Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/uf-arnId1HYZtG_ay-tvYG5euMI.roa
File: uf-arnId1HYZtG_ay-tvYG5euMI.roa (raw, json)
Hash identifier: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=
Subject key identifier: B9:FF:9A:AE:72:1D:D4:76:19:B4:6F:DA:CB:EB:6F:60:6E:5E:B8:C2
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019425215951988131865326486A5C6270D8
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/uf-arnId1HYZtG_ay-tvYG5euMI.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 193.24.102.0/24 maxlen: 24
2a13:9980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:59:51:98:81:31:86:53:26:48:6a:5c:62:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9ff9aae721dd47619b46fdacbeb6f606e5eb8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:65:12:06:da:dd:e9:12:91:10:92:c1:7c:
ce:9c:cf:4f:a9:8c:e9:79:2e:19:7d:a2:4b:ca:12:
79:3d:eb:71:67:48:07:f6:a5:6b:c1:03:7b:bd:db:
84:07:15:6d:01:40:35:03:37:b7:a2:45:18:3a:da:
43:10:92:6d:2a:86:e6:cc:e9:9b:c8:99:1f:63:c2:
08:81:3d:36:ba:50:7f:d6:79:ca:86:6a:06:e4:fc:
2c:88:bc:05:ae:4e:26:9a:2d:3a:4b:da:c1:d3:b9:
90:27:8e:9d:a4:83:36:23:a8:dc:b7:00:1c:22:95:
71:95:ec:f3:61:fb:9d:de:9f:07:3c:97:f7:79:4d:
d2:d1:51:bc:71:94:73:4b:84:ba:95:ff:77:a2:e6:
1e:f4:18:93:65:95:ad:2b:59:5a:e3:52:e1:1e:87:
fc:7d:6f:f7:0c:95:db:62:20:15:b0:eb:1c:66:79:
04:cd:2d:4d:d8:80:7a:77:26:fa:cc:df:9e:3e:44:
21:09:a6:15:11:51:f0:a1:b5:ee:6c:f5:ea:0e:98:
12:8c:dc:29:97:62:e7:e2:04:ac:aa:e8:64:c1:06:
d9:b7:d0:d1:6a:2c:77:6b:82:bd:d8:a9:35:2f:2b:
cf:01:a1:12:83:f4:6b:a1:0f:40:9d:c1:c9:56:b3:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:9A:AE:72:1D:D4:76:19:B4:6F:DA:CB:EB:6F:60:6E:5E:B8:C2
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/uf-arnId1HYZtG_ay-tvYG5euMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.102.0/24
IPv6:
2a13:9980::/32
Signature Algorithm: sha256WithRSAEncryption
17:50:b6:34:b1:86:c9:bb:91:a1:68:bf:d7:39:72:89:2d:14:
04:ef:df:d1:27:0e:c2:c0:e2:b3:c9:d5:fc:2d:b4:a4:4b:ce:
85:02:0a:ad:a5:c4:a3:94:56:1e:b5:fd:54:d8:1e:01:59:1b:
20:b8:e2:8a:96:8c:0e:f4:2a:ab:71:21:0f:a8:e8:42:e0:fc:
93:f8:bf:99:6f:30:1e:c2:4f:64:d6:d1:04:f8:72:1a:94:81:
8e:dd:53:37:1f:87:99:f9:f5:7c:ba:dc:3d:b0:4f:7d:06:e4:
0f:bd:1c:9c:80:64:19:ee:5e:de:b1:34:da:eb:02:54:c8:7a:
f3:47:fa:3c:a2:25:88:77:32:15:8b:28:51:b8:f1:26:9f:07:
c1:fa:23:3b:4a:dc:1f:f2:57:f9:9e:aa:78:4f:6c:97:81:d9:
bd:d7:17:15:cf:8c:e6:35:a2:46:ac:3b:ef:4f:96:5c:6f:d6:
5c:06:f4:cf:c7:ae:3f:53:bb:54:78:b7:33:9c:95:e7:98:48:
04:10:1c:9a:dd:cd:e2:db:9b:0e:16:e2:b5:cd:89:18:a7:25:
fc:e2:8d:21:c1:f9:be:ce:d9:9b:b2:98:75:65:82:48:d6:de:
ac:b5:29:6f:bd:ce:15:a2:33:65:06:a3:73:fe:8a:c5:9f:62:
81:81:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:48:13 2025 by rpki-client