Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa
File: UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa (raw, json)
Hash identifier: HnBuQV/6MGAsdCkHVntRtFAvZeGR4LaMonjb9Ez79gg=
Subject key identifier: 53:05:9C:21:AA:90:44:4D:43:41:11:2A:53:23:CF:D8:A1:59:A6:44
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 019423D6B26CABB43DDA90BF32FD3D542B3C
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13237
IP address blocks: 185.190.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b2:6c:ab:b4:3d:da:90:bf:32:fd:3d:54:2b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53059c21aa90444d4341112a5323cfd8a159a644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:2a:20:3f:f4:8a:30:d8:fc:25:30:e0:97:
2b:d2:02:e2:a8:22:91:ba:fe:ea:1c:49:ab:a5:3d:
89:b4:28:49:a0:cc:08:39:90:fb:c5:9b:62:da:8a:
3e:46:33:df:e8:b5:50:ae:36:23:a5:47:0b:c1:32:
ed:78:52:c4:4d:cf:30:0e:89:a4:2e:36:4d:ee:2b:
0b:8a:16:0c:ce:96:45:c5:85:43:7d:16:fa:17:5a:
a4:c8:e9:63:e2:6d:69:e4:99:8a:bd:1f:ad:4e:a0:
b7:b5:b2:f6:f8:0e:78:54:10:d9:9d:93:5a:f4:1a:
3c:33:6f:b0:7c:df:a6:4f:bb:47:8e:b8:33:96:ce:
ea:ba:a7:e1:a5:e2:31:1f:72:ab:b7:1c:79:61:9d:
44:f6:9f:dc:48:3f:55:08:85:ca:12:96:2d:38:9e:
9b:1b:0b:02:0f:d9:e7:0c:e6:4a:05:2b:a1:9e:13:
ff:2d:ec:46:41:f0:45:89:9e:8d:6b:25:c8:2a:26:
93:21:c2:da:f9:ad:59:e3:28:d7:2b:b1:78:b3:6a:
ad:ad:8a:d9:08:85:fc:18:ab:eb:8e:a1:b9:55:ac:
83:b6:dc:03:5a:87:11:a4:e1:44:c9:c2:fe:4f:b2:
93:37:43:d4:aa:17:ed:f1:c2:0e:03:fd:93:49:f1:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:9C:21:AA:90:44:4D:43:41:11:2A:53:23:CF:D8:A1:59:A6:44
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.51.0/24
Signature Algorithm: sha256WithRSAEncryption
08:17:90:c7:7e:3b:d6:81:6e:26:f4:8f:20:b5:58:fa:e1:71:
16:c2:54:cb:e8:4f:9d:a5:3e:4f:39:9e:f7:78:dd:22:fb:52:
8a:1e:67:05:d2:58:80:5e:c0:de:00:ee:64:8c:1c:35:12:b0:
6d:3a:96:61:88:db:c4:18:6d:70:94:bb:26:f8:d3:de:50:ee:
35:95:33:c7:cd:f3:f7:4e:d1:66:2a:79:0c:9e:87:84:c4:1c:
b4:c4:c9:d1:7b:24:35:90:4d:b0:c0:75:07:97:24:7b:19:65:
40:8c:bf:4f:c0:83:56:06:3a:a6:21:80:ee:9b:ae:3e:5d:a2:
74:fb:69:20:ee:dc:27:5f:df:c3:02:b3:4f:3c:fd:ab:07:bb:
41:20:3a:84:15:d2:83:3a:15:13:34:9a:59:e6:55:da:4d:6d:
c3:7f:ef:3c:99:1b:45:30:76:43:b7:e5:90:73:67:68:1e:19:
e3:cd:30:b7:ab:e7:fe:ff:5c:a6:16:77:37:b7:23:5e:5e:b7:
c3:cb:50:fb:9f:14:d4:a6:07:11:81:3f:49:f5:92:8e:d8:23:
e3:c4:15:fc:94:d4:11:81:86:f7:77:f9:fe:48:bc:62:b6:a1:
8c:3a:15:05:b3:99:89:38:1f:4c:60:17:5c:83:9a:ce:f6:5a:
b3:bb:65:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1rJsq7Q92pC/Mv09VCs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGM5N2ViOWJhZjU0MjhmNTBmNDVkMzMwMzU3Njc4Yjcz
ZTA2MWMwHhcNMjUwMTAxMjE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzA1OWMyMWFhOTA0NDRkNDM0MTExMmE1MzIzY2ZkOGExNTlhNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOQqID/0ijDY/CUw4Jcr0gLiqCKR
uv7qHEmrpT2JtChJoMwIOZD7xZti2oo+RjPf6LVQrjYjpUcLwTLteFLETc8wDomk
LjZN7isLihYMzpZFxYVDfRb6F1qkyOlj4m1p5JmKvR+tTqC3tbL2+A54VBDZnZNa
9Bo8M2+wfN+mT7tHjrgzls7quqfhpeIxH3Krtxx5YZ1E9p/cSD9VCIXKEpYtOJ6b
GwsCD9nnDOZKBSuhnhP/LexGQfBFiZ6NayXIKiaTIcLa+a1Z4yjXK7F4s2qtrYrZ
CIX8GKvrjqG5VayDttwDWocRpOFEycL+T7KTN0PUqhft8cIOA/2TSfGXrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMFnCGqkERNQ0ERKlMjz9ihWaZEMB8GA1UdIwQY
MBaAFMUMl+ubr1Qo9Q9F0zA1dni3PgYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUt
YmVlZWJlZGZmYzk1LzEvVXdXY0lhcVFSRTFEUVJFcVV5UFAyS0ZacGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUtYmVlZWJlZGZmYzk1
LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub4zMA0G
CSqGSIb3DQEBCwUAA4IBAQAIF5DHfjvWgW4m9I8gtVj64XEWwlTL6E+dpT5POZ73
eN0i+1KKHmcF0liAXsDeAO5kjBw1ErBtOpZhiNvEGG1wlLsm+NPeUO41lTPHzfP3
TtFmKnkMnoeExBy0xMnReyQ1kE2wwHUHlyR7GWVAjL9PwINWBjqmIYDum64+XaJ0
+2kg7twnX9/DArNPPP2rB7tBIDqEFdKDOhUTNJpZ5lXaTW3Df+88mRtFMHZDt+WQ
c2doHhnjzTC3q+f+/1ymFnc3tyNeXrfDy1D7nxTUpgcRgT9J9ZKO2CPjxBX8lNQR
gYb3d/n+SLxitqGMOhUFs5mJOB9MYBdcg5rO9lqzu2UV
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:32:22 2025 by rpki-client