Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa
File: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (raw, json)
Hash identifier: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=
Subject key identifier: 50:79:9C:9E:36:4F:91:D9:5C:98:FB:DF:F6:45:3D:80:4B:D1:CE:EF
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 019420687019E8699E04D814813029678DC9
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204991
IP address blocks: 91.203.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:70:19:e8:69:9e:04:d8:14:81:30:29:67:8d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50799c9e364f91d95c98fbdff6453d804bd1ceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:8f:ea:a4:6a:eb:0d:75:07:e8:a9:e5:fe:
83:4a:65:de:cf:05:91:62:d1:00:47:9a:34:fd:e7:
7c:c3:16:e2:09:e2:00:03:e9:2a:4e:59:81:05:3a:
63:6f:1f:3f:13:21:cd:21:06:69:bd:ac:96:46:3b:
66:97:e8:0c:e0:f3:d2:c4:01:36:fa:65:bd:0b:c8:
e8:95:a0:86:19:d5:af:46:3e:82:af:da:a1:01:f3:
7a:7e:69:d4:aa:bf:8e:af:38:0c:51:b4:ff:8c:1c:
d0:aa:4f:8c:af:18:aa:c1:c7:48:f7:17:bd:2b:10:
2b:ca:e3:3e:da:cd:6b:cd:bf:ae:e3:95:96:3e:93:
b8:49:d3:37:78:fb:a3:2e:f3:13:ad:42:a5:7f:31:
c7:57:57:60:a2:2f:00:df:81:0e:8a:7a:77:95:ea:
be:dc:68:39:ca:8b:af:90:92:d5:4c:75:b9:7e:34:
35:df:a4:a9:12:5d:ca:8d:85:f8:71:45:b6:d2:c0:
5b:72:dd:b6:a0:9d:98:b6:c9:5c:48:83:75:f4:bc:
23:da:66:e8:13:ec:62:b3:18:4f:84:84:88:ba:e0:
ba:41:78:f4:e6:08:fe:d4:0b:6f:fc:3b:20:6e:bf:
bb:57:45:1d:cb:76:43:59:92:e7:30:e8:e0:10:1e:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:79:9C:9E:36:4F:91:D9:5C:98:FB:DF:F6:45:3D:80:4B:D1:CE:EF
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.226.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bd:72:93:28:a7:9a:9f:39:27:26:75:e5:35:b3:a5:0c:29:
73:76:95:db:75:d8:b7:7c:9d:e9:d4:49:21:87:35:c8:ba:29:
30:df:e5:e3:f3:da:c7:5c:23:37:d2:2e:ab:3d:1e:69:0d:e1:
93:54:0d:da:86:92:00:d9:2b:5e:6a:21:c8:77:19:11:d7:8f:
d3:ac:05:38:bc:e4:89:7a:77:4a:a8:79:75:4d:7a:66:b2:3f:
b3:6e:9b:43:ca:63:ad:1f:f1:7f:f2:af:54:35:ad:c2:8e:90:
0c:55:75:9d:63:bc:cd:e4:62:2f:ad:45:f3:20:92:55:9e:64:
a4:49:c0:ec:81:bf:9b:fb:9e:83:26:06:75:cf:3f:8d:8e:6b:
aa:fe:69:df:f4:08:44:4e:b8:a9:80:82:a3:50:2f:b8:c4:2a:
ca:a2:1a:6a:26:a4:a6:84:c5:76:6a:8d:3b:c8:b8:3f:57:2b:
6c:c3:74:a4:b5:7d:19:eb:fb:fe:23:a4:50:cf:93:cb:d9:d8:
09:9f:ee:ae:04:e9:57:8d:9e:21:ad:ae:13:d1:5c:93:fb:e7:
e0:73:2c:43:64:56:5b:91:6e:52:62:7c:43:e3:a6:04:62:09:
6f:08:0e:96:cc:9e:8d:e8:e2:5f:49:a4:9a:cb:76:fa:09:03:
ba:fa:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:02 2025 by rpki-client