Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UrOVuz4MOghhYW2j-hy-PdrN-E0.roa
File: UrOVuz4MOghhYW2j-hy-PdrN-E0.roa (raw, json)
Hash identifier: KEchUddTM1bfu98vntzrdIibQnn7iZng2ETT3N0Q5A0=
Subject key identifier: 52:B3:95:BB:3E:0C:3A:08:61:61:6D:A3:FA:1C:BE:3D:DA:CD:F8:4D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01963561203345ACB88D9C9430A7475CD436
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UrOVuz4MOghhYW2j-hy-PdrN-E0.roa
Signing time: Mon 14 Apr 2025 17:37:59 +0000
ROA not before: Mon 14 Apr 2025 17:37:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215314
IP address blocks: 45.153.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:61:20:33:45:ac:b8:8d:9c:94:30:a7:47:5c:d4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 14 17:37:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52b395bb3e0c3a0861616da3fa1cbe3ddacdf84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:5a:95:33:6c:35:d9:71:69:07:2c:01:f2:
df:96:37:d6:ab:f0:29:58:4d:2d:e3:e1:fa:f7:fb:
da:59:43:b5:f3:10:2a:c4:17:8e:93:d7:ce:00:dd:
d2:83:04:af:60:5e:47:4a:28:64:5e:81:77:86:14:
85:0e:96:c6:56:6b:0c:45:70:11:b1:34:8f:e7:55:
a1:0e:61:7d:c4:12:70:a0:75:fd:e6:83:d8:76:f9:
1b:d0:cf:c2:5e:4c:ad:74:ca:5e:c6:c1:6a:eb:c8:
aa:14:7e:3c:04:6f:44:3a:da:92:9c:1a:9b:9f:bf:
e8:4a:76:55:64:8f:56:1b:64:da:4a:84:c4:cd:8c:
15:09:99:36:21:87:a4:a8:4c:36:ab:a8:85:af:70:
04:af:92:97:da:fc:8a:54:81:eb:88:1a:b8:9e:33:
2a:13:75:2d:5b:98:40:cf:03:f4:f3:ce:9b:9e:20:
f4:ad:85:53:2c:33:4e:02:a9:a4:7e:e1:1e:50:ea:
8a:37:0f:69:0c:64:55:88:82:21:e0:86:e3:c8:95:
d2:8b:dc:b9:c2:44:fb:a2:09:32:9e:98:8d:de:39:
47:6a:65:3f:78:d4:99:78:ce:6f:ac:d1:3a:66:70:
eb:84:54:f2:aa:02:98:39:99:60:cf:39:6a:93:87:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:95:BB:3E:0C:3A:08:61:61:6D:A3:FA:1C:BE:3D:DA:CD:F8:4D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UrOVuz4MOghhYW2j-hy-PdrN-E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.49.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cc:b6:6e:10:42:ad:0d:21:5d:32:7a:f5:38:49:fe:b4:a0:
ff:e2:52:ca:cf:94:a6:12:d2:1a:66:d7:32:a4:16:b8:96:1f:
ed:ca:1a:30:46:08:c0:00:c9:4d:e8:d5:16:fa:9e:47:88:a8:
03:49:2c:09:34:08:89:8b:51:7d:12:f1:ed:32:86:b5:e1:2e:
18:e5:58:ea:b2:d9:24:8a:c9:c3:4e:07:52:82:db:64:53:0c:
37:a5:f6:b0:74:30:f0:d2:04:4d:32:e1:a8:a2:5b:58:4e:72:
a6:11:0d:d5:0e:37:61:bd:7c:40:86:66:0c:d5:3c:85:0d:2a:
fa:ce:fa:f5:32:ca:f1:ea:6c:60:d3:85:0b:ef:74:3a:21:84:
4e:31:d2:ba:40:45:e7:3b:dc:d1:85:49:12:77:b6:93:f8:40:
3d:c5:1a:01:f4:df:d6:8e:55:5a:ff:47:15:0b:a0:55:8f:09:
db:81:15:0d:da:10:c7:c3:78:43:dc:95:a6:b4:95:11:3d:4d:
ab:63:ea:54:e0:9b:47:3e:42:67:50:1e:8a:85:b2:57:c9:d8:
ae:d2:46:6c:34:91:82:e1:58:0b:c7:75:19:fe:ac:e5:7a:9b:
cb:0a:4a:a1:7e:39:1c:4a:53:2a:af:4d:89:82:c5:7e:75:f0:
dd:ad:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:04:13 2025 by rpki-client