Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uk1yTg0ri4MBk4PSbBrxakxKxCY.roa
File: uk1yTg0ri4MBk4PSbBrxakxKxCY.roa (raw, json)
Hash identifier: eCCM3Qx/FIUPe4Ugcizp/d4ylrMG51YbKWP6QLQFir8=
Subject key identifier: BA:4D:72:4E:0D:2B:8B:83:01:93:83:D2:6C:1A:F1:6A:4C:4A:C4:26
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C4E7BAFDD8E9A22AB22A9479D0D6D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uk1yTg0ri4MBk4PSbBrxakxKxCY.roa
Signing time: Thu 02 Jan 2025 09:50:19 +0000
ROA not before: Thu 02 Jan 2025 09:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5591
IP address blocks: 217.22.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:4e:7b:af:dd:8e:9a:22:ab:22:a9:47:9d:0d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba4d724e0d2b8b83019383d26c1af16a4c4ac426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:f3:fa:22:09:5c:d3:34:db:6f:28:f8:fc:
c9:dd:73:08:c3:b4:b9:17:b6:b0:98:48:41:20:73:
be:e9:dd:ab:2c:7f:6b:51:3a:45:c0:20:0b:76:0a:
d9:27:2f:94:f9:3f:36:0b:77:f0:ec:d9:e2:34:23:
ca:b0:fe:c1:a3:89:8f:1f:81:97:6a:75:08:cd:55:
56:d2:c1:d0:d3:28:35:8f:0c:f8:0d:6e:d4:96:26:
56:6f:fb:61:29:01:dc:de:58:dc:38:e6:ce:da:78:
b1:65:4a:bd:dc:c6:f1:a8:dc:e7:f8:f5:b1:5a:b5:
b5:e1:e0:86:e9:e6:10:e8:15:59:d8:98:aa:9a:50:
de:cd:83:57:81:ee:9b:3b:61:1e:8e:82:45:6d:6a:
d0:3e:65:cb:5c:7a:d1:07:40:75:3a:97:90:f6:68:
37:8a:a3:9b:71:4a:1a:69:dc:60:4e:bf:f2:96:8c:
06:57:db:b0:bd:d9:87:b9:ce:ad:15:e1:73:1d:07:
46:ea:35:0e:69:a3:d8:1a:56:66:bb:ed:8c:f9:00:
b5:99:84:a0:b7:21:44:7d:4d:71:fd:58:29:d3:1b:
42:9b:ef:b2:03:76:12:e0:9b:74:f3:15:fc:31:ce:
6e:0b:39:69:38:20:dc:56:a4:9d:13:b8:92:a2:aa:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:72:4E:0D:2B:8B:83:01:93:83:D2:6C:1A:F1:6A:4C:4A:C4:26
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/uk1yTg0ri4MBk4PSbBrxakxKxCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.172.0/23
Signature Algorithm: sha256WithRSAEncryption
74:21:08:46:8b:f4:8b:26:b1:a4:e6:47:92:e4:b6:62:8d:1e:
70:93:14:dc:ec:67:13:ea:92:95:07:46:5f:5a:04:fc:03:2b:
72:7a:20:22:9a:82:4d:fc:5b:fa:34:82:3f:60:5c:07:77:78:
47:da:f9:b0:6e:76:f5:bc:7c:5e:d1:de:5a:5d:1a:b5:fa:4a:
9a:a2:48:2d:7d:7d:db:ce:1c:90:80:cf:6a:b4:c7:d8:13:74:
cf:8f:c5:5a:9c:d9:e5:cf:ce:08:f4:5f:5f:f1:20:43:1f:a1:
38:4f:60:10:48:ba:5d:6e:98:e7:c2:6b:0c:9d:af:d3:60:81:
2d:24:67:26:47:f8:fd:de:63:75:93:f7:5f:de:5f:bc:21:5c:
0e:77:14:17:6e:0f:d0:64:10:6d:8d:c4:4a:31:05:7d:37:47:
16:96:9c:90:a0:dc:10:fd:79:d4:65:a9:6b:e5:aa:cf:5a:23:
e1:9b:1b:19:0f:16:d3:bd:93:68:9a:e6:a6:65:eb:a8:c9:d1:
11:70:6b:89:ea:79:26:98:4c:e4:b4:85:45:b4:37:16:1f:30:
9b:59:9e:0c:b2:63:42:3f:4f:e8:95:27:78:b6:4e:d0:c2:6e:
1c:4e:33:40:4c:04:25:29:1a:a1:73:60:43:af:a6:e0:75:52:
4e:c7:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:46 2025 by rpki-client