Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/U36ClCgnryxkHDfTNyAC9n9c624.roa
File: U36ClCgnryxkHDfTNyAC9n9c624.roa (raw, json)
Hash identifier: i7ZkpNQ/YGeG/fajxbkMZzm1UE1dL3zbWX55VZurAOk=
Subject key identifier: 53:7E:82:94:28:27:AF:2C:64:1C:37:D3:37:20:02:F6:7F:5C:EB:6E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C5F628250BD0352FF4A565EFDA2F4
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/U36ClCgnryxkHDfTNyAC9n9c624.roa
Signing time: Thu 02 Jan 2025 09:50:23 +0000
ROA not before: Thu 02 Jan 2025 09:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15934
IP address blocks: 213.145.32.0/19 maxlen: 19
213.145.43.0/24 maxlen: 24
217.14.240.0/20 maxlen: 20
217.14.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:5f:62:82:50:bd:03:52:ff:4a:56:5e:fd:a2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=537e82942827af2c641c37d3372002f67f5ceb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:eb:d6:ed:fa:18:05:fa:62:b9:3d:e2:d7:
c2:94:c0:fd:d2:4d:32:34:fa:26:9b:ce:d0:8f:1e:
66:da:ae:2f:32:e0:b0:8c:03:0e:00:69:af:da:76:
34:2d:d8:c7:d4:63:d2:8d:d6:c9:00:a9:12:6c:f4:
52:5e:34:af:d8:03:29:40:5b:06:12:77:53:8b:b6:
a9:9a:06:02:cb:f1:eb:cf:bd:51:54:f1:0e:4d:94:
ba:5f:13:f9:02:f1:81:65:53:f4:88:3b:5d:64:c6:
1b:2d:69:2e:cb:23:ea:1b:7d:91:4d:90:2e:55:8c:
12:73:95:1e:f1:d5:62:1e:fb:ef:cb:89:59:17:3b:
dd:a7:76:f9:84:f0:03:4b:90:14:d3:28:d3:3b:53:
02:9a:08:7a:ff:f1:55:a7:f0:e3:5d:57:2e:90:04:
f9:96:b1:76:24:0f:ed:79:0f:f0:19:c5:70:2c:8c:
01:7d:02:5c:45:e5:b5:86:29:62:5b:da:0a:7c:26:
5b:c3:4f:c5:ba:cb:60:d5:a4:63:33:b4:59:f9:8e:
37:6e:b4:e5:e1:a0:9c:07:05:37:25:5d:28:2d:15:
53:a0:83:2b:ea:2f:04:30:eb:ef:41:0c:04:cd:67:
19:b9:0e:fb:58:52:29:64:43:4f:0f:d3:f9:58:12:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:82:94:28:27:AF:2C:64:1C:37:D3:37:20:02:F6:7F:5C:EB:6E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/U36ClCgnryxkHDfTNyAC9n9c624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.32.0/19
217.14.240.0/20
Signature Algorithm: sha256WithRSAEncryption
28:d7:26:9b:43:61:dd:8c:43:36:0c:e6:bd:c8:b5:a8:92:c7:
79:7b:24:1d:7d:7c:f4:08:37:a1:49:4a:ae:da:f3:05:cc:bc:
e8:cb:7e:10:f2:53:66:96:9b:4c:ed:58:07:a6:5e:a4:ff:27:
d3:c5:b7:ea:9d:02:11:3c:a4:e1:cd:09:43:9f:02:8e:d8:44:
0e:a9:65:47:9f:e2:ef:b4:6e:b0:06:eb:50:4f:9f:84:65:03:
0f:a9:72:93:28:5f:a3:65:47:8f:a6:46:48:35:b1:31:f9:7e:
99:6c:b0:e4:76:70:a2:9d:8b:9e:dc:9e:7a:91:40:dd:1e:2f:
ad:82:93:c0:39:e6:c1:86:5b:80:12:7d:81:dc:41:71:9f:b5:
35:21:9b:81:80:38:fd:af:21:c8:25:08:ad:e4:dc:f0:16:8e:
0f:23:5e:86:0b:16:a9:e7:18:92:33:2f:09:24:4e:fa:98:e3:
6f:5b:d0:6b:87:40:a5:2b:22:80:c0:01:52:7a:3b:02:b0:a4:
f8:25:55:28:a2:b2:14:40:c4:6c:f3:42:2e:a7:6b:13:60:a4:
52:6f:eb:34:dc:6e:35:63:1d:5e:17:6c:d8:82:ca:45:a9:9f:
8e:8c:1e:c1:a1:b3:bc:2e:3f:18:da:3b:7f:90:0e:b6:ca:bb:
69:a7:86:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:09:02 2025 by rpki-client