Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/UCu5CsbfqPv-H0RB5CnY3uIY4sA.roa
File: UCu5CsbfqPv-H0RB5CnY3uIY4sA.roa (raw, json)
Hash identifier: K+eV5bwQPyB0aaYCexve5ZwjVflxlDLIsnvlUKeRo7s=
Subject key identifier: 50:2B:B9:0A:C6:DF:A8:FB:FE:1F:44:41:E4:29:D8:DE:E2:18:E2:C0
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C656EF07027C2E44416E5E131BE0C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/UCu5CsbfqPv-H0RB5CnY3uIY4sA.roa
Signing time: Thu 02 Jan 2025 09:50:25 +0000
ROA not before: Thu 02 Jan 2025 09:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24699
IP address blocks: 80.66.144.0/20 maxlen: 20
81.20.96.0/20 maxlen: 20
88.85.160.0/20 maxlen: 20
109.108.32.0/19 maxlen: 19
109.108.56.0/21 maxlen: 21
212.124.16.0/20 maxlen: 20
212.124.27.0/24 maxlen: 24
212.124.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:65:6e:f0:70:27:c2:e4:44:16:e5:e1:31:be:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=502bb90ac6dfa8fbfe1f4441e429d8dee218e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:b9:4d:d8:35:75:83:3b:01:f0:07:3e:96:
4a:07:eb:e6:2f:8c:7e:b6:9e:3f:d7:be:aa:99:5e:
a4:cf:db:11:e6:e5:6b:af:53:99:a7:08:29:cb:59:
63:af:06:e7:9e:e3:f3:7c:af:0c:7e:c6:49:ef:2b:
d7:1a:6c:1a:4e:91:15:d2:fe:f2:8e:c3:8d:57:38:
7e:0f:f1:37:c0:ef:d0:ec:6d:a2:59:1e:ad:1c:c9:
2d:8d:62:43:19:c0:4b:95:ab:73:7e:35:5d:1a:92:
4e:34:ad:35:f0:1c:71:07:fb:06:53:96:5e:bf:f2:
13:cb:07:c1:a9:75:db:73:36:6f:ee:b1:f0:03:bb:
e2:61:68:19:5d:19:8d:69:75:19:52:b3:f3:7a:fe:
03:37:22:fe:45:28:b8:d5:70:e1:5e:62:bd:36:88:
bd:cd:5c:b1:36:df:0c:6f:72:c2:8a:e3:2e:86:17:
e2:97:84:cd:10:da:a8:90:db:a5:5d:56:9c:4f:78:
c9:76:20:79:78:75:4f:72:2a:60:91:93:0a:9a:97:
b2:59:79:d9:f0:54:3d:75:97:9e:69:6e:44:2a:be:
6c:12:86:f3:e7:8f:0c:99:31:d3:99:24:dd:d3:af:
c4:a9:1d:e4:0a:37:df:04:a4:d3:b9:b4:d3:7c:44:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:B9:0A:C6:DF:A8:FB:FE:1F:44:41:E4:29:D8:DE:E2:18:E2:C0
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/UCu5CsbfqPv-H0RB5CnY3uIY4sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.144.0/20
81.20.96.0/20
88.85.160.0/20
109.108.32.0/19
212.124.16.0/20
Signature Algorithm: sha256WithRSAEncryption
39:f8:9b:0a:6f:c6:a3:39:24:58:81:0d:69:33:c1:a3:7c:ab:
cb:3c:10:ed:c7:92:92:5c:2b:39:80:94:00:f1:fa:63:11:c9:
9b:1b:af:d2:90:2f:58:b0:04:eb:23:a0:fb:94:2d:b1:f1:34:
21:57:00:68:3e:54:53:bf:82:b5:a7:41:0f:bf:e1:66:75:e3:
4c:1e:4f:7e:52:79:e6:fe:db:81:c5:2c:c5:92:12:25:91:90:
fc:0a:d6:70:da:11:91:e9:59:79:55:38:83:d6:62:62:d8:a2:
f1:74:f4:65:86:ef:52:1c:f0:97:f0:4a:28:f4:a1:68:9c:46:
95:91:3d:9e:13:b6:39:90:dd:27:0e:6a:e1:b0:0f:36:fb:6c:
8e:d2:20:29:86:f1:46:a4:bd:61:f6:a8:98:53:2b:65:17:44:
68:e7:fa:a4:0d:7f:e2:3a:ff:ac:e5:ec:63:34:7f:81:4b:99:
f8:13:c3:f7:1e:83:77:e7:9a:2d:44:7b:4a:e5:99:11:da:62:
03:82:81:d6:f7:ae:56:d0:01:43:99:4c:7b:92:40:b7:8c:3e:
59:49:f6:4d:ac:b6:90:dd:7c:61:2f:06:eb:da:74:b7:4c:06:
7e:23:92:f6:83:2e:58:5f:7c:f9:0a:f0:4d:f0:87:92:05:8b:
40:2c:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:35:49 2025 by rpki-client