Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/m04fb-jUHyOTXhh_z_q3Hd-LAMY.roa
File: m04fb-jUHyOTXhh_z_q3Hd-LAMY.roa (raw, json)
Hash identifier: bXlmxzbFdTP+0jnQtSP1HnYWBUd9rItj9AvW7vkRDls=
Subject key identifier: 9B:4E:1F:6F:E8:D4:1F:23:93:5E:18:7F:CF:FA:B7:1D:DF:8B:00:C6
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019420D65746F7A0CF62F5701FA71FCB51CB
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/m04fb-jUHyOTXhh_z_q3Hd-LAMY.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15695
IP address blocks: 84.47.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:46:f7:a0:cf:62:f5:70:1f:a7:1f:cb:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b4e1f6fe8d41f23935e187fcffab71ddf8b00c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:5d:31:b0:2c:5e:f8:b0:ff:16:ae:dd:50:
09:a8:df:ce:4f:66:5e:c1:2d:e0:b4:1d:03:74:74:
50:a4:b2:aa:f3:c6:ae:2d:98:a5:4d:84:f3:8d:5e:
ee:df:4c:1f:2a:6a:45:44:a4:4a:b9:d8:d9:83:4d:
4f:8b:1a:34:d8:73:79:23:85:8d:64:99:97:b5:d1:
42:9d:06:02:83:25:3f:3f:0a:69:04:ea:fe:c1:bd:
f9:a9:55:46:c5:1d:66:9a:0b:42:af:e6:cf:f5:fb:
b7:69:cb:d8:76:68:f2:c7:47:9a:7a:a0:37:52:01:
1c:9c:4d:52:a1:d9:79:e2:2a:32:b7:32:27:7e:a0:
96:05:c4:e4:5f:33:82:b8:21:e2:4c:76:e8:48:9d:
70:c9:e8:63:5a:4f:7e:aa:a1:cb:0c:19:d1:3b:ea:
1a:0b:3e:f1:82:00:20:60:27:f3:d0:24:44:73:a7:
b1:3d:97:af:3f:83:fb:1c:22:56:68:86:56:4a:98:
40:e2:d9:bd:a8:76:14:52:5a:80:b9:1c:a7:13:52:
41:46:f7:52:b7:fa:f8:60:88:70:48:0b:e8:7d:f4:
0b:c8:b7:98:be:d7:90:4a:7d:a5:97:37:58:1c:68:
52:9c:36:e7:39:85:da:93:96:ed:18:e0:35:4b:9e:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:1F:6F:E8:D4:1F:23:93:5E:18:7F:CF:FA:B7:1D:DF:8B:00:C6
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/m04fb-jUHyOTXhh_z_q3Hd-LAMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.184.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d3:63:ce:b1:aa:fa:c0:dc:6a:9c:85:cc:6e:2f:c8:c1:4a:
4b:26:8d:cc:22:71:ce:73:35:82:4e:c7:6c:ea:98:34:14:be:
4f:5c:3f:02:da:46:f9:d6:cb:1e:75:e6:09:c3:f3:76:3e:d8:
c4:28:2c:e8:7c:21:2b:17:fb:8c:9e:22:72:99:d5:29:92:ae:
ea:35:93:bf:f8:a5:c0:10:f0:aa:07:aa:8a:f6:5d:be:a0:9c:
11:0c:2e:1f:c7:b1:38:e0:96:ed:2d:1c:e7:1b:0e:5c:4b:53:
fa:7a:6f:9f:16:05:75:37:23:f2:e6:42:c6:02:76:90:cb:64:
81:e2:0e:24:05:3e:6f:cd:ed:34:b3:bf:77:db:68:1b:cd:b5:
76:b6:86:65:af:31:12:cb:79:5e:57:52:01:74:ac:d2:e9:5b:
9b:2f:0d:85:9c:d1:8c:83:cf:d0:bf:84:e5:3c:8e:e6:6b:83:
ac:1d:3a:09:6a:85:e4:d6:3d:74:fa:ea:ed:cb:5e:a7:82:87:
50:99:a6:a1:b5:20:e3:30:ec:2d:2c:2c:cb:f0:9f:8a:d7:b0:
25:4e:99:79:02:75:d4:4b:89:c2:d4:7a:c0:54:8c:ce:32:74:
04:c9:d8:c1:f4:84:f0:79:56:1c:9d:7d:26:aa:90:79:b3:50:
62:fc:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:45 2025 by rpki-client