Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/uQzeyhb_YH9D-fUCEABxF4wv1F8.roa
File: uQzeyhb_YH9D-fUCEABxF4wv1F8.roa (raw, json)
Hash identifier: 8/LP96pPXoanusy0qN7hBVY8daOytWMa0c+vNmNso88=
Subject key identifier: B9:0C:DE:CA:16:FF:60:7F:43:F9:F5:02:10:00:71:17:8C:2F:D4:5F
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 0196A996708F7F8615BA1DF0B6F624B6EC6E
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/uQzeyhb_YH9D-fUCEABxF4wv1F8.roa
Signing time: Wed 07 May 2025 07:12:10 +0000
ROA not before: Wed 07 May 2025 07:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51456
IP address blocks: 212.107.248.0/21 maxlen: 21
212.107.248.0/23 maxlen: 23
212.107.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:96:70:8f:7f:86:15:ba:1d:f0:b6:f6:24:b6:ec:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: May 7 07:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90cdeca16ff607f43f9f502100071178c2fd45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:c3:55:63:a9:b7:15:ef:4e:f8:40:58:ca:
56:d2:54:c8:c2:78:c4:d0:e4:c9:8e:bd:af:68:c3:
58:5e:21:62:53:f5:03:51:07:c3:60:5e:5b:ab:c3:
13:8d:b5:fe:b1:e6:98:4f:a5:d5:fd:b9:8d:23:4b:
74:ec:2b:13:e1:f6:b2:b1:6b:66:95:e6:d0:bf:3b:
a7:6a:5c:50:a1:4f:46:a7:df:be:77:0a:e0:45:23:
45:4c:dd:31:37:1c:47:7d:f1:f2:24:66:5a:43:7c:
c3:7b:3b:77:b0:1b:46:63:ee:b7:be:45:13:41:0a:
d4:b4:81:fc:40:54:32:c0:d6:6b:a7:40:81:f6:49:
52:f3:da:b2:ce:f7:01:54:ac:1b:f5:9c:83:e3:75:
5c:cd:d9:27:1f:25:c1:d3:89:6f:42:39:66:98:04:
6e:23:82:69:4f:77:e7:9e:f3:f8:ac:5e:76:ad:db:
12:41:cb:3c:99:e7:b2:53:c2:e7:a6:6f:85:62:0e:
c0:ad:85:15:90:2a:0f:cf:6b:33:4f:85:69:e0:e7:
0f:08:57:3a:04:81:49:29:d2:a5:22:72:8b:22:c8:
94:b4:d6:52:87:d9:e1:d0:77:1c:05:1e:d6:93:6a:
55:e1:1e:a6:03:2b:4c:1e:87:9e:8d:0c:a8:d8:13:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:DE:CA:16:FF:60:7F:43:F9:F5:02:10:00:71:17:8C:2F:D4:5F
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/uQzeyhb_YH9D-fUCEABxF4wv1F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:24:0d:ad:9f:1e:40:75:61:fb:5c:d1:5b:43:03:51:50:62:
68:a7:ad:cc:48:65:a0:b6:66:1b:76:b1:23:30:9f:9e:5e:eb:
c3:1c:ad:6a:06:85:67:10:b5:3f:c7:99:ce:9f:c8:f0:a7:69:
b0:89:dc:e7:05:5d:e2:88:87:4d:90:15:21:5b:f4:ef:12:f6:
ce:ea:6c:3e:32:1b:07:fe:ac:7d:5c:c2:40:2d:67:70:84:37:
8b:1f:6c:24:7c:36:9c:17:ae:53:25:eb:c4:be:64:61:65:08:
c8:08:ab:6c:fe:85:b6:3c:e8:42:25:f7:63:5d:c4:03:00:28:
96:65:12:78:c1:5d:16:b0:85:98:4e:74:16:8d:b9:28:0f:c1:
07:ea:7c:7c:c4:a2:73:ed:98:bd:4c:15:47:12:e6:47:2c:26:
79:22:74:d2:c9:37:17:50:79:e2:b0:d2:39:12:5e:36:1a:08:
36:9b:2c:36:34:77:71:64:3f:52:8a:d9:f0:f8:3d:d7:fc:30:
23:74:f8:b8:2d:fd:63:91:71:39:14:3e:2f:d5:74:bd:fc:81:
a7:89:75:7d:f0:62:6e:96:0f:79:cd:4d:96:e3:5f:e2:67:4b:
11:8a:27:6b:01:41:fa:0a:dd:fd:81:c1:e5:83:4c:3b:69:e7:
ba:3a:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:28:07 2025 by rpki-client