Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/uQVUGEMfvHVdv1_YESVkZQZE7PE.roa
File: uQVUGEMfvHVdv1_YESVkZQZE7PE.roa (raw, json)
Hash identifier: OhVC0ZpRFpvtoO4OMxLJb0wiwXx6IP+AnGybXMCFI/U=
Subject key identifier: B9:05:54:18:43:1F:BC:75:5D:BF:5F:D8:11:25:64:65:06:44:EC:F1
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 0194266B340F5A02B8D26A5529B7AB10FCB0
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/uQVUGEMfvHVdv1_YESVkZQZE7PE.roa
Signing time: Thu 02 Jan 2025 09:49:07 +0000
ROA not before: Thu 02 Jan 2025 09:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 80.253.246.0/24 maxlen: 24
91.151.88.0/24 maxlen: 24
91.151.89.0/24 maxlen: 24
91.151.95.0/24 maxlen: 24
213.142.148.0/24 maxlen: 24
213.142.151.0/24 maxlen: 24
213.142.159.0/24 maxlen: 24
2a0f:bf00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:34:0f:5a:02:b8:d2:6a:55:29:b7:ab:10:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jan 2 09:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9055418431fbc755dbf5fd8112564650644ecf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:5f:be:f0:24:10:94:36:c0:3d:a9:65:1b:
c1:f6:b5:2e:78:27:d7:4b:d0:76:cb:d3:f5:89:34:
eb:37:c6:13:68:9d:a6:58:69:c1:27:a7:20:bb:e4:
6a:22:1c:da:2b:8e:b4:04:c5:5e:e5:93:f9:1f:27:
09:ff:00:d8:c0:58:70:71:20:32:c4:94:91:e9:8a:
f8:bb:31:8e:3f:3e:37:9b:3b:de:98:ab:ca:3b:32:
81:f1:d1:b9:e6:36:fa:4a:fd:75:67:73:47:ab:19:
24:e8:ca:54:71:d7:06:90:93:dc:96:89:1d:3e:45:
45:4a:73:7e:9c:ad:c8:b0:e1:ac:94:09:c6:3c:aa:
ef:be:ab:15:bb:d3:11:6f:d0:c3:52:66:3b:67:1c:
bc:ae:82:45:a8:fa:a5:37:17:02:a8:5e:46:82:0b:
1a:e5:54:4d:88:66:7c:6c:b0:57:be:f8:4f:90:6d:
97:c9:0a:1b:24:b9:34:89:01:ef:80:f6:16:a9:60:
f6:5d:a9:9f:39:46:a2:05:ad:7b:aa:d5:5d:32:ba:
a0:c8:80:78:3d:a9:54:ca:3a:b5:cf:9d:ac:1b:2d:
a1:26:a3:83:d6:04:51:89:03:91:da:77:ea:50:da:
12:f1:57:0a:b9:6d:55:c9:a9:ef:a1:39:d9:5d:d6:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:54:18:43:1F:BC:75:5D:BF:5F:D8:11:25:64:65:06:44:EC:F1
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/uQVUGEMfvHVdv1_YESVkZQZE7PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.246.0/24
91.151.88.0/23
91.151.95.0/24
213.142.148.0/24
213.142.151.0/24
213.142.159.0/24
IPv6:
2a0f:bf00::/29
Signature Algorithm: sha256WithRSAEncryption
32:ea:bd:31:0d:cf:cd:9b:19:9f:cf:39:0d:f8:95:64:89:5c:
e2:b8:9a:1c:c4:e6:5e:21:a2:19:c8:fd:b6:08:da:7e:5c:d7:
c2:e0:bd:ec:f7:a0:12:d2:b2:90:eb:5d:8b:32:d7:05:24:11:
29:e8:d8:82:2f:d6:ab:cb:f8:64:bc:66:06:da:3e:cf:27:e6:
72:21:c5:4d:7b:f8:e2:1c:1b:ac:d2:bc:5a:78:4f:c7:08:66:
a1:a6:b8:bb:34:b0:c8:85:de:12:27:29:88:4a:e2:f5:a3:98:
ad:36:8b:17:ce:18:ff:7b:c7:33:99:0c:d0:10:5a:4d:a5:9f:
e5:af:2b:be:92:d7:0f:c7:9c:68:0a:33:94:1b:7d:13:9c:02:
f9:f3:a0:42:5c:3b:ae:e9:43:7c:0f:19:73:a5:5d:8a:3c:ff:
e2:82:88:fc:83:e8:96:15:7b:a4:10:06:0b:c8:b8:11:9d:b4:
4d:8c:78:5d:18:f6:e8:35:a0:54:fc:a7:49:0c:19:38:32:09:
a1:03:5c:37:91:14:99:45:a7:0f:2f:70:2d:bf:32:8e:cb:79:
d3:2e:97:eb:2f:32:17:2f:fc:91:36:f0:57:78:4f:0a:53:6c:
58:a0:e5:da:34:6a:47:a9:56:f4:c3:43:a7:cd:1a:a3:6a:a1:
a7:3b:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:03 2025 by rpki-client