Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mB1L2pEcJICBWEdxAaLsI5iDh0c.roa
File: mB1L2pEcJICBWEdxAaLsI5iDh0c.roa (raw, json)
Hash identifier: w7J8b7TdvKm4RlASKrDAIN+aB9a6nuhL0I/bEBbBKzg=
Subject key identifier: 98:1D:4B:DA:91:1C:24:80:81:58:47:71:01:A2:EC:23:98:83:87:47
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01948E0E7A2AA8F13EDDC3D1D280D1EA0CB1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mB1L2pEcJICBWEdxAaLsI5iDh0c.roa
Signing time: Wed 22 Jan 2025 12:48:20 +0000
ROA not before: Wed 22 Jan 2025 12:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214940
IP address blocks: 45.144.212.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:0e:7a:2a:a8:f1:3e:dd:c3:d1:d2:80:d1:ea:0c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 22 12:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=981d4bda911c24808158477101a2ec2398838747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:d5:b2:b3:ab:86:63:0d:c6:0e:f3:6b:7d:
00:ea:a9:25:52:5e:cb:31:a5:ca:c8:a2:0f:08:8b:
dc:77:52:3a:11:ee:9f:18:76:3d:4c:49:71:86:05:
89:20:75:8c:90:94:3c:2c:1b:fa:0d:38:48:32:30:
bb:4b:8c:1f:25:8d:b8:84:69:af:7e:d6:86:96:aa:
56:c8:31:bc:01:a9:5c:00:3c:1d:74:67:42:ea:2c:
12:b6:86:04:46:d9:27:23:06:1a:c4:fa:5f:5e:5b:
95:f7:85:87:6f:72:8f:81:5e:97:d9:00:cf:8b:9f:
5a:72:d3:0e:b9:a5:ff:59:11:89:09:86:6a:fc:5c:
35:da:06:25:29:1a:96:d7:e5:99:ef:15:e8:97:70:
af:64:d5:4f:ae:bc:bc:49:b4:cc:6b:12:32:01:87:
74:49:af:b4:fc:94:73:50:55:79:78:62:30:ce:d0:
6a:db:ee:b8:7f:ae:b7:bf:64:6f:78:ec:2f:73:f7:
8e:82:1f:1e:7a:f7:9d:2e:64:34:0e:5a:7a:9b:4c:
ea:c6:45:bf:8f:d3:01:bd:b3:1a:47:d9:91:90:21:
02:2c:54:fa:19:c6:3c:06:3b:f6:5c:b6:01:51:3a:
1d:ea:0a:29:57:51:17:ac:2f:b3:62:12:f2:ab:ff:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1D:4B:DA:91:1C:24:80:81:58:47:71:01:A2:EC:23:98:83:87:47
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mB1L2pEcJICBWEdxAaLsI5iDh0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.212.0/24
195.211.191.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c6:1e:f4:44:c1:ed:1f:30:ca:89:20:cf:6a:7e:43:17:e5:
e5:1e:e2:5b:6a:35:ff:b9:e0:ee:0f:4d:72:e1:60:45:0e:55:
c7:d9:ab:e2:c5:b4:8e:54:3c:4d:8a:37:f0:6e:9b:21:a9:f4:
39:a6:ca:fe:42:73:81:b8:63:e6:4b:1a:e1:38:92:c9:fc:4a:
68:ff:51:df:f6:8a:a0:98:aa:0b:e3:f8:f3:06:e2:c9:e4:86:
6e:dc:e4:dd:fc:af:01:60:88:7a:2a:52:cb:a5:2f:26:14:ca:
aa:7a:00:fa:6f:ea:35:97:dc:f1:11:8d:04:d7:c4:ca:b9:af:
45:71:00:e1:17:28:f5:dd:f4:17:26:78:b1:ea:5f:12:f0:b5:
14:f2:f7:82:dc:65:39:ea:89:1f:82:0e:bc:ed:43:73:12:c2:
15:b8:6b:95:99:7a:c7:5c:2f:a7:44:0d:b3:f2:46:0b:e4:1d:
78:5d:be:58:53:50:f9:3c:b6:28:96:1d:61:64:fb:15:71:65:
bd:6e:8d:91:c9:96:19:42:c5:b1:8e:5b:6f:ef:e7:f5:5f:35:
28:a7:a1:13:49:8e:f0:2f:02:a4:b6:b3:ee:eb:bf:b1:0e:89:
aa:c6:85:29:9e:f7:9c:df:64:6c:24:72:fd:74:25:e9:85:c9:
a0:dc:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:55 2025 by rpki-client