Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/UaW5cje9IOoHcfDyuCGZzyKjxsg.roa
File: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (raw, json)
Hash identifier: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=
Subject key identifier: 51:A5:B9:72:37:BD:20:EA:07:71:F0:F2:B8:21:99:CF:22:A3:C6:C8
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 0196337A0FFB12CE6AB9D9BC299698480062
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/UaW5cje9IOoHcfDyuCGZzyKjxsg.roa
Signing time: Mon 14 Apr 2025 08:45:59 +0000
ROA not before: Mon 14 Apr 2025 08:45:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52756
IP address blocks: 149.226.240.0/24 maxlen: 24
149.226.241.0/24 maxlen: 24
149.226.242.0/24 maxlen: 24
149.226.243.0/24 maxlen: 24
192.48.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:7a:0f:fb:12:ce:6a:b9:d9:bc:29:96:98:48:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Apr 14 08:45:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51a5b97237bd20ea0771f0f2b82199cf22a3c6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:ce:ee:0e:a6:75:99:49:62:5f:5d:f6:e5:
4d:ed:87:7f:50:dc:d2:ce:a5:f3:cc:9d:1d:e8:75:
19:54:b6:69:55:d6:62:b9:d6:71:d2:d1:89:39:2e:
24:55:5b:5a:03:c3:97:b2:bd:22:8f:03:b6:79:c0:
53:ee:80:7a:73:8c:b6:32:1f:fb:50:20:7b:21:ca:
eb:e8:fb:db:0b:6a:81:dc:69:89:74:dc:d3:f8:ad:
f4:77:32:66:eb:8b:aa:b9:a4:3a:ad:d1:27:ac:4b:
b9:5b:64:45:9b:be:40:b3:7c:83:98:92:d4:02:74:
69:a6:3f:70:d9:35:59:9e:5e:28:25:ec:fe:69:0f:
14:36:4b:66:eb:c9:d0:3a:0b:92:4f:06:d2:16:34:
5c:96:37:ff:bc:38:be:63:b6:ef:3f:e0:12:88:58:
c7:1b:c8:74:c8:21:4b:5e:92:c1:34:cd:c9:f6:37:
91:62:43:c2:50:96:da:24:21:e4:ae:77:0a:ba:d9:
b0:18:7c:60:6c:29:c0:5a:d4:00:83:53:24:10:29:
a2:32:ea:cf:c1:db:d5:2a:5d:d2:92:9a:52:82:6f:
71:cb:73:6c:11:17:e3:49:ad:66:49:3f:7e:f3:3e:
56:39:b4:49:42:f0:54:6b:b3:52:68:cb:b2:77:e3:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:B9:72:37:BD:20:EA:07:71:F0:F2:B8:21:99:CF:22:A3:C6:C8
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/UaW5cje9IOoHcfDyuCGZzyKjxsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.240.0/22
192.48.31.0/24
Signature Algorithm: sha256WithRSAEncryption
94:80:33:f9:b4:85:db:f9:73:6e:4b:14:0d:db:83:16:3b:ea:
d6:9e:30:a8:d8:84:8f:83:61:55:b9:af:6c:6c:4b:1e:84:eb:
15:9c:85:ce:30:91:13:fc:e3:29:bb:c4:ff:74:40:7b:d4:d7:
a7:64:32:8b:ef:c5:32:d9:c1:15:ea:5f:27:df:20:4e:93:a5:
8d:ab:3f:04:5a:5d:2c:ff:de:ed:45:8f:a8:e3:8d:ba:19:45:
34:3e:97:c8:97:62:a5:02:29:00:f1:f2:b2:67:64:69:8d:d5:
37:b4:54:a2:46:4f:e2:f0:b8:f8:00:5f:13:04:63:01:75:1e:
d4:85:92:e6:33:f0:a7:95:a1:e5:16:ea:79:87:10:96:b4:0f:
14:fc:9d:ab:d0:ba:09:1b:ba:d7:76:c0:aa:36:64:26:e4:69:
1f:ea:93:53:b3:69:fd:2d:06:34:13:18:ec:8c:45:66:85:3a:
a3:23:9e:07:a9:55:7b:d2:85:07:06:4b:e8:1e:75:0a:1c:5b:
b1:46:35:38:b7:51:74:a1:e2:21:79:0e:4d:05:54:17:e8:5b:
4b:ed:8d:fe:40:6c:c6:f0:43:11:ae:8b:a2:7e:4b:61:5e:55:
38:ef:60:2a:57:14:e2:d9:9b:cc:eb:b2:37:46:72:dc:21:77:
fe:ee:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:56:13 2025 by rpki-client