Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa
File: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (raw, json)
Hash identifier: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=
Subject key identifier: BB:35:06:4D:F8:ED:B2:E1:D6:95:C3:7F:23:42:00:F0:23:2B:7C:16
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01968FC9D1CA8807A2C0BE72AFC8751E8F74
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa
Signing time: Fri 02 May 2025 06:58:10 +0000
ROA not before: Fri 02 May 2025 06:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 78.136.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:c9:d1:ca:88:07:a2:c0:be:72:af:c8:75:1e:8f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: May 2 06:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb35064df8edb2e1d695c37f234200f0232b7c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:ad:4b:dc:93:07:57:51:d4:69:f6:a1:0c:
51:3f:b3:ac:60:eb:2f:02:2e:c8:66:f3:39:3f:4c:
8a:63:44:61:47:e2:f9:5c:20:f7:54:69:a8:34:50:
92:64:b6:8a:29:84:e4:69:22:c5:c5:54:f7:bd:8b:
70:d8:f5:a9:cc:25:e9:b2:a4:e1:cd:de:79:24:04:
d0:d1:36:c9:e0:fc:c4:01:26:40:7d:0f:b6:07:f6:
7a:5a:4c:73:06:a7:45:08:34:ea:b1:b7:f3:a1:ee:
84:88:fd:01:d6:eb:5f:06:18:43:06:3f:53:1d:04:
8f:81:8f:38:9c:2a:5c:da:5a:31:16:5f:c1:d6:18:
39:16:00:35:40:ef:5a:bb:69:73:b0:6d:36:00:ef:
68:0f:87:1f:b4:ce:ad:df:aa:9f:48:16:19:be:2d:
0b:47:55:e8:71:f4:27:33:e7:2d:fb:9a:64:e0:e9:
7a:fe:8a:35:b7:94:4c:a8:b8:00:9e:1b:96:ac:21:
5b:ac:e6:92:e4:78:01:73:77:ef:88:60:f4:0d:36:
89:54:8a:b3:8f:b4:94:02:1a:73:74:e4:eb:9f:57:
0f:70:e6:bc:aa:a8:06:bd:b7:8c:1f:fc:37:f4:6b:
9c:a9:3e:57:4d:4b:d5:bb:7f:14:ba:d9:dc:39:52:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:06:4D:F8:ED:B2:E1:D6:95:C3:7F:23:42:00:F0:23:2B:7C:16
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.254.0/24
Signature Algorithm: sha256WithRSAEncryption
70:48:b8:26:e1:44:a2:5d:a8:96:01:59:4e:56:e9:1f:49:1c:
f9:39:82:f0:ae:2c:4d:43:18:23:50:2c:50:3b:87:c4:9a:cb:
d4:fb:37:d0:2b:5c:3c:2b:e3:63:ae:a4:73:b0:6d:6e:bb:34:
27:ed:62:10:b5:24:2c:f8:ee:7d:5c:99:30:f8:bc:73:55:96:
7e:bd:14:b1:04:97:80:d3:b1:c6:0e:72:d6:8c:8f:7c:41:aa:
e6:ca:b7:bd:78:e1:e1:57:30:be:57:1b:e6:4c:fc:8d:0b:18:
5e:a1:fd:43:9c:e9:fb:88:72:5d:f9:b8:87:23:6e:1a:f4:9e:
ca:31:93:a8:2d:2f:3d:79:db:3b:2d:a6:4f:29:6a:9a:79:ce:
04:89:a6:0a:25:59:88:e7:5d:b5:24:a1:a7:4b:d2:5f:fd:6d:
11:9f:5c:73:77:06:ed:e2:a0:6c:59:0b:de:22:6d:e7:c3:e1:
ce:ca:df:3c:4c:9f:ad:5a:e7:53:35:1f:b9:cb:68:37:9d:6b:
9b:f5:18:85:1f:3f:82:cc:b3:26:df:44:d8:4f:32:97:38:16:
b3:f3:74:87:34:f5:42:65:46:24:f1:01:cf:b7:6a:f2:7c:bf:
0c:86:a9:5b:fa:42:19:3f:e9:59:32:fe:c2:d9:5d:8a:30:cb:
9f:cc:2a:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaPydHKiAeiwL5yr8h1Ho90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4
NTAxMTMwHhcNMjUwNTAyMDY1ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjM1MDY0ZGY4ZWRiMmUxZDY5NWMzN2YyMzQyMDBmMDIzMmI3YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljatS9yTB1dR1Gn2oQxRP7OsYOsv
Ai7IZvM5P0yKY0RhR+L5XCD3VGmoNFCSZLaKKYTkaSLFxVT3vYtw2PWpzCXpsqTh
zd55JATQ0TbJ4PzEASZAfQ+2B/Z6WkxzBqdFCDTqsbfzoe6EiP0B1utfBhhDBj9T
HQSPgY84nCpc2loxFl/B1hg5FgA1QO9au2lzsG02AO9oD4cftM6t36qfSBYZvi0L
R1XocfQnM+ct+5pk4Ol6/oo1t5RMqLgAnhuWrCFbrOaS5HgBc3fviGD0DTaJVIqz
j7SUAhpzdOTrn1cPcOa8qqgGvbeMH/w39GucqT5XTUvVu38UutncOVIerQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLs1Bk347bLh1pXDfyNCAPAjK3wWMB8GA1UdIwQY
MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt
M2Q4YmM4OWI0NDI3LzEvdXpVR1RmanRzdUhXbGNOX0kwSUE4Q01yZkJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3
LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToj+MA0G
CSqGSIb3DQEBCwUAA4IBAQBwSLgm4USiXaiWAVlOVukfSRz5OYLwrixNQxgjUCxQ
O4fEmsvU+zfQK1w8K+NjrqRzsG1uuzQn7WIQtSQs+O59XJkw+LxzVZZ+vRSxBJeA
07HGDnLWjI98Qarmyre9eOHhVzC+VxvmTPyNCxheof1DnOn7iHJd+biHI24a9J7K
MZOoLS89eds7LaZPKWqaec4EiaYKJVmI5121JKGnS9Jf/W0Rn1xzdwbt4qBsWQve
Im3nw+HOyt88TJ+tWudTNR+5y2g3nWub9RiFHz+CzLMm30TYTzKXOBaz83SHNPVC
ZUYk8QHPt2ryfL8Mhqlb+kIZP+lZMv7C2V2KMMufzCo9
-----END CERTIFICATE-----
Generated at Sat May 10 13:45:28 2025 by rpki-client