:06:a6:
3d:7b:99:7e:2a:c7:ad:61:f6:9a:29:37:87:77:4e:9e:6c:23:
5e:0d:88:12:81:ec:19:ce:c4:d4:7a:c2:7a:b1:37:1e:81:a6:
00:89:80:d6:b1:bf:56:e1:76:34:b5:1f:2d:37:42:76:72:d6:
5b:f7:67:f0:6b:23:28:84:62:7d:bd:98:34:e5:19:67:c5:8a:
7d:89:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:42 2025 by rpki-client