Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Ux9674M8NjPfocnrYudKeCUjMbo.roa
File: Ux9674M8NjPfocnrYudKeCUjMbo.roa (raw, json)
Hash identifier: FHnDbBZXh+K5rsgYdlcJ2kPhhFwRgdi5MK2KNTvvH+c=
Subject key identifier: 53:1F:7A:EF:83:3C:36:33:DF:A1:C9:EB:62:E7:4A:78:25:23:31:BA
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 0195A05575114D0106369EB70A32A49ED569
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Ux9674M8NjPfocnrYudKeCUjMbo.roa
Signing time: Sun 16 Mar 2025 19:01:49 +0000
ROA not before: Sun 16 Mar 2025 19:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48687
IP address blocks: 91.221.136.0/23 maxlen: 32
91.240.190.0/23 maxlen: 32
151.0.52.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:55:75:11:4d:01:06:36:9e:b7:0a:32:a4:9e:d5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Mar 16 19:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=531f7aef833c3633dfa1c9eb62e74a78252331ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:d4:68:1d:dd:62:28:64:3f:15:70:8a:8a:
d4:67:df:59:80:69:cc:7a:4c:07:20:f6:e6:b2:c6:
c9:db:f0:94:df:4f:29:fc:c4:cd:27:ee:1d:6f:6e:
09:f9:4a:e8:88:ad:7f:5f:4d:1b:70:3e:35:51:23:
a8:22:2d:10:7e:58:9d:b2:0f:80:b0:8e:05:34:b8:
4a:12:40:b7:12:ff:5c:6a:0c:81:d7:8f:54:22:00:
c1:d1:3a:b5:13:c6:54:e7:6a:f9:1b:a1:15:04:d4:
b2:c7:df:b1:61:02:f2:b8:82:67:c7:04:a3:34:d6:
da:c9:ae:b8:b2:f9:7b:a0:0f:81:96:7f:87:a3:11:
20:d1:03:17:3d:e3:64:b9:92:0b:36:63:bf:2f:59:
cc:85:fc:7f:04:83:65:32:77:dd:c3:fe:fb:bf:9e:
84:17:9b:73:01:3d:aa:8b:18:9c:52:9b:9e:01:e1:
b3:fa:3d:7a:7c:6e:e3:c4:e2:00:0a:e2:c5:79:42:
74:22:25:22:4e:5c:ba:bf:0f:fa:a0:11:01:b1:23:
ca:a8:9e:d7:6b:30:3d:0c:f5:91:e2:ad:c6:b1:71:
35:a9:52:2a:10:05:a7:8a:18:83:6c:6b:ed:91:b8:
a3:a9:e4:d0:98:18:14:fc:f8:9b:8c:8c:bf:90:0e:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:7A:EF:83:3C:36:33:DF:A1:C9:EB:62:E7:4A:78:25:23:31:BA
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Ux9674M8NjPfocnrYudKeCUjMbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.136.0/23
91.240.190.0/23
151.0.52.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a2:26:9c:ed:8e:4d:62:e8:c2:d9:6c:db:fb:50:a2:a0:b4:
61:b2:38:31:6d:a7:d6:a9:3e:c0:54:96:62:dc:af:35:af:fa:
1b:48:a5:3a:ea:93:48:5b:27:1d:dc:0c:05:fb:41:10:d2:a8:
98:88:3d:08:32:c0:11:25:2a:62:b9:a4:22:d3:49:85:c3:54:
83:45:7f:c3:71:75:ef:fc:13:73:f8:39:fe:39:ff:26:15:46:
55:6d:f5:00:cc:e7:0d:c0:0a:15:dc:6e:3f:55:28:fc:ce:5b:
56:96:1b:1b:0c:fb:7e:d3:5a:10:4f:ff:f1:65:a1:bc:30:c7:
b7:34:44:71:6e:52:d2:74:e3:c4:87:ec:9b:10:5f:0a:6e:38:
39:da:b7:da:e0:72:5d:db:c3:18:5e:a0:4d:88:2e:40:f0:ac:
c8:27:1e:13:77:6d:a4:19:d4:48:ba:6e:52:43:69:96:49:93:
01:c1:23:b8:b1:37:3b:c5:c1:94:ca:cb:35:79:42:73:08:e2:
0d:86:23:01:60:94:b1:48:60:d1:d1:64:9f:bd:89:9b:b2:23:
b7:06:9a:82:94:94:d3:38:3a:27:46:e0:d8:fa:81:92:2b:a6:
e7:c4:33:89:c5:09:61:3a:ab:36:7f:34:55:af:62:47:1c:9c:
2f:51:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:38:56 2025 by rpki-client