Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa
File: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (raw, json)
Hash identifier: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=
Subject key identifier: 50:2B:93:F4:37:51:D6:E7:F6:79:A5:10:E5:6E:B5:51:C1:86:7B:9B
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5B9BE1F211207695153FB3BAD1B42
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b9:be:1f:21:12:07:69:51:53:fb:3b:ad:1b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=502b93f43751d6e7f679a510e56eb551c1867b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:46:2e:d8:f1:9f:9b:11:20:dd:0c:21:04:
02:09:cb:74:11:ee:b6:fd:37:00:81:7b:23:bd:56:
d4:22:7e:69:60:73:94:32:f7:d1:d2:d8:5b:b0:64:
62:de:3e:23:bf:66:7a:26:56:8c:02:c0:f0:57:11:
86:ca:3f:77:5f:20:13:0b:01:e6:59:cb:f8:9c:f1:
50:a1:a3:39:7c:6d:a5:09:a4:23:ca:39:3d:11:6a:
92:f0:ec:20:f5:44:8b:94:01:e2:bb:b5:44:df:53:
84:5b:fc:ce:46:f9:38:2b:1f:84:d6:f0:76:c4:2e:
f9:8b:bd:17:63:a7:90:ed:67:d6:77:d9:91:fd:3c:
c3:d6:20:3c:83:f6:0f:c1:9e:77:3f:82:ae:6f:34:
b0:8c:e0:a7:f2:82:c5:30:3e:65:33:c5:d8:d9:5d:
39:ba:4a:5d:c2:42:7c:84:4c:e0:00:1f:7a:d3:4a:
32:1a:ca:01:e0:d0:aa:d7:79:70:21:90:6f:9d:3d:
a7:75:32:c4:a7:7f:44:02:f3:81:d2:50:9e:a9:60:
04:5c:0a:e0:87:cb:a5:b2:30:1e:24:00:48:ca:e8:
e6:79:06:8a:e1:68:f1:ef:00:17:ef:7b:58:cc:32:
59:79:f6:68:c7:25:6e:a1:5b:f2:59:31:1c:07:b2:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:93:F4:37:51:D6:E7:F6:79:A5:10:E5:6E:B5:51:C1:86:7B:9B
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bb:21:5b:ea:ce:0e:1b:48:74:d8:b7:8a:83:52:12:6f:1b:
22:a0:f8:97:e9:aa:44:a3:e8:47:f2:09:69:9d:e9:1c:e8:75:
5b:7d:0c:ad:06:05:a1:e0:5a:61:b1:87:e4:c7:f8:c5:a1:99:
3a:6b:5f:cc:6a:53:97:b7:f2:63:a9:8e:2f:a8:ce:8b:73:eb:
85:d6:40:f3:26:75:1e:2d:5b:b4:2d:c1:8b:8a:be:4a:5f:f1:
6d:1d:a8:77:fd:6e:36:c7:1a:a2:69:bd:38:fc:69:28:31:61:
b7:b7:af:cf:14:7b:1a:14:51:f9:5b:c0:10:15:5f:f8:f8:d5:
73:fb:15:92:d1:c6:19:2a:38:89:4f:73:4d:a1:f1:43:64:53:
c3:2d:f2:d1:4b:8b:45:25:8a:64:4a:80:07:cc:0f:c8:fc:46:
14:80:26:dd:00:f5:9f:fa:60:34:b4:60:a3:49:4a:04:33:aa:
0a:e1:0f:7a:c4:da:41:e0:25:ec:7a:cc:d8:d0:39:02:b8:33:
fc:1b:49:15:bf:36:c2:51:89:3a:7f:87:ae:ad:29:ea:ce:7f:
d5:16:f5:ad:d3:8d:c0:c8:8c:a1:d6:e5:12:b2:df:96:2b:42:
ed:bf:5c:0d:ea:1c:6c:1a:91:1f:34:85:17:d5:42:ba:d8:93:
c2:20:a4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:43:47 2025 by rpki-client