Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uvXITES_lafzOob5IKK5TqpvAA0.roa
File: uvXITES_lafzOob5IKK5TqpvAA0.roa (raw, json)
Hash identifier: J5QN9m7+T68qSz24qBS2QKaO7EswJahCWHCxA2p7yuI=
Subject key identifier: BA:F5:C8:4C:44:BF:95:A7:F3:3A:86:F9:20:A2:B9:4E:AA:6F:00:0D
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDBB4318E9BCD0AC06953BF5F42818
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uvXITES_lafzOob5IKK5TqpvAA0.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31477
IP address blocks: 2a07:3501:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bb:43:18:e9:bc:d0:ac:06:95:3b:f5:f4:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf5c84c44bf95a7f33a86f920a2b94eaa6f000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:7c:bf:4b:eb:3d:db:dd:7c:bb:45:d5:e8:
33:40:b3:34:57:f5:61:46:9b:ab:4b:3b:3d:e4:aa:
cb:a5:3a:73:11:8d:c0:67:cc:e1:62:63:0c:89:91:
4a:50:1a:1f:80:50:b0:fa:5d:75:2e:d7:a8:f4:14:
ff:2a:2f:83:74:44:ad:eb:67:84:fb:4a:5b:b8:37:
8d:15:e7:06:04:6a:df:1c:48:8d:28:ea:b1:0b:5f:
dd:f4:97:92:1c:2a:79:7c:50:00:f4:d6:14:5f:eb:
4b:04:42:08:3e:12:ed:05:3e:6c:fb:ef:0d:8c:c3:
d2:1c:de:0b:dc:dc:20:17:fa:2d:e0:b8:3c:42:90:
d5:0e:80:d1:23:42:08:bf:32:99:aa:cd:51:45:be:
f3:64:01:7c:a2:01:0b:f8:99:bf:d0:a0:a5:20:92:
fd:10:26:40:ec:03:c0:af:a4:0d:83:1e:c4:e2:12:
df:ad:c8:d8:b7:5b:14:c4:3e:90:43:8d:7a:a3:87:
47:8a:d9:ee:69:79:fa:5e:79:93:b8:a0:c5:70:48:
27:ba:f8:00:7e:6c:8c:eb:04:67:48:ab:77:ac:ef:
ed:21:ad:07:94:0b:12:98:ba:6a:5a:e0:4b:2f:cd:
0b:86:59:5b:d9:c6:87:dc:41:34:a6:95:71:25:b0:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:C8:4C:44:BF:95:A7:F3:3A:86:F9:20:A2:B9:4E:AA:6F:00:0D
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uvXITES_lafzOob5IKK5TqpvAA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3501:1020::/48
Signature Algorithm: sha256WithRSAEncryption
1f:24:c4:88:66:d7:0f:d4:8e:46:06:1f:e8:15:46:7b:ce:43:
a8:79:29:50:bb:6a:e0:54:97:e5:8d:cd:3a:5e:c8:e7:a7:c2:
7a:8a:9b:72:ed:b0:fe:c7:9e:03:f6:ee:a8:b6:ee:10:f7:06:
9d:a6:e1:aa:ad:c9:06:cd:af:f6:b9:c0:9e:1b:90:68:82:0b:
b6:37:13:3a:c2:88:ca:a7:2e:90:15:60:30:a4:1d:0e:96:3a:
78:1d:f4:ce:28:ac:79:42:28:b3:07:22:10:91:5e:e4:b5:e0:
4f:b8:57:e9:02:0d:24:39:d7:40:b6:0a:0a:ec:1e:ba:fc:c5:
89:87:0d:b0:9c:db:1f:e6:0e:b0:ad:37:b6:30:31:18:ff:13:
84:e3:fc:d8:32:3b:75:fe:09:af:68:b6:3d:0b:fb:2b:5d:1f:
b2:f4:77:00:4c:fe:5b:f6:00:2d:84:78:37:24:dc:78:44:d5:
db:6f:ca:09:de:bd:7d:ac:fc:14:d7:af:3a:92:4c:4f:c1:b1:
a2:aa:dd:94:d3:a8:df:ca:1f:95:18:6c:cf:24:2b:f8:e3:73:
f1:5f:02:20:da:ed:f7:16:c6:bd:0a:65:64:e8:79:9a:df:35:
60:d5:40:a0:52:66:3e:ad:b6:4d:4c:93:29:bb:0c:ad:07:dc:
a6:c1:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:33 2025 by rpki-client