Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UfFrN9RdyVi_z1ZLBFzwYdpr1Sg.roa
File: UfFrN9RdyVi_z1ZLBFzwYdpr1Sg.roa (raw, json)
Hash identifier: G+qx0zizd97pvadRhOL6/ggl0Do6RKpgtGn7NLOqNz8=
Subject key identifier: 51:F1:6B:37:D4:5D:C9:58:BF:CF:56:4B:04:5C:F0:61:DA:6B:D5:28
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01968C91D8B750159FFC646DA4AAF747B147
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UfFrN9RdyVi_z1ZLBFzwYdpr1Sg.roa
Signing time: Thu 01 May 2025 15:58:10 +0000
ROA not before: Thu 01 May 2025 15:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215314
IP address blocks: 45.93.22.0/24 maxlen: 24
91.132.226.0/24 maxlen: 24
91.188.212.0/24 maxlen: 24
91.188.213.0/24 maxlen: 24
91.188.214.0/24 maxlen: 24
91.188.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:91:d8:b7:50:15:9f:fc:64:6d:a4:aa:f7:47:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 1 15:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51f16b37d45dc958bfcf564b045cf061da6bd528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:48:38:1b:03:66:ea:af:8b:fe:be:ca:46:
2c:99:f5:f1:c3:60:e7:4d:f1:1f:6d:ec:a9:57:85:
dd:91:74:8f:f8:bf:a7:cf:1e:70:dc:1b:21:d2:f5:
85:92:34:0b:ea:ac:38:d5:63:76:4a:15:12:e4:e2:
3f:aa:61:95:e7:b9:6e:e7:75:d3:b7:6a:49:12:a7:
2a:b2:e4:83:b8:56:5f:0b:02:e7:4a:f9:05:3a:34:
bb:63:70:50:aa:65:84:42:04:d5:68:53:91:79:47:
5a:4c:7d:dd:f3:09:6a:da:f6:59:05:54:9d:40:e6:
83:e4:99:2a:2d:52:67:27:b7:26:de:42:1f:13:33:
fe:3a:f5:3b:a2:54:4f:f1:16:55:b8:b6:80:89:2e:
c3:ed:86:c9:94:93:a3:95:89:75:90:42:b2:f2:15:
f1:28:bf:0e:e1:e1:1d:99:f9:3a:b6:58:28:1c:33:
03:ea:e4:0e:21:9b:64:51:a9:54:9a:b2:54:52:8e:
77:65:6e:b0:55:73:a8:67:9d:ca:35:fd:3b:17:74:
ae:89:b7:a9:e6:bf:1f:5c:a5:da:57:f8:21:1a:a0:
49:24:c2:ca:fb:88:1a:28:c5:0a:8e:4a:9e:94:cc:
c6:cc:4d:1f:6a:67:6f:ed:04:09:c8:df:e9:99:d2:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F1:6B:37:D4:5D:C9:58:BF:CF:56:4B:04:5C:F0:61:DA:6B:D5:28
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UfFrN9RdyVi_z1ZLBFzwYdpr1Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.22.0/24
91.132.226.0/24
91.188.212.0/22
Signature Algorithm: sha256WithRSAEncryption
54:c1:a7:35:42:b1:86:eb:2d:e7:ba:18:02:fa:53:d9:e0:f4:
3f:be:43:fe:95:ad:47:4b:36:ae:4c:b4:89:5c:11:10:7a:33:
ef:23:e7:88:fb:a6:59:52:fd:f6:23:f2:fb:f7:40:79:08:19:
77:8d:cb:2e:a0:3a:c2:b3:a1:03:13:97:5e:9b:18:5b:74:d2:
f1:4f:29:7d:14:0c:be:48:5b:17:29:76:7f:7f:83:28:70:4e:
4a:27:3e:29:88:1b:ed:bc:94:50:76:58:9d:ae:75:34:21:5e:
85:99:ae:d0:28:4e:1e:86:16:62:91:30:92:05:b3:36:6a:17:
5b:eb:03:35:c7:1e:1c:df:dd:d3:53:04:9d:7b:a5:01:76:e7:
c2:ff:81:3c:cb:e7:80:85:2e:58:82:c4:a8:eb:76:3f:e2:ce:
14:bc:92:38:ca:fe:d4:88:b6:ed:df:62:ac:55:45:9e:1a:7c:
b0:ed:33:72:d1:f7:91:87:e9:a7:38:56:2e:43:89:81:ac:c0:
41:f9:8a:e5:26:ff:7c:2e:3a:90:8b:73:18:9f:9c:a9:7d:26:
07:53:04:c4:62:b8:b7:ad:2e:a6:df:0d:a2:93:f8:66:51:32:
60:63:40:35:b0:00:84:69:0d:1d:0f:bd:22:e3:bd:bc:53:05:
e8:c2:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:33:11 2025 by rpki-client