Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/Uq41S_TL-4cdbHQOXq-81k1Y6B0.roa
File: Uq41S_TL-4cdbHQOXq-81k1Y6B0.roa (raw, json)
Hash identifier: imvcawPVkLTN2rqi9GrM6dLepGLRmW6IgQsJl3oa4vo=
Subject key identifier: 52:AE:35:4B:F4:CB:FB:87:1D:6C:74:0E:5E:AF:BC:D6:4D:58:E8:1D
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 01972B3BE494A5ABB9F70D111C7651B1A2FE
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/Uq41S_TL-4cdbHQOXq-81k1Y6B0.roa
Signing time: Sun 01 Jun 2025 11:23:54 +0000
ROA not before: Sun 01 Jun 2025 11:23:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214991
IP address blocks: 194.180.243.0/24 maxlen: 24
2a13:ad40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2b:3b:e4:94:a5:ab:b9:f7:0d:11:1c:76:51:b1:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Jun 1 11:23:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52ae354bf4cbfb871d6c740e5eafbcd64d58e81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:95:e7:df:6a:f4:3a:af:7f:4f:60:d6:0c:
dc:17:50:34:89:00:d1:c7:08:b1:39:ca:2f:c2:c9:
21:f2:8d:ff:9e:2a:9e:ba:2a:4d:08:fd:5d:5a:d6:
36:4b:a9:c0:68:77:cb:4c:c4:a2:bb:87:08:51:55:
71:25:56:58:4a:e4:7c:fb:5c:c6:50:78:f6:8e:aa:
6a:36:a4:c8:cd:16:ea:f1:cc:eb:5e:10:41:84:e2:
3f:c5:f6:7d:22:17:ff:80:f7:36:bd:67:e6:a9:b6:
fd:73:76:a3:f0:1a:5f:ad:46:fe:69:52:3c:f1:b1:
c3:45:81:49:7d:67:39:eb:34:c1:2e:a1:da:71:20:
bc:94:1b:87:aa:66:ee:fd:df:84:30:f7:25:3b:84:
cd:48:82:eb:93:a3:02:4f:46:e0:1d:8c:29:c1:ae:
e8:0c:dd:23:ab:3a:33:14:d0:cc:bd:3a:06:33:7d:
37:c5:57:44:a1:b1:a7:5f:79:c4:e3:6b:cb:3f:37:
93:e5:65:a6:20:d2:9e:9c:04:e8:30:c0:8d:bc:a2:
f6:3c:5c:40:2d:cd:97:12:65:3a:2d:53:6f:f3:a4:
d6:e1:e6:2f:d8:1b:96:72:bf:1f:f4:eb:44:5b:c0:
5f:14:77:e8:7c:9b:20:8e:cc:84:4d:03:b2:b1:24:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AE:35:4B:F4:CB:FB:87:1D:6C:74:0E:5E:AF:BC:D6:4D:58:E8:1D
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/Uq41S_TL-4cdbHQOXq-81k1Y6B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.243.0/24
IPv6:
2a13:ad40::/29
Signature Algorithm: sha256WithRSAEncryption
86:27:37:b7:4b:96:d4:e1:f8:32:35:69:97:dd:7c:f5:ba:8b:
e8:cf:89:08:e2:8f:5e:91:ec:4e:69:fe:43:6b:f0:19:f5:c7:
37:a1:8f:6d:91:5b:f2:6c:06:6c:a7:64:cd:77:23:e6:5d:59:
ff:49:6d:49:e5:d5:f4:7c:41:35:d3:b7:7a:1f:09:01:04:67:
2d:b6:7f:12:4a:9f:88:1a:aa:83:ce:3d:ae:25:2d:e1:6b:52:
77:42:0c:18:45:60:fd:4b:fb:19:bd:31:a8:22:06:59:2d:4f:
a6:69:12:55:91:7c:4d:93:bc:bc:51:5a:c9:6b:a6:74:16:6d:
61:de:cf:7b:51:ab:d9:01:a2:6f:e2:8c:52:3d:a7:b7:aa:1c:
60:cf:33:76:51:38:5c:b0:0b:1f:ce:99:db:05:e7:79:7f:df:
f6:7f:3b:f7:5e:2f:12:fb:c0:62:16:f3:a0:09:6e:3c:b2:61:
2d:c7:b7:57:63:ab:ae:33:da:30:96:31:5c:9e:58:61:14:c2:
86:bb:d6:f6:37:7a:37:4b:41:d6:4b:0e:ec:a0:b1:f8:bc:d9:
30:ef:df:7d:4e:76:1c:1e:fe:b5:37:3c:23:1f:d0:6b:ef:47:
f6:77:14:d8:f2:60:34:53:59:dd:b3:80:ca:37:81:0f:1b:2c:
44:d5:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:47 2025 by rpki-client