Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa
File: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (raw, json)
Hash identifier: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=
Subject key identifier: D5:45:81:E8:38:8E:E5:77:55:DE:B7:BE:A3:CA:E7:BA:8A:80:E8:CB
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC12BAF7E105FF9B5C404EE88AE26A
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 81.22.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:ba:f7:e1:05:ff:9b:5c:40:4e:e8:8a:e2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d54581e8388ee57755deb7bea3cae7ba8a80e8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:ed:d8:ec:5c:70:8e:39:b8:2f:03:ab:59:
27:bf:2a:8d:dc:fc:49:ca:f7:d1:d5:0c:03:c1:8b:
c3:37:e7:47:1a:4f:99:41:e3:d4:a4:dd:9d:1f:64:
21:7c:99:28:55:23:d0:ca:6a:61:9f:88:68:10:c2:
86:1f:73:a4:6d:65:e2:e3:8a:00:07:61:e1:f3:f6:
f7:d3:b6:c2:37:dc:f3:40:91:4b:64:aa:94:bf:c7:
3c:dd:6a:0d:28:63:ef:73:23:80:26:ee:3b:01:99:
ab:4b:02:60:df:8d:17:1e:84:3e:8b:ad:00:ee:d4:
14:ec:8e:9e:23:86:fb:fb:4a:85:6e:16:c0:46:7a:
ca:76:a0:2c:92:e5:3f:9f:a3:73:6b:09:5f:a9:71:
dd:60:ea:d3:15:72:53:5c:8f:9f:46:7d:e9:26:8d:
b7:5b:19:60:83:6e:57:a2:4b:80:26:c6:b1:52:79:
0e:25:c7:aa:a1:de:ae:41:f4:8f:b7:11:73:7e:bc:
4d:75:24:1c:3d:7b:99:69:f8:f1:0f:b0:9a:45:78:
63:9a:1d:a4:31:26:33:9d:59:e7:cf:32:4a:52:7b:
48:ce:3f:aa:0f:5e:6c:b0:29:72:34:dc:1e:b6:de:
09:56:9b:79:c1:3a:03:bd:a5:d5:1e:51:83:d4:c3:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:81:E8:38:8E:E5:77:55:DE:B7:BE:A3:CA:E7:BA:8A:80:E8:CB
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:79:00:32:6c:1f:42:21:6c:90:ff:8c:df:9e:e7:26:5b:5d:
fe:0d:2d:a7:a3:d1:d5:3f:1a:7b:3e:2b:45:41:1d:1b:b0:26:
6b:c6:0a:07:bc:59:5b:0a:9b:d7:ad:23:9d:63:15:7e:f2:df:
59:da:c1:1c:d9:11:6d:81:b2:1f:ec:a8:e2:8d:55:e5:35:be:
e5:c0:10:f0:a0:42:fa:06:70:6e:cd:93:39:82:86:41:ff:6e:
b4:ef:96:03:df:70:5c:b6:f2:06:f9:12:14:f8:bd:73:3e:73:
9a:f5:a1:fe:df:f8:6e:f5:25:c2:c3:b1:64:52:cf:fc:43:f6:
9b:9b:21:de:43:9e:78:44:6a:dc:a6:25:8f:b1:68:80:78:01:
99:b2:d4:a6:e4:4c:b3:b8:b5:3e:d8:9a:2d:df:c5:65:17:05:
eb:94:b1:41:41:85:91:32:95:41:12:f3:e4:5a:21:ef:61:de:
40:06:95:3e:b7:16:41:9a:47:21:30:33:ad:c3:77:fb:8b:95:
47:89:6e:cb:6e:5d:f1:1f:62:be:10:71:5e:bb:be:1b:aa:bb:
29:bc:e9:3e:1b:98:e0:ed:d7:0e:97:32:ef:63:95:f9:a4:94:
fb:24:82:9b:aa:11:ff:b7:d5:84:8f:13:d4:de:81:fb:a2:15:
b2:e7:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:04 2025 by rpki-client