Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/UtNq26d9JSb_Nw7v93_rZSfntfI.roa
File: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (raw, json)
Hash identifier: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=
Subject key identifier: 52:D3:6A:DB:A7:7D:25:26:FF:37:0E:EF:F7:7F:EB:65:27:E7:B5:F2
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DF04625A69F184F0B65B3B3D59197
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/UtNq26d9JSb_Nw7v93_rZSfntfI.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61209
IP address blocks: 79.127.64.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f0:46:25:a6:9f:18:4f:0b:65:b3:b3:d5:91:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52d36adba77d2526ff370eeff77feb6527e7b5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:3f:1f:cb:29:3c:88:a8:bc:97:3e:4f:4b:
b1:cb:03:35:90:58:6a:0e:09:53:ea:b5:09:5e:59:
44:22:fe:88:bd:65:5d:31:1e:62:b5:ef:56:62:1c:
fb:00:1f:70:a0:a7:70:43:48:e1:5e:96:32:ce:e7:
69:4b:39:4f:92:53:f3:2e:cf:f7:95:69:dc:fa:9a:
3a:86:c4:4d:56:c1:6f:38:9e:19:7b:5e:da:8f:e7:
ad:73:63:e6:e7:a9:a5:2a:1d:90:66:db:85:ee:9a:
a7:cf:30:09:cb:96:2b:cc:6b:47:9e:23:6d:30:3e:
88:0a:2f:84:bd:5a:62:c0:f4:8c:81:52:e7:e3:cf:
5e:2f:29:a2:88:8a:d1:3a:45:30:fc:f6:0f:71:0a:
b3:da:00:ed:9a:75:95:46:9c:7c:3d:7e:08:17:67:
02:f1:da:18:1f:c9:3b:6b:e3:9f:35:72:c1:bb:ff:
99:eb:92:92:c5:6d:5c:9e:7a:3b:83:1c:fc:ce:ed:
90:f1:bb:a4:34:c6:0b:ff:5b:a2:6e:3b:c4:45:eb:
76:fa:f9:ee:3e:8f:56:15:d6:3c:49:f3:b1:d3:ed:
d0:b8:e2:06:75:53:9d:9f:6f:f8:6a:4f:79:e6:e5:
47:67:cc:fb:97:1a:fc:49:8e:c8:fe:4a:18:1f:95:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D3:6A:DB:A7:7D:25:26:FF:37:0E:EF:F7:7F:EB:65:27:E7:B5:F2
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/UtNq26d9JSb_Nw7v93_rZSfntfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.64.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c5:01:e6:9c:86:58:6a:4e:42:4d:fb:b6:f2:7f:c2:59:2f:
72:ea:21:8a:24:cc:16:fc:64:a1:c6:65:5b:61:91:46:6a:63:
85:1c:5c:6f:9e:7c:f1:c2:42:c0:d7:c6:84:d0:6e:fc:a8:36:
12:39:41:1d:69:7e:74:7a:dd:38:84:7f:5e:17:c0:f8:10:16:
76:e1:a1:a0:00:63:49:01:e4:59:65:0d:23:08:bc:18:1d:ba:
c9:1c:ab:a1:42:12:ae:25:20:cf:bf:10:81:20:8b:82:db:ce:
ec:1c:d6:fd:f7:50:0e:dd:77:4c:bb:71:c6:28:6e:0a:f2:19:
fe:93:a1:cc:4b:05:75:81:3d:0c:16:a6:ce:48:2c:d1:c4:37:
33:73:3f:d2:8c:91:20:76:4a:96:f1:0a:81:11:a2:ad:f5:a6:
10:ee:6f:d7:90:27:58:d3:9f:a3:2b:10:23:8b:fd:a7:41:8e:
7d:2f:2e:e2:fd:5c:ea:7d:60:f4:28:2c:53:ad:ee:63:1c:76:
55:48:7e:2d:19:ca:4a:6f:d6:8a:f8:f0:a3:f2:e1:76:5b:ac:
eb:d8:f6:e2:19:d0:62:05:a4:7b:2f:b8:2e:d7:74:53:fe:46:
1d:ba:01:5c:88:19:60:6c:8f:ba:fc:31:d1:38:18:f8:12:6e:
65:aa:1f:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijfBGJaafGE8LZbOz1ZGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjUwMTAxMTU0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmQzNmFkYmE3N2QyNTI2ZmYzNzBlZWZmNzdmZWI2NTI3ZTdiNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySI/H8spPIiovJc+T0uxywM1kFhq
DglT6rUJXllEIv6IvWVdMR5ite9WYhz7AB9woKdwQ0jhXpYyzudpSzlPklPzLs/3
lWnc+po6hsRNVsFvOJ4Ze17aj+etc2Pm56mlKh2QZtuF7pqnzzAJy5YrzGtHniNt
MD6ICi+EvVpiwPSMgVLn489eLymiiIrROkUw/PYPcQqz2gDtmnWVRpx8PX4IF2cC
8doYH8k7a+OfNXLBu/+Z65KSxW1cnno7gxz8zu2Q8bukNMYL/1uibjvERet2+vnu
Po9WFdY8SfOx0+3QuOIGdVOdn2/4ak955uVHZ8z7lxr8SY7I/koYH5XaQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFLTatunfSUm/zcO7/d/62Un57XyMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvVXROcTI2ZDlKU2JfTnc3djkzX3JaU2ZudGZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT39AMA0G
CSqGSIb3DQEBCwUAA4IBAQDMxQHmnIZYak5CTfu28n/CWS9y6iGKJMwW/GShxmVb
YZFGamOFHFxvnnzxwkLA18aE0G78qDYSOUEdaX50et04hH9eF8D4EBZ24aGgAGNJ
AeRZZQ0jCLwYHbrJHKuhQhKuJSDPvxCBIIuC287sHNb991AO3XdMu3HGKG4K8hn+
k6HMSwV1gT0MFqbOSCzRxDczcz/SjJEgdkqW8QqBEaKt9aYQ7m/XkCdY05+jKxAj
i/2nQY59Ly7i/VzqfWD0KCxTre5jHHZVSH4tGcpKb9aK+PCj8uF2W6zr2PbiGdBi
BaR7L7gu13RT/kYdugFciBlgbI+6/DHROBj4Em5lqh+W
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:45:56 2025 by rpki-client