Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa
File: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (raw, json)
Hash identifier: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=
Subject key identifier: B9:DF:61:77:3F:00:F7:EC:AE:21:64:97:5A:A0:CE:80:03:81:7D:44
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 01968670A2C87F90DA3ECED72EBC21B96281
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa
Signing time: Wed 30 Apr 2025 11:24:10 +0000
ROA not before: Wed 30 Apr 2025 11:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 159.46.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:70:a2:c8:7f:90:da:3e:ce:d7:2e:bc:21:b9:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Apr 30 11:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9df61773f00f7ecae2164975aa0ce8003817d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:67:10:2e:49:ca:07:61:07:b9:82:d4:50:
98:1c:c0:d0:9d:bd:b4:ef:1d:6f:45:d5:4e:78:ae:
9b:0d:24:a6:2f:5e:ba:64:6b:a5:f9:2c:9f:7f:d6:
8b:7c:48:bd:64:44:b7:52:f0:d2:c7:77:3f:dd:a4:
4e:d0:be:a7:81:c0:84:2f:13:ba:da:dd:5a:39:7a:
f1:6f:8e:20:48:b5:ad:b2:81:1d:a4:e2:b1:34:16:
ad:21:13:f4:20:36:0c:6d:fc:43:2c:9d:12:99:90:
ab:22:c7:0e:f6:dc:5e:a6:cd:d3:72:33:8f:aa:76:
65:4e:12:3e:f7:3b:30:5e:1f:8e:74:09:22:74:7f:
e9:05:1b:65:03:d6:39:6f:77:cd:2d:8c:2e:d4:70:
25:c4:b2:40:fd:e5:a8:c1:00:7a:e0:84:4e:9f:5d:
f6:d6:5d:db:75:4d:fe:3f:65:97:5b:0c:0d:1a:ef:
b5:2d:73:9c:ba:60:46:39:80:fd:90:83:80:3c:fd:
aa:0a:e1:af:68:c7:d0:51:08:c8:1a:6f:c1:83:31:
59:93:70:59:aa:21:63:40:eb:5c:4e:6f:a0:de:d0:
16:df:05:bd:76:fe:7b:41:65:98:37:ca:6b:29:0c:
14:76:55:77:c0:21:1c:15:ff:c0:2c:df:8b:7a:38:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:61:77:3F:00:F7:EC:AE:21:64:97:5A:A0:CE:80:03:81:7D:44
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.46.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:d1:8b:6d:7a:73:ce:7c:23:98:d0:e7:bf:28:eb:b1:a3:8b:
c6:a9:cc:98:0d:32:42:2d:0c:05:6e:80:11:40:63:11:0b:3f:
88:0f:4b:b3:78:f6:4e:f2:37:c9:a1:90:b5:cf:3d:51:22:ee:
e3:6d:0f:28:4d:d1:c5:46:03:f7:c8:67:d2:55:69:2b:63:82:
ee:69:00:0d:cc:f5:52:67:11:cf:f8:29:22:99:99:50:23:d3:
6e:79:34:a5:b6:c1:d9:cb:d4:26:72:4b:ba:83:75:6e:09:fe:
a3:11:b5:e0:7c:f2:ae:93:21:51:4e:d0:a5:3d:f6:47:b0:e8:
7a:e5:90:58:7a:14:6a:42:3e:e9:db:32:ed:a2:83:5f:59:0a:
2a:6c:1d:8e:28:eb:ec:9e:f6:bb:a0:9a:f9:fd:6b:f3:18:60:
6d:67:29:9c:ef:81:a9:ab:6e:a0:da:bc:da:83:90:af:a4:ec:
bd:5f:1a:04:f8:66:d8:97:61:93:89:52:f9:89:c2:71:6d:cb:
ce:14:8f:b5:64:49:e6:b0:05:e3:26:3d:f6:0c:e6:ac:de:54:
57:e3:d9:d7:14:07:0e:d7:64:66:45:a7:6b:f5:80:0f:0e:6e:
6a:cc:d9:85:a5:b4:84:47:f7:01:33:bc:f1:8f:78:9b:f8:f0:
8e:01:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:05:23 2025 by rpki-client