Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/U5Y7YWVXNPPm9KoqmwsivloXzrs.roa
File: U5Y7YWVXNPPm9KoqmwsivloXzrs.roa (raw, json)
Hash identifier: ca5vcs2GJ+zXpmrDaBzBSEBE+1Vnejqdln+cTCo9uxU=
Subject key identifier: 53:96:3B:61:65:57:34:F3:E6:F4:AA:2A:9B:0B:22:BE:5A:17:CE:BB
Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial: 01942521BCB0358F2FCF6E81DA1647DA6698
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/U5Y7YWVXNPPm9KoqmwsivloXzrs.roa
Signing time: Thu 02 Jan 2025 03:49:15 +0000
ROA not before: Thu 02 Jan 2025 03:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201299
IP address blocks: 185.26.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bc:b0:35:8f:2f:cf:6e:81:da:16:47:da:66:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53963b61655734f3e6f4aa2a9b0b22be5a17cebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:2f:3f:3a:84:4b:94:8c:a6:0a:1e:6a:6b:
2c:da:c7:f2:6d:04:1c:39:61:f6:56:f7:9d:84:26:
a9:14:9a:29:86:d8:b9:44:e2:c9:ae:73:90:14:b6:
e6:06:cb:a1:ee:02:45:6c:23:6a:78:ac:09:eb:2c:
cf:83:cc:03:98:25:16:a5:80:75:69:a0:4d:72:47:
da:69:25:f2:02:81:61:2a:7a:57:ea:41:10:c9:f6:
db:de:c5:e0:d6:df:41:95:0b:ad:e0:ae:4a:d5:9e:
19:96:92:67:8f:4e:36:bd:05:0f:f4:91:d9:c1:3f:
fc:4b:bd:40:fc:30:1c:48:78:f9:1f:e1:cf:5d:16:
6a:f2:14:ca:90:9c:6b:db:c9:36:40:da:aa:dc:b8:
44:ff:66:96:6b:65:09:f8:05:20:2f:dc:72:6f:31:
87:e9:1c:d0:a8:5b:46:a4:5e:4f:65:9e:06:9a:e1:
bd:e3:b3:be:f7:ce:4c:7b:31:57:3b:4a:eb:60:0b:
9d:25:0e:93:59:e1:ae:eb:72:c0:a5:f5:e8:ca:10:
fe:f1:47:7e:3e:51:17:e5:bb:ab:3c:75:aa:da:9b:
df:48:50:03:53:3f:a4:19:2c:51:0f:1d:e2:3d:64:
05:4e:1e:6a:a7:59:29:23:ad:04:ec:23:0b:f8:b5:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:96:3B:61:65:57:34:F3:E6:F4:AA:2A:9B:0B:22:BE:5A:17:CE:BB
X509v3 Authority Key Identifier:
keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/U5Y7YWVXNPPm9KoqmwsivloXzrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:42:e2:e6:60:9f:da:83:cb:7f:71:d8:d0:67:bb:14:0a:99:
df:14:38:f1:f5:f1:c5:9e:c7:5b:45:9a:d1:b3:dc:20:5f:2c:
5d:08:b1:20:99:71:5c:d8:84:7e:e0:66:d1:0c:c6:10:38:53:
5a:f0:01:b1:6d:c1:f8:75:c0:06:f0:54:93:78:22:c1:b5:79:
ff:bb:dc:fc:63:d4:bf:64:93:c5:97:54:14:13:dd:96:57:d9:
48:40:31:81:ec:73:81:da:fa:63:bb:92:d5:74:7f:11:d5:8f:
3e:6e:7c:e8:91:da:85:2f:44:2c:d6:22:ec:18:e8:2f:38:8e:
18:f8:87:45:5e:e8:6d:9e:36:49:7f:58:9b:0c:56:de:35:6d:
a4:9b:68:6d:0f:ea:e9:79:f3:84:bb:d4:50:6e:8e:50:f5:7e:
17:2b:ea:b0:bf:7c:bd:5d:2f:d1:cb:15:c5:f8:21:b4:b0:ef:
62:b7:7d:fe:6d:88:8d:fc:02:ec:37:f4:b2:33:8a:d3:60:31:
b0:3b:13:c4:b9:9f:5e:56:2b:46:5a:75:2a:f4:a1:88:92:38:
bf:cd:29:0a:13:6d:86:f4:80:83:35:92:cf:c1:7e:93:df:ff:
58:e3:a4:ce:d0:dc:d7:60:6e:5b:b1:db:92:d9:56:46:d6:00:
12:47:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:40 2025 by rpki-client