Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa
File: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (raw, json)
Hash identifier: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=
Subject key identifier: 51:E6:E9:D0:92:2E:3F:78:71:66:76:76:81:2A:C6:11:B1:65:70:2E
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 0194236A23A62BA6EA64019706A9C55E3FC1
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57381
IP address blocks: 193.150.22.0/23 maxlen: 23
193.150.22.0/24 maxlen: 24
193.150.23.0/24 maxlen: 24
2001:67c:24e4::/48 maxlen: 48
2001:67c:2a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:23:a6:2b:a6:ea:64:01:97:06:a9:c5:5e:3f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51e6e9d0922e3f7871667676812ac611b165702e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:b1:33:eb:e4:f0:af:03:03:ae:ca:e0:d7:
3c:41:0c:c9:ab:c3:a2:b4:5c:4a:78:47:ca:b9:77:
69:e8:d2:ce:9d:e1:1c:22:1f:36:03:56:92:7e:e0:
31:54:fc:f6:24:bf:5b:af:e0:8b:20:19:9a:cf:48:
19:19:68:c4:83:bc:4d:5d:db:d4:27:f7:0b:93:36:
1f:c8:a9:5f:c7:9e:81:9d:9c:e7:f9:b1:c3:38:fc:
bf:e1:ca:20:f0:8f:0f:18:92:3b:af:4e:16:3a:49:
24:1d:1c:cf:34:ef:97:4b:53:c3:bd:1d:4c:04:b6:
f0:b3:c9:08:25:b5:86:55:af:39:af:2c:2a:ab:96:
44:18:d4:7a:cb:e0:29:8a:f3:7a:06:3b:e0:e5:75:
66:f9:87:1d:7c:70:08:a4:24:08:a3:22:8d:1a:d7:
7a:0e:b8:1c:b2:3f:7e:69:b1:b2:92:25:ce:93:69:
3f:5f:95:7e:c1:55:ed:f4:66:ca:ff:b2:10:33:78:
46:d8:27:ba:a5:85:56:63:d3:5b:14:b6:38:cf:82:
f6:1b:ca:15:c8:de:5c:51:dd:e6:37:84:14:0e:37:
56:11:1f:95:27:62:ba:39:b9:63:df:12:b0:ff:0a:
e3:d0:53:9f:f6:09:d1:3e:44:3c:43:72:8c:c5:77:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:E9:D0:92:2E:3F:78:71:66:76:76:81:2A:C6:11:B1:65:70:2E
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.22.0/23
IPv6:
2001:67c:24e4::/48
2001:67c:2a00::/48
Signature Algorithm: sha256WithRSAEncryption
78:b9:56:bb:c6:8e:6f:3a:5f:40:c8:3f:4f:e6:95:1a:53:d6:
64:c5:8d:99:1d:b0:d4:f9:90:00:4f:e0:3d:94:db:ee:1c:ba:
ca:e4:66:b9:ff:54:ee:52:2c:7c:6c:16:73:f6:dc:eb:62:77:
1e:40:fc:6d:80:09:43:7a:1b:a3:7e:62:a9:82:12:3c:c6:3b:
23:61:48:32:05:7f:f5:b5:4f:aa:a1:d6:18:5b:ee:4e:71:ea:
8b:84:2a:26:26:0c:6c:3c:6f:d7:db:47:58:97:3e:72:b1:ad:
c1:c6:d2:8f:32:6a:fc:2c:a2:fa:ab:47:41:86:fa:e9:c6:65:
fe:85:40:b3:5e:37:2a:ac:66:eb:24:70:eb:34:81:61:a6:71:
0a:50:59:f0:93:19:cb:33:f2:60:10:20:49:61:21:42:c7:f7:
fb:e4:2b:f8:fe:59:43:f0:04:6a:06:47:42:1f:a9:55:ff:6e:
90:56:b2:6f:31:df:fb:9b:cc:82:14:a2:61:6d:9b:43:ff:ed:
c7:af:ff:15:3b:56:64:29:da:19:ed:fd:34:88:43:43:6d:64:
07:25:35:48:1f:6a:6e:67:53:83:67:bc:a6:b8:9a:24:dd:a7:
59:a0:e0:d4:8c:3b:1e:01:d2:85:61:78:14:44:c6:d0:84:89:
4f:da:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:06:27 2025 by rpki-client