Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa
File: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (raw, json)
Hash identifier: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=
Subject key identifier: BA:F7:AC:8E:85:60:97:D3:4C:FA:6D:41:20:53:39:62:5F:5D:18:FA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019473BA2480E19709FA167933AD19B95641
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa
Signing time: Fri 17 Jan 2025 10:06:06 +0000
ROA not before: Fri 17 Jan 2025 10:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1133
IP address blocks: 130.89.0.0/16 maxlen: 24
2001:67c:2564::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:ba:24:80:e1:97:09:fa:16:79:33:ad:19:b9:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Jan 17 10:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf7ac8e856097d34cfa6d41205339625f5d18fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:81:7d:3a:8b:dc:b7:5f:21:e7:55:c7:da:
72:6e:db:c8:d5:d9:1e:52:b9:e7:e3:2f:8a:72:fe:
a4:d0:3e:96:4d:71:f9:32:d9:5b:5c:ec:51:b1:6e:
8d:f8:bc:2b:3b:f2:a8:93:9f:69:7d:ba:6d:c8:15:
b7:c9:b6:06:41:f1:77:b3:29:8d:4b:bb:70:46:79:
5f:bd:fd:ad:36:2b:f3:ca:b7:97:d9:54:07:c9:69:
36:0d:c0:fe:9b:e9:2c:74:f8:3b:77:2e:41:6f:f2:
15:ed:64:a7:36:46:70:97:c4:54:ce:59:9e:d4:64:
74:d8:51:f5:24:3d:c7:c1:11:4e:df:23:8b:15:b4:
2b:47:37:34:b0:6b:8c:d9:df:a8:7e:25:a3:87:08:
74:8c:28:1d:b0:ce:18:67:e6:e5:3c:3f:ba:1b:46:
db:ec:b5:fd:44:3d:31:b7:0e:ab:8d:86:5c:d5:66:
3c:7b:a3:91:72:c1:df:ba:6c:91:0c:9b:03:81:ff:
d0:1a:11:f4:ac:26:9a:48:62:0b:59:9b:37:3e:17:
40:2b:d7:86:97:9d:5d:1d:b1:94:35:33:c1:20:3d:
1e:83:54:25:3d:c1:f2:46:be:50:b2:07:dd:45:9d:
ea:1b:59:fa:8a:69:fd:aa:02:1c:30:9b:24:a0:d1:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:AC:8E:85:60:97:D3:4C:FA:6D:41:20:53:39:62:5F:5D:18:FA
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.89.0.0/16
IPv6:
2001:67c:2564::/48
Signature Algorithm: sha256WithRSAEncryption
37:4d:32:d3:cb:92:7f:df:c5:cd:87:68:2d:ff:70:fe:4a:44:
19:10:3a:73:49:91:e1:09:1d:8e:15:30:ff:43:c4:94:d9:ff:
24:7e:dd:94:15:b0:3f:20:69:c5:81:f8:62:6f:cb:a0:95:be:
55:e4:ba:5f:21:8a:59:2a:9c:c8:74:cc:f7:4c:db:fe:a9:81:
96:b0:16:57:78:b3:65:12:84:69:4b:ae:7b:e8:ef:ce:5d:4b:
be:8f:8d:27:e7:69:ec:8a:8c:d1:e0:5e:ba:0b:58:e7:2b:55:
e4:2a:d0:9c:da:cb:e4:23:93:2b:dc:20:da:53:b8:df:82:65:
3f:92:f1:82:58:32:12:7a:84:17:c4:86:45:f1:a0:67:c3:34:
0e:de:02:52:f9:97:3d:95:51:72:da:3f:a1:3b:62:47:73:cd:
f9:58:d8:dc:6d:54:3a:36:d3:1d:e5:de:9b:9a:f7:12:35:1c:
f7:5d:51:6a:39:51:ca:34:d7:d4:5c:ea:70:27:e0:db:e6:26:
6d:08:8d:c6:2e:68:ee:24:06:04:0e:1b:e7:55:77:a7:82:4d:
88:d1:b3:05:32:7f:89:0a:1d:34:f1:9a:f8:66:5d:74:ea:b9:
e6:8b:93:b0:a3:0f:da:b7:f1:4f:89:a8:31:eb:b5:53:cf:c2:
d4:d7:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:41 2025 by rpki-client