Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/uLyoln8iUo21XJeVRG0IGUytncA.roa
File: uLyoln8iUo21XJeVRG0IGUytncA.roa (raw, json)
Hash identifier: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=
Subject key identifier: B8:BC:A8:96:7F:22:52:8D:B5:5C:97:95:44:6D:08:19:4C:AD:9D:C0
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019547C1372A5F8408C6136C0DA29A61E5E0
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/uLyoln8iUo21XJeVRG0IGUytncA.roa
Signing time: Thu 27 Feb 2025 14:13:19 +0000
ROA not before: Thu 27 Feb 2025 14:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 149.232.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:c1:37:2a:5f:84:08:c6:13:6c:0d:a2:9a:61:e5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Feb 27 14:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8bca8967f22528db55c9795446d08194cad9dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:65:c4:b7:a4:c3:1c:a2:86:dd:9a:1e:c8:
c3:de:4c:b3:42:3b:8e:aa:85:5d:15:35:f1:e3:3c:
32:8e:b6:f2:08:65:76:22:48:89:2a:01:34:24:fd:
64:2a:cf:03:a0:87:4b:00:ac:bf:7d:26:e3:32:f1:
a9:82:b9:bf:45:0d:67:4b:9d:6c:55:73:14:f1:ad:
84:51:de:84:26:6a:8a:d3:21:3d:b7:24:e5:0c:ce:
d4:b1:99:75:4c:62:31:95:3e:30:cf:fc:e9:49:f1:
4f:a1:03:00:8b:94:f1:76:04:99:ea:17:36:be:43:
8c:07:61:5d:71:a8:92:27:18:bb:96:c6:b7:c0:8d:
59:93:8e:a7:11:b3:66:af:b6:cf:90:b2:ed:ad:33:
d8:95:ab:52:23:99:cb:0c:72:46:a7:be:ac:01:67:
d7:83:d7:5e:db:bf:07:c4:dc:f3:b1:5c:12:77:fb:
8d:ea:7a:a5:99:ce:b3:1a:58:8c:9c:6d:57:a3:b1:
51:7f:8b:30:5b:00:75:36:34:e1:05:16:0a:95:25:
1f:43:e1:fa:46:2a:b5:14:b3:c5:67:c7:d3:23:1a:
49:e0:b1:e0:7b:22:32:85:4a:90:c6:44:d3:79:f4:
e1:5e:1d:4b:d8:da:76:40:59:c4:5e:83:ea:bf:6b:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BC:A8:96:7F:22:52:8D:B5:5C:97:95:44:6D:08:19:4C:AD:9D:C0
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/uLyoln8iUo21XJeVRG0IGUytncA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:05:85:57:7b:59:6b:3e:83:cb:1a:9b:a7:69:52:38:af:b5:
f6:e8:56:3b:9c:f1:d4:1e:f9:62:98:26:14:1d:08:08:31:0c:
a3:fa:b1:10:78:c4:e4:35:93:03:29:e7:39:eb:29:68:a8:0a:
ce:0d:d2:48:b8:0f:f6:db:fa:0b:8d:40:1d:6a:30:00:bf:02:
c6:cb:7b:ae:42:92:9c:d3:f5:b5:bc:69:5e:40:53:8b:a7:93:
e7:08:1d:cf:83:58:f6:09:02:64:13:c5:77:31:09:12:6d:3d:
fc:78:91:83:2b:20:c3:82:9e:63:e7:07:54:b0:66:8e:a5:5d:
98:1c:60:6a:94:48:be:b4:0d:a3:74:e8:42:f0:88:20:3e:6b:
c6:dc:32:fc:64:78:2f:be:51:b8:f4:26:ad:3f:c0:20:1d:1d:
06:c0:70:16:d9:f7:0e:70:7c:33:52:fe:5e:82:b0:5f:11:54:
01:c5:30:3b:eb:74:e8:5a:97:0a:20:b0:be:9a:af:ac:34:5c:
4e:30:64:e5:5d:1f:aa:7d:05:8d:32:4a:1a:54:68:2a:0d:46:
2a:5c:4c:b5:eb:ba:72:5d:c8:f8:d0:b5:a4:0e:4c:15:dd:89:
9c:a6:16:a0:e4:26:33:7a:cf:b4:3a:2a:1b:fc:2e:ff:0a:f4:
44:53:7c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:17 2025 by rpki-client