Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UYuQGxKQlXDLK7uuMRvudNqR-CM.roa
File: UYuQGxKQlXDLK7uuMRvudNqR-CM.roa (raw, json)
Hash identifier: tf8XIHbt4Kl58FMovrZRivwdGmGGO89VOZFKHaEdtu4=
Subject key identifier: 51:8B:90:1B:12:90:95:70:CB:2B:BB:AE:31:1B:EE:74:DA:91:F8:23
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9C1982490499FAAA8516F55F465F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UYuQGxKQlXDLK7uuMRvudNqR-CM.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59731
IP address blocks: 45.132.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9c:19:82:49:04:99:fa:aa:85:16:f5:5f:46:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=518b901b12909570cb2bbbae311bee74da91f823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:e7:62:5d:bd:13:b9:ea:44:1e:b7:22:13:
b1:5c:db:4d:18:65:e4:11:a5:3b:8a:b5:cd:23:54:
cd:b6:b2:9a:4f:6a:cf:41:3e:cb:44:e7:ab:6c:86:
46:8d:76:94:ea:22:a4:db:9f:00:6f:9e:1e:d1:81:
98:b6:5c:f4:a3:a6:d1:85:d3:8f:6c:2b:20:16:7f:
8b:67:a9:ab:f7:89:24:1c:79:fa:fd:ef:f2:5a:62:
04:15:1c:e5:5f:b6:ad:0e:84:a0:c4:3c:f0:6e:8f:
79:f1:f2:0b:3f:be:23:8c:10:ff:a8:9a:aa:ba:6f:
63:61:ab:1c:eb:6e:a7:77:c0:3f:99:24:64:81:3f:
e0:ea:cf:8b:a7:48:25:da:68:f1:86:51:50:48:19:
10:cd:c2:12:12:05:a3:f8:6d:c0:07:fc:37:5e:31:
3f:09:86:dc:3f:f9:2e:ce:0b:47:34:7d:ff:9c:10:
8e:db:a8:13:94:dd:04:f8:b6:8d:4f:a1:aa:b8:b7:
54:69:fa:5e:1b:9b:22:23:f0:01:42:9f:39:22:6d:
ff:69:1c:54:f0:50:af:87:f0:02:5a:95:b8:28:17:
b7:8e:1b:16:d3:46:b2:e4:1e:e2:8a:0f:44:38:92:
f6:73:d7:52:c1:9d:58:d0:b0:9b:55:e3:aa:41:b5:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:90:1B:12:90:95:70:CB:2B:BB:AE:31:1B:EE:74:DA:91:F8:23
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UYuQGxKQlXDLK7uuMRvudNqR-CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:da:6a:a7:bb:76:0c:29:f4:68:2c:26:80:6b:d3:81:30:4e:
75:6f:0a:af:9a:a3:4e:2f:1b:5f:4b:76:b7:41:eb:8d:bf:7a:
f4:57:0f:47:c3:08:5a:7f:84:d6:c6:27:d1:0d:4c:90:af:22:
a2:5b:ee:f9:04:ad:f0:1c:d7:d1:cd:84:a3:9c:01:20:14:24:
9b:b4:07:51:2e:7f:26:cd:cb:a0:71:ef:69:e6:d4:40:87:a2:
b0:6b:d3:3e:b1:66:b5:c4:07:dc:1a:0d:4a:6c:28:63:14:6e:
63:84:a1:c0:01:6d:9e:3b:81:fb:d3:44:5e:f2:ac:28:fc:70:
cc:11:4b:63:08:d3:ec:5f:11:27:04:f9:48:af:44:28:64:2e:
57:35:d6:06:5a:c7:4f:65:24:ae:69:7f:2f:fd:13:b7:19:2b:
b7:3b:0a:e6:83:fe:6c:1d:97:35:9b:ff:5a:b4:6e:8d:fd:d3:
66:3c:76:00:42:e8:41:2d:f0:ea:ce:4c:0b:71:b6:66:25:24:
ee:46:45:14:71:5e:59:ef:05:8e:67:9c:2a:18:ba:1b:f6:cd:
70:6c:fb:2d:85:c8:bf:e8:a3:fc:80:5b:89:28:62:7e:75:61:
3d:f6:2c:93:89:dd:fb:15:e4:6d:fc:f1:ec:fd:64:a8:5b:b2:
82:9e:35:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5wZgkkEmfqqhRb1X0ZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MThiOTAxYjEyOTA5NTcwY2IyYmJiYWUzMTFiZWU3NGRhOTFmODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYfnYl29E7nqRB63IhOxXNtNGGXk
EaU7irXNI1TNtrKaT2rPQT7LROerbIZGjXaU6iKk258Ab54e0YGYtlz0o6bRhdOP
bCsgFn+LZ6mr94kkHHn6/e/yWmIEFRzlX7atDoSgxDzwbo958fILP74jjBD/qJqq
um9jYasc626nd8A/mSRkgT/g6s+Lp0gl2mjxhlFQSBkQzcISEgWj+G3AB/w3XjE/
CYbcP/kuzgtHNH3/nBCO26gTlN0E+LaNT6GquLdUafpeG5siI/ABQp85Im3/aRxU
8FCvh/ACWpW4KBe3jhsW00ay5B7iig9EOJL2c9dSwZ1Y0LCbVeOqQbXlVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGLkBsSkJVwyyu7rjEb7nTakfgjMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvVVl1UUd4S1FsWERMSzd1dU1SdnVkTnFSLUNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYTOMA0G
CSqGSIb3DQEBCwUAA4IBAQAM2mqnu3YMKfRoLCaAa9OBME51bwqvmqNOLxtfS3a3
QeuNv3r0Vw9Hwwhaf4TWxifRDUyQryKiW+75BK3wHNfRzYSjnAEgFCSbtAdRLn8m
zcugce9p5tRAh6Kwa9M+sWa1xAfcGg1KbChjFG5jhKHAAW2eO4H700Re8qwo/HDM
EUtjCNPsXxEnBPlIr0QoZC5XNdYGWsdPZSSuaX8v/RO3GSu3Owrmg/5sHZc1m/9a
tG6N/dNmPHYAQuhBLfDqzkwLcbZmJSTuRkUUcV5Z7wWOZ5wqGLob9s1wbPsthci/
6KP8gFuJKGJ+dWE99iyTid37FeRt/PHs/WSoW7KCnjXX
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:17 2025 by rpki-client