Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/uGxRV9xvwmbzbGaCasrg8Rf9law.roa
File: uGxRV9xvwmbzbGaCasrg8Rf9law.roa (raw, json)
Hash identifier: Y0xs+/GPPrQvLzpSrK1UBwKAExx9fAkHcrV4xP5+6Ig=
Subject key identifier: B8:6C:51:57:DC:6F:C2:66:F3:6C:66:82:6A:CA:E0:F1:17:FD:95:AC
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 0194FEFBCE0176746076D8960F9ED6376283
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/uGxRV9xvwmbzbGaCasrg8Rf9law.roa
Signing time: Thu 13 Feb 2025 11:05:02 +0000
ROA not before: Thu 13 Feb 2025 11:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 2a09:9340:1800::/37 maxlen: 37
2a09:9340:1806::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:fb:ce:01:76:74:60:76:d8:96:0f:9e:d6:37:62:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Feb 13 11:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b86c5157dc6fc266f36c66826acae0f117fd95ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:6b:72:68:61:ee:ed:ae:73:71:93:d5:64:
53:6f:d3:95:51:4e:ba:f6:a4:34:4a:84:dc:32:b9:
c7:d0:6d:df:a6:5c:87:da:4d:b3:af:7f:05:4c:2c:
23:29:14:50:b6:32:db:fd:7f:89:c5:b2:fe:04:31:
33:eb:e8:d0:d4:09:35:96:43:4f:32:3d:9e:b9:16:
81:4d:88:93:9b:ef:0f:29:f4:fc:f4:32:e2:01:3d:
5a:1f:19:9e:e5:08:f4:88:0a:4a:9a:d6:21:2b:00:
33:de:eb:c2:21:14:66:ef:d2:34:a5:42:27:3d:64:
cf:a2:f3:2a:c7:3a:7e:b7:c6:c8:30:2d:35:52:e4:
e3:65:26:b4:38:ec:01:f2:c3:84:66:02:75:3a:f4:
14:f9:0b:21:2e:70:a2:e6:63:11:c6:f2:0c:50:42:
9d:5e:e5:4c:d8:f4:61:77:4e:2b:fb:da:a0:f9:41:
50:c6:29:9c:65:b6:c1:cf:9b:6c:91:9b:ba:96:7f:
a2:20:54:a5:9f:69:cf:16:e8:6d:f0:b1:0c:78:ee:
3e:a6:90:97:55:4f:dd:41:d7:ab:1c:2d:82:02:2f:
fa:39:1b:67:a0:14:f8:b1:f9:5a:da:b9:e7:27:b2:
59:16:91:ce:55:f9:37:38:00:c9:fa:d8:c7:9a:7f:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6C:51:57:DC:6F:C2:66:F3:6C:66:82:6A:CA:E0:F1:17:FD:95:AC
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/uGxRV9xvwmbzbGaCasrg8Rf9law.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9340:1800::/37
Signature Algorithm: sha256WithRSAEncryption
67:7f:cb:c2:af:1d:47:f3:d2:a7:2e:4d:0d:10:1d:23:15:ff:
81:c9:16:d5:e8:64:24:cb:ba:26:3d:f8:a4:1b:d2:87:b7:3c:
7e:70:a1:1f:15:dd:d1:18:d3:6a:9e:75:09:f1:5b:a6:dd:59:
71:2b:20:0e:1c:23:25:96:73:dc:00:fe:ed:af:ca:40:3d:35:
2a:ff:0f:7e:8a:10:bf:7e:95:33:03:d9:c5:1c:33:62:89:4d:
d0:7e:bc:f8:a8:d0:0a:af:62:36:90:dc:3b:de:c9:b0:79:d7:
e2:44:a8:c3:d6:1c:0e:84:a8:70:bc:68:fd:c3:9d:92:2e:b9:
b6:47:df:f9:b3:d5:4c:84:3d:b1:f0:aa:eb:11:63:17:d5:82:
b6:bc:36:ec:d6:93:26:52:b7:4e:20:5e:83:87:46:a3:d4:5b:
f3:69:f0:b0:0a:b9:ca:1a:8f:fb:e4:5d:ce:46:c4:f4:d2:16:
3e:c5:fc:a0:6c:0a:d8:e6:b1:4b:d2:79:2e:f4:7b:69:8e:01:
dc:20:22:6a:15:a1:80:18:b6:75:fd:1b:21:37:d0:dd:0f:94:
ef:be:39:74:0c:01:dd:41:ea:e7:bd:dc:27:40:eb:90:a6:be:
95:f9:53:8e:7d:75:4c:a6:24:6a:0e:9b:31:9e:12:f8:33:45:
bb:a0:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:50:39 2025 by rpki-client