Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/UaJKVbl8EiyyoAw6lXXro-Wuz3s.roa
File: UaJKVbl8EiyyoAw6lXXro-Wuz3s.roa (raw, json)
Hash identifier: Ozc7qMu4htdM8UM/yQNltFLHC7MGe6PuOgzsEQ7laek=
Subject key identifier: 51:A2:4A:55:B9:7C:12:2C:B2:A0:0C:3A:95:75:EB:A3:E5:AE:CF:7B
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 0194252092355DF077F1CEC4F6BF1C5E0875
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/UaJKVbl8EiyyoAw6lXXro-Wuz3s.roa
Signing time: Thu 02 Jan 2025 03:47:59 +0000
ROA not before: Thu 02 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48737
IP address blocks: 193.42.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:92:35:5d:f0:77:f1:ce:c4:f6:bf:1c:5e:08:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Jan 2 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51a24a55b97c122cb2a00c3a9575eba3e5aecf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:a8:2b:2f:25:23:63:90:4d:68:52:a4:cf:
48:87:c1:a0:0a:af:6e:a3:3f:a1:24:66:18:bd:7c:
6a:7b:d7:6d:7b:52:2b:ea:8f:56:8f:90:24:d0:8d:
e7:6f:f2:43:02:0c:53:67:05:d9:64:ca:58:93:5e:
a1:4c:c2:22:6f:5d:57:5b:db:c7:fc:45:43:81:e5:
c1:53:ba:42:af:5a:36:11:26:e2:d3:28:2a:db:83:
8b:d3:43:b7:6e:d5:6a:54:13:d3:e2:8c:3e:c5:a1:
92:44:f5:c6:7a:d7:eb:92:6b:44:5c:b7:a8:4c:46:
5e:b1:c6:b1:0c:0a:96:cd:a6:30:60:7b:41:40:92:
ad:01:4b:ab:48:e4:78:58:8a:21:88:23:fe:50:06:
f5:b2:3f:69:02:ae:19:59:98:35:ed:ba:b4:22:c2:
6b:c4:2b:4e:35:dd:3b:57:af:1d:bf:ac:f5:1f:33:
13:fa:12:df:90:79:e5:98:5d:fe:55:0d:84:4c:ff:
2b:83:e8:a4:32:31:b7:c6:e1:86:5e:96:6e:57:e6:
52:81:16:ed:a5:94:a0:dd:bd:7f:1d:b2:9c:a5:99:
d1:bc:a4:98:6f:fe:25:bc:4c:1a:bc:43:63:b6:65:
63:1b:09:f5:66:67:04:eb:67:e5:8c:57:8a:08:30:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A2:4A:55:B9:7C:12:2C:B2:A0:0C:3A:95:75:EB:A3:E5:AE:CF:7B
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/UaJKVbl8EiyyoAw6lXXro-Wuz3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.100.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8a:25:76:d1:4f:b3:4b:0b:78:83:99:fe:0c:aa:48:db:b5:
37:7c:69:e8:b4:90:a6:1b:5e:2e:9f:1f:03:5f:11:34:f2:e1:
d9:2d:ce:2f:b2:f2:6d:87:87:fc:44:5e:12:16:ac:55:0d:a2:
69:fa:f5:f6:c7:fc:7c:49:e3:05:6b:8a:31:de:25:26:ba:f3:
1b:09:37:e9:50:00:54:99:a4:af:16:cf:cf:0f:8b:6b:67:4d:
08:0a:71:fc:65:26:76:c3:4e:43:c4:76:89:4f:90:2b:b0:6f:
9a:3c:89:e3:6e:94:df:42:eb:06:7e:c0:e7:85:54:53:bc:9e:
7f:ed:52:8e:1a:a5:5b:34:5e:74:ff:68:f6:c2:5b:a5:23:62:
b4:df:fd:7d:32:43:42:16:2b:0b:19:78:fe:76:36:48:da:d3:
c1:56:0b:b2:c8:14:6a:f0:37:ed:fc:b7:d9:63:05:05:fa:f0:
58:54:5d:c5:2a:18:17:e9:5a:4e:70:08:2e:43:b9:e3:bc:01:
37:1c:f2:35:64:7f:66:44:af:89:81:a3:06:65:19:17:ed:a5:
d2:d6:f8:38:af:b5:20:54:f5:d2:07:e1:4f:36:63:3e:a6:69:
c5:6b:7d:d7:20:5e:10:ae:a5:e7:88:43:5a:30:35:4d:b7:1a:
3d:46:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:30:04 2025 by rpki-client