Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/UVXDcefxnIrIyZ-DcfiZ2xkmVp4.roa
File: UVXDcefxnIrIyZ-DcfiZ2xkmVp4.roa (raw, json)
Hash identifier: HdXYNvSxAlKxxU8cwWq8MmlbJcS+0QbVfw07NS0ZrbY=
Subject key identifier: 51:55:C3:71:E7:F1:9C:8A:C8:C9:9F:83:71:F8:99:DB:19:26:56:9E
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01965CBF6A9AB7FDFD397EF92AC7585B5E89
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/UVXDcefxnIrIyZ-DcfiZ2xkmVp4.roa
Signing time: Tue 22 Apr 2025 09:06:10 +0000
ROA not before: Tue 22 Apr 2025 09:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35039
IP address blocks: 139.66.0.0/23 maxlen: 23
139.66.2.0/23 maxlen: 23
139.66.4.0/23 maxlen: 23
139.66.6.0/23 maxlen: 23
139.66.8.0/23 maxlen: 23
139.66.10.0/23 maxlen: 23
139.66.12.0/23 maxlen: 23
139.66.14.0/23 maxlen: 23
139.66.16.0/23 maxlen: 23
139.66.18.0/23 maxlen: 23
139.66.122.0/23 maxlen: 23
139.66.124.0/23 maxlen: 23
139.66.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:bf:6a:9a:b7:fd:fd:39:7e:f9:2a:c7:58:5b:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Apr 22 09:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5155c371e7f19c8ac8c99f8371f899db1926569e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:ee:af:36:b9:dc:69:fe:28:63:7a:f0:b2:
74:8c:19:10:d7:1d:7d:a3:20:93:25:6a:8c:b0:59:
94:88:77:1a:6b:99:6a:5a:a9:56:4c:e3:41:c0:7d:
5a:c9:f1:b5:3d:a1:45:36:a3:8c:d8:e6:01:d3:16:
ac:9e:da:16:42:68:d0:d8:35:97:8c:f2:6f:32:70:
fc:ad:2e:77:7c:b9:62:20:d2:6f:f6:95:95:2c:ec:
5b:f0:05:25:4a:dd:7b:75:a0:4b:98:6e:0f:8b:e7:
3c:cf:46:48:1d:fd:a1:2e:bc:f8:63:af:c4:dc:00:
e5:7e:3b:83:d2:a4:0d:63:1d:77:64:bf:df:1c:89:
c7:2b:d6:8a:53:5b:64:81:85:ea:18:a6:09:06:46:
c9:74:78:4c:33:d9:86:5f:35:54:e0:96:8d:66:61:
d6:6b:0a:b4:d1:bc:fe:4d:89:18:84:a7:94:ea:32:
b3:1b:9b:21:38:31:aa:1f:c7:ad:22:68:a6:35:d9:
36:ec:3a:77:41:87:11:d4:d8:83:c5:ef:b1:01:88:
46:65:38:e0:93:91:7f:d9:00:50:19:96:97:70:af:
b2:dd:99:85:2e:9d:ca:20:cf:eb:4c:14:53:48:fd:
7c:ec:92:c9:f4:e8:6d:c0:cf:2b:2c:85:fe:6d:90:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:C3:71:E7:F1:9C:8A:C8:C9:9F:83:71:F8:99:DB:19:26:56:9E
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/UVXDcefxnIrIyZ-DcfiZ2xkmVp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.66.0.0-139.66.19.255
139.66.122.0-139.66.127.255
Signature Algorithm: sha256WithRSAEncryption
b0:a0:b1:3c:6f:6c:b9:c0:4e:03:78:37:e5:36:a1:e7:6c:38:
50:d6:c1:6c:60:d1:68:30:51:ca:a7:b7:a8:e4:5a:b0:09:b0:
fa:95:b5:ad:be:c8:9a:24:db:86:b0:56:ee:48:f7:91:4a:ab:
e9:cd:70:ce:ca:06:3a:63:1e:67:c0:54:fa:c0:eb:13:6e:b3:
17:2e:36:bd:30:34:ef:7b:ef:1b:36:ef:14:02:c5:a3:ff:05:
5e:74:62:ef:69:bb:fa:aa:f1:fe:c9:e9:61:28:e4:f3:4f:85:
b2:ee:0f:ea:a8:6b:99:74:bf:db:dc:60:25:53:33:d4:98:40:
bf:46:4f:15:72:ec:85:d3:e8:d5:20:49:3a:9d:58:8a:7b:a6:
2f:cd:ee:53:f2:76:20:74:cc:22:c5:ee:e5:80:88:d2:c4:20:
92:1b:3e:58:66:f4:aa:a8:06:78:7b:5e:8d:5a:c4:25:63:d2:
f4:b1:bc:09:a3:c2:bf:af:28:0c:a1:b8:26:f1:44:b0:d7:89:
dc:a3:e0:87:f9:88:c0:bc:7c:05:4e:fb:74:49:5d:12:c5:43:
b1:52:7d:ea:43:9d:37:03:1b:b4:14:aa:b3:0b:23:3e:0c:10:
6f:94:bf:b7:de:cd:ac:eb:9d:57:3b:37:44:3a:79:da:10:fe:
78:07:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:11:08 2025 by rpki-client