Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uikDImFj_w6gzf9sLzCYAvSGxW0.roa
File: uikDImFj_w6gzf9sLzCYAvSGxW0.roa (raw, json)
Hash identifier: ieNY2vbhhmqOd7MblzFNfGZhGcsbpPTAxYAE77auTnE=
Subject key identifier: BA:29:03:22:61:63:FF:0E:A0:CD:FF:6C:2F:30:98:02:F4:86:C5:6D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA304CC47A95E88DEE28378857DCB
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uikDImFj_w6gzf9sLzCYAvSGxW0.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202273
IP address blocks: 93.92.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a3:04:cc:47:a9:5e:88:de:e2:83:78:85:7d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba2903226163ff0ea0cdff6c2f309802f486c56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:ea:8f:95:32:33:cf:48:67:03:ae:f6:0d:
0e:6b:f8:34:25:ea:ba:78:1d:2a:c9:8a:bc:6f:8f:
9a:18:a4:4a:d9:63:f8:d1:36:18:a6:62:c4:01:74:
ff:a3:d7:f2:be:33:8b:ad:7a:af:80:40:c3:fc:cf:
b6:b2:8d:01:30:8b:e8:40:56:a6:cf:39:31:dc:2a:
27:10:0b:ab:ad:d2:cf:9e:3d:c3:59:64:52:33:90:
dd:cd:2b:58:d0:c5:e6:9f:66:c5:1e:08:f2:8a:cb:
c5:a6:84:41:5b:a0:a8:2b:a4:62:f7:98:41:f5:14:
ef:e7:d8:eb:33:b5:89:82:9d:e8:59:92:a4:51:31:
27:57:be:eb:7b:ff:74:31:4a:bf:9f:53:66:54:e5:
82:80:95:df:cb:54:6e:fb:64:29:27:ba:ab:ea:bf:
63:86:d9:dc:07:98:91:0f:fd:85:06:31:14:32:d6:
3b:ca:02:3a:0b:d4:bd:1d:a3:06:0e:82:a4:c7:d1:
64:e3:44:a9:8f:7b:fb:78:8c:77:a5:41:c1:3c:5a:
bb:e1:2b:21:b1:90:a8:e0:57:2c:08:0f:ce:01:c1:
f9:50:16:6b:f2:33:7a:69:f5:e3:9b:b6:6d:58:aa:
ae:6f:7a:09:27:b3:fa:6e:f7:5e:a1:e8:94:9b:23:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:03:22:61:63:FF:0E:A0:CD:FF:6C:2F:30:98:02:F4:86:C5:6D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uikDImFj_w6gzf9sLzCYAvSGxW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dd:0d:7d:4c:84:7d:f5:c6:6f:b2:f9:5e:f6:61:37:08:fb:
9e:9f:aa:01:91:65:81:3f:51:28:81:26:10:bd:f3:4b:e6:c8:
14:1e:a3:41:15:61:db:0b:f9:b5:c9:aa:67:1a:ef:b4:2c:ed:
cc:1d:84:bf:84:1d:03:93:b2:24:cd:fc:f5:32:95:09:70:dc:
a3:12:96:c1:5f:3b:3a:40:c3:46:73:20:ce:b4:2d:50:75:25:
bc:cf:50:d1:f9:94:48:06:e8:b9:36:93:fe:f8:42:57:6c:f6:
cd:61:a4:35:c0:b5:65:c2:cd:d1:ff:34:0e:3c:eb:a1:c4:92:
7a:dc:37:79:06:d2:c9:30:e2:70:21:d5:9b:ef:25:88:da:ad:
d5:aa:6f:ac:0b:08:ce:e1:08:ba:cc:77:d0:29:08:ba:41:43:
e9:72:f0:6e:95:10:62:27:22:23:73:44:3d:b7:e9:95:a2:c5:
2a:f4:f5:72:c8:64:f7:40:50:99:d9:a6:c9:2b:50:6c:8d:6d:
f4:61:c6:2c:a9:f5:3e:27:11:0e:5f:bc:2b:10:84:7a:8d:c1:
58:ce:b4:27:ce:a7:f7:ab:3f:9c:b1:81:52:06:01:ea:e3:de:
cc:c7:40:75:d9:ef:61:ed:87:16:af:53:e3:e1:31:10:3e:81:
28:1b:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:32 2025 by rpki-client