Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/vukdtTF8gJW6aLYtFAgpB-1xyO0.roa
File: vukdtTF8gJW6aLYtFAgpB-1xyO0.roa (raw, json)
Hash identifier: m3ugJ7KMai4fpszgDOIdVX816p3QuqcOk8kPIMOxT+c=
Subject key identifier: BE:E9:1D:B5:31:7C:80:95:BA:68:B6:2D:14:08:29:07:ED:71:C8:ED
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 01942143C5F536FD4B0EAEA35ED8DD1553BE
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/vukdtTF8gJW6aLYtFAgpB-1xyO0.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48737
IP address blocks: 31.210.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c5:f5:36:fd:4b:0e:ae:a3:5e:d8:dd:15:53:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bee91db5317c8095ba68b62d14082907ed71c8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:26:19:e2:35:51:e4:5c:31:9a:50:b5:90:
65:08:dc:e0:c9:0b:ad:5b:f7:9e:97:8d:50:4b:98:
fa:49:a2:13:d2:06:a4:30:fc:49:cf:dc:ac:d3:07:
4e:cf:80:6d:28:21:bc:08:1b:72:0b:69:8e:50:d1:
54:07:05:28:6a:df:f9:57:70:4a:dc:6f:51:84:da:
30:d8:17:a9:ab:11:50:aa:e9:31:50:4f:77:0a:9a:
50:5a:a0:d8:b7:53:14:5e:fc:6d:ea:ea:45:a4:97:
c7:c5:de:bf:51:fa:ea:70:aa:7b:22:9e:d8:a6:3a:
b1:dc:6a:4f:b7:e8:c4:b9:a2:17:6b:97:c7:48:bd:
fb:2f:d3:d9:a6:1b:60:7f:af:70:28:a9:8b:d0:df:
e7:46:62:a2:99:64:69:54:32:f5:14:0d:6a:29:77:
9d:c7:d4:24:3a:72:d6:b2:f6:af:c7:e5:0b:e6:ce:
ed:2c:30:ad:d8:1b:cc:fa:82:66:e5:98:4c:71:38:
ee:57:87:b7:2d:3e:52:07:42:0b:03:e5:fe:78:e4:
0b:6a:c1:85:db:f2:9d:76:3f:39:ef:5d:77:a2:d8:
98:e0:49:b3:30:41:c3:49:60:75:6e:a0:47:e6:b8:
c2:2f:5c:35:49:87:b9:38:bc:2e:ea:0a:36:c9:7d:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E9:1D:B5:31:7C:80:95:BA:68:B6:2D:14:08:29:07:ED:71:C8:ED
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/vukdtTF8gJW6aLYtFAgpB-1xyO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.62.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:28:42:35:5e:3c:d3:c0:00:7f:62:3f:82:37:de:a7:14:24:
32:38:2e:a6:90:1a:fb:26:47:08:8a:34:dd:d1:4f:25:a7:73:
32:46:b4:54:bb:bf:fd:b6:c2:cf:fa:23:06:eb:14:ee:a1:a0:
aa:7d:22:4a:70:3c:1d:f6:58:8e:94:68:28:1b:fd:2b:bc:cd:
76:ce:fe:10:4a:55:46:8e:f8:bd:5e:58:86:9c:72:99:22:24:
e7:a5:7f:49:75:ef:5a:b4:d4:13:c5:bf:0a:4c:ba:ba:7d:7c:
ad:e1:79:0e:37:04:8f:90:45:63:e9:0e:5d:62:3f:21:8f:b1:
26:9a:3c:15:74:cb:63:b2:99:f3:b4:0c:73:f3:e0:7a:28:c7:
b1:f1:25:27:2a:3b:b8:4b:5d:be:98:3e:15:a2:73:49:fe:bb:
4f:ee:4a:e5:12:5d:02:36:55:bb:4d:e8:59:87:c8:fc:45:d2:
4a:97:c0:df:fd:8d:66:2f:5d:64:c2:f8:80:21:c4:2a:2d:fc:
43:d6:20:67:a9:f1:ff:81:ca:72:3d:d7:48:2b:0d:39:55:33:
5e:da:87:29:7b:aa:c0:ba:ec:28:41:03:73:5d:95:69:14:03:
c5:f3:7a:f6:48:18:43:e1:6b:20:95:9f:76:32:61:d1:c2:57:
82:15:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:28 2025 by rpki-client