Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/UY81-6OJtOcrPrE4DhCgEFcu2uw.roa
File: UY81-6OJtOcrPrE4DhCgEFcu2uw.roa (raw, json)
Hash identifier: lpvpHr51QilDXnlS7iMzsvab0M6b3NK+tzdIq5lHzpc=
Subject key identifier: 51:8F:35:FB:A3:89:B4:E7:2B:3E:B1:38:0E:10:A0:10:57:2E:DA:EC
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 019636EBE11DEFC5A42FB895C56B7D59EF50
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/UY81-6OJtOcrPrE4DhCgEFcu2uw.roa
Signing time: Tue 15 Apr 2025 00:49:10 +0000
ROA not before: Tue 15 Apr 2025 00:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5619
IP address blocks: 194.242.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:eb:e1:1d:ef:c5:a4:2f:b8:95:c5:6b:7d:59:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Apr 15 00:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=518f35fba389b4e72b3eb1380e10a010572edaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:8b:90:26:77:1c:f2:43:5b:59:4a:2a:f2:
6d:d5:33:a3:4d:41:0d:9e:bb:a0:74:9b:34:55:dd:
c2:26:44:08:4b:2d:9e:eb:1c:7d:5f:31:89:bc:50:
6d:ae:ae:0f:97:74:9c:b4:ce:cd:ed:4b:10:44:1d:
a2:ee:df:08:03:03:9e:86:6c:7e:1d:67:0f:66:5a:
ff:28:0e:ec:86:22:cd:e9:f7:a0:ad:9f:91:f9:49:
dc:53:00:c9:50:b1:92:51:4f:67:e1:70:f2:d5:e6:
a5:b7:e2:77:cd:17:ac:fb:d1:62:e3:7c:89:d4:2e:
c8:07:65:47:49:b5:35:9f:e4:89:ac:de:0e:8d:7d:
58:1c:86:71:f2:94:d4:8e:d9:e4:1a:8e:d4:51:6a:
4d:28:dd:9c:37:7d:1e:cd:f6:e7:a0:3e:7b:39:49:
ed:1b:b8:e9:36:92:d9:1e:ab:f5:84:cf:52:43:fa:
3c:16:94:f8:e2:2e:16:ab:8f:08:a5:3e:35:b5:0f:
92:1a:6b:1d:95:32:c5:8d:35:5e:d0:a8:49:40:10:
97:f5:d8:3d:2a:c4:85:06:de:03:8d:d6:70:55:b8:
86:d7:39:a0:77:f9:e5:19:12:b3:fc:38:09:be:c6:
e2:06:4b:4f:5f:41:5a:99:04:2a:74:89:1e:8f:4b:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8F:35:FB:A3:89:B4:E7:2B:3E:B1:38:0E:10:A0:10:57:2E:DA:EC
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/UY81-6OJtOcrPrE4DhCgEFcu2uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:92:6f:39:f7:dc:3a:33:f8:4c:8b:37:29:f4:42:78:c0:92:
65:07:5d:ed:f7:95:8d:80:d0:f1:4e:5c:fd:d7:7b:b8:7f:8e:
51:07:b6:96:4e:9a:65:94:7f:8f:f9:f7:9a:08:10:36:c0:59:
6a:6a:bb:a0:f3:c6:9f:34:29:52:48:e9:8e:9f:fe:c7:86:b0:
cb:79:07:a4:d8:2c:19:26:58:ae:70:81:4b:70:1e:40:84:5c:
9e:c5:c8:8c:5b:f1:86:8b:0f:18:d0:b3:a1:9f:3b:cf:c7:a9:
bb:24:3d:9e:b6:3e:c9:e2:98:4a:59:71:23:60:da:11:c5:88:
73:31:84:27:3b:1b:a0:4f:32:b0:cb:dc:cf:50:b4:20:1e:7a:
33:ec:53:af:be:fb:32:16:cd:6b:09:3c:b0:51:3d:88:96:66:
6a:62:bd:4d:d7:d6:0c:8b:b6:de:f9:32:07:28:2b:e0:6c:c3:
ed:b6:1b:39:6f:42:1e:7a:99:6b:82:11:87:60:5e:1c:fa:d4:
f1:f3:22:ab:f3:18:80:fb:19:e6:03:45:d9:91:7b:f3:1e:cb:
a2:51:1f:fe:0f:bb:f9:b3:44:e5:5e:02:8b:c4:22:14:a6:0e:
bf:08:01:9d:e6:44:8d:65:20:f6:92:10:79:52:95:2b:47:35:
f6:d0:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:25:45 2025 by rpki-client