Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uaqp6Cp8bnjXpJItB05n3oxiLbQ.roa
File: uaqp6Cp8bnjXpJItB05n3oxiLbQ.roa (raw, json)
Hash identifier: bpFuG5LvBSjK2TmWHjS80NrPMY26KXPYGPZC9mruUWs=
Subject key identifier: B9:AA:A9:E8:2A:7C:6E:78:D7:A4:92:2D:07:4E:67:DE:8C:62:2D:B4
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0197127D5BE5E4DEC2BF2F85EA44A2563FED
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uaqp6Cp8bnjXpJItB05n3oxiLbQ.roa
Signing time: Tue 27 May 2025 16:04:54 +0000
ROA not before: Tue 27 May 2025 16:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 94.229.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:7d:5b:e5:e4:de:c2:bf:2f:85:ea:44:a2:56:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 27 16:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9aaa9e82a7c6e78d7a4922d074e67de8c622db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:bd:f5:d2:19:d6:f7:af:bf:f2:aa:aa:2c:
57:2d:3c:a0:62:41:2d:80:ce:eb:e9:a6:9c:89:9f:
63:3c:8d:25:88:82:2b:cf:a2:8c:f8:52:dc:a1:c8:
4f:fc:12:74:a4:60:cb:cf:d1:ba:c8:24:c2:47:30:
49:5d:19:27:87:21:1e:83:ce:12:d0:43:48:5e:c4:
17:20:86:7c:d0:34:5c:5a:a9:82:b2:f4:99:26:27:
1e:44:bd:d7:7d:21:26:bd:f9:4c:68:39:f5:55:de:
1e:9d:70:91:97:0d:d4:46:3c:cf:06:60:be:c1:63:
67:6b:31:91:9c:0d:1d:36:ea:82:b7:ce:dc:c4:58:
8b:8e:23:09:45:85:c4:70:de:6c:ce:b4:57:6a:f8:
95:e5:1f:5a:bb:31:3b:33:39:9d:64:a4:e7:15:4f:
19:6a:b0:4f:05:b3:b7:4e:29:1d:25:bd:e0:95:0d:
54:be:15:b8:f4:2f:4f:3b:0e:8c:fd:26:6d:66:c2:
9a:94:4e:a1:13:1c:d8:95:24:f7:2d:46:f5:e4:cb:
9d:e2:8e:68:72:d3:d4:ad:d9:0c:c6:bf:09:45:e1:
de:51:66:39:bb:50:f2:99:dc:ae:05:61:69:b0:13:
ad:49:f0:8f:84:bc:77:c4:84:ac:6f:c1:b4:cc:ad:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:A9:E8:2A:7C:6E:78:D7:A4:92:2D:07:4E:67:DE:8C:62:2D:B4
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uaqp6Cp8bnjXpJItB05n3oxiLbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.210.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8e:76:97:ec:66:08:08:a3:dc:48:87:58:57:97:85:d8:b4:
4c:99:ef:15:10:b2:73:ee:33:d7:20:cc:3e:e5:52:fa:d3:41:
c0:dd:84:67:69:b1:49:f1:5c:a0:ff:de:a5:9f:2a:2c:29:ac:
e6:a7:6e:79:ed:23:e0:ef:4c:db:7e:c1:79:1d:a3:11:68:9e:
8e:26:b8:e9:04:98:3e:b5:20:e4:6e:18:e2:54:01:2e:67:ae:
05:e8:ea:7a:0b:4e:b5:9f:50:63:33:b1:cd:d8:7d:81:0b:28:
59:bd:55:09:07:d8:62:9e:73:fb:79:c4:c6:cd:8a:32:cb:cc:
c0:75:63:00:39:05:7f:a1:03:c4:4e:b8:4e:37:79:9d:6c:d5:
31:1e:94:12:05:a8:a2:d2:ce:be:da:39:5b:40:86:f3:92:a5:
0a:0e:62:9a:10:d8:11:75:25:9b:8d:9d:d6:b3:9f:4e:c6:73:
87:55:12:45:5d:2b:81:a7:68:d2:d8:d6:c8:0d:1b:e8:73:5d:
11:4f:9b:7a:67:5a:51:8d:7b:a5:cb:6b:d3:34:94:59:18:3c:
bf:1b:10:00:4a:1f:3a:e6:e3:87:9f:65:70:8c:a1:86:44:5f:
1f:94:97:22:0f:b1:97:27:99:c6:69:bc:e0:ed:9c:31:1c:7b:
4f:e5:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:28 2025 by rpki-client