Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa
File: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (raw, json)
Hash identifier: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=
Subject key identifier: 9B:CA:EB:52:8E:AE:88:37:22:AC:C8:BA:4A:5E:DE:62:01:66:A0:AB
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 01942368D8C6D1A3692F8D4C0A58AAD0DF84
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa
Signing time: Wed 01 Jan 2025 19:47:41 +0000
ROA not before: Wed 01 Jan 2025 19:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201785
IP address blocks: 62.69.145.0/24 maxlen: 24
62.69.151.0/24 maxlen: 24
91.223.211.0/24 maxlen: 24
193.200.230.0/24 maxlen: 24
195.43.88.0/23 maxlen: 24
195.43.88.0/24 maxlen: 24
2a01:9ec0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d8:c6:d1:a3:69:2f:8d:4c:0a:58:aa:d0:df:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jan 1 19:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bcaeb528eae883722acc8ba4a5ede620166a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:16:f3:c5:0c:66:81:06:9e:cf:96:ec:09:
b9:b8:76:4a:18:af:7d:db:2d:dc:7c:25:8a:c5:e6:
4e:69:f5:29:4a:bb:1f:e6:d6:98:2f:0d:0b:3a:dc:
dc:3e:36:36:5e:9e:0b:0f:83:ad:7c:51:11:5e:ab:
6e:0a:24:04:f5:be:8d:2a:b7:b9:7f:ac:32:c2:9e:
99:7c:63:93:62:99:fc:35:06:93:96:27:af:71:ed:
46:68:83:21:6f:69:34:8e:b5:4f:ba:24:cf:34:52:
67:b7:77:b5:32:18:39:48:75:dd:04:a3:c6:ff:cd:
e3:b7:18:cd:52:9b:91:bd:cd:65:6c:cd:ca:e2:9f:
92:a7:a1:26:c7:87:e4:c8:4e:15:1e:b8:6a:d7:02:
3a:d7:80:09:b3:e5:e0:0c:60:ff:52:eb:dc:b4:fe:
af:5f:8a:b5:ae:6f:47:bf:d5:21:34:f2:9a:44:3d:
b1:14:1b:d8:93:fb:f3:c9:74:8a:5a:6a:28:5e:01:
f8:32:6e:1d:35:12:d7:4a:44:b1:9e:46:7b:86:ad:
80:09:52:36:b1:b3:c9:63:a4:a7:c6:0b:27:87:f3:
d4:29:e9:b8:b0:31:61:46:da:a8:dd:96:77:6e:9a:
0e:ac:43:4f:ae:6d:e5:40:31:18:c7:69:97:b4:3d:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:EB:52:8E:AE:88:37:22:AC:C8:BA:4A:5E:DE:62:01:66:A0:AB
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.145.0/24
62.69.151.0/24
91.223.211.0/24
193.200.230.0/24
195.43.88.0/23
IPv6:
2a01:9ec0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:ae:a7:20:3c:05:7e:67:62:ad:3f:7f:eb:e6:95:dc:bc:33:
b8:e7:59:94:c8:5a:bb:d0:25:eb:5c:16:e1:fc:b1:d2:dd:ca:
78:1d:9e:f9:12:a4:10:a6:5a:ee:12:75:c1:a2:64:67:b6:29:
ad:93:d5:56:12:a5:a7:d2:0e:7a:1a:80:41:85:88:00:89:9c:
d9:e8:ed:77:11:77:15:d1:7b:ae:08:cc:5f:33:22:ab:21:12:
5e:37:19:1e:c3:d0:05:32:e7:b7:2a:b4:8e:e0:31:63:ef:5b:
c4:e1:11:cb:5f:fd:53:59:26:86:99:03:fd:f1:1c:b3:b2:06:
44:90:2b:aa:ec:9d:0e:a4:03:67:61:8d:98:e6:21:1d:79:1a:
1a:8a:a1:6c:9d:60:74:3b:55:88:b1:31:6e:54:df:98:c4:ea:
89:f8:e1:df:26:99:54:e5:e5:a7:85:24:18:ee:51:a7:ce:ed:
42:b7:1f:8e:d9:7d:6f:78:5c:da:7d:a4:70:9d:34:92:ce:35:
96:4f:4d:72:c8:58:37:ed:5f:f6:23:8e:6e:2b:77:da:60:3a:
15:a8:0e:4e:2d:f7:1a:a6:72:56:4b:7c:ad:9f:0c:8d:6a:1a:
3e:e4:bb:0d:5b:c5:92:34:34:71:ea:b3:e6:a4:49:8b:74:c7:
bc:20:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:40:23 2025 by rpki-client