Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa
File: RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa (raw, json)
Hash identifier: rjDNh/X9V2tOJCumJu3h5LLgZycuOJpT5mRt3QFUYc8=
Subject key identifier: 46:60:04:F8:BE:0F:0D:90:68:1B:E5:F1:E4:2B:E1:96:9D:92:45:95
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B98BA6297C0DDDB2E1C10F0A88446
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202491
IP address blocks: 84.236.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:98:ba:62:97:c0:dd:db:2e:1c:10:f0:a8:84:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=466004f8be0f0d90681be5f1e42be1969d924595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:ae:28:9d:b8:df:4c:dc:eb:be:a1:bf:85:
12:97:3c:c1:43:f3:6f:df:a8:ec:11:87:7b:02:c8:
67:37:0c:7c:e0:8a:04:a4:1a:ff:ea:58:21:50:93:
ab:05:f6:64:c7:18:5f:92:d9:16:2c:fb:ed:48:d7:
12:c2:13:be:32:28:38:cc:1f:57:09:44:ec:0d:21:
ac:7b:00:c5:39:6a:9d:b9:bf:a2:b3:cf:43:0c:ab:
0d:bc:ba:a0:68:b0:f5:b6:33:d8:a8:b4:9c:e0:ae:
5f:7f:ed:f8:06:32:6f:83:a5:e0:9d:92:1e:be:9c:
73:a9:15:df:3b:2d:56:4b:02:9c:06:bb:c5:78:b5:
59:01:3d:6b:35:90:dd:23:44:f5:b5:a4:01:e8:0c:
cc:f6:99:b6:46:cf:b3:07:cc:40:c9:04:de:6c:a6:
65:18:14:57:3b:a1:a2:1e:b3:ed:3f:1c:db:8f:ed:
26:92:b2:b4:2d:2e:6a:11:03:b8:ba:31:de:5b:fb:
48:62:a2:3b:2c:a1:09:4b:b9:09:73:0d:8f:ef:59:
39:4c:97:6a:21:09:87:a2:cb:2b:2e:df:37:04:a4:
62:38:4a:e3:ca:0a:a6:f5:05:41:4c:ef:62:82:ed:
e6:6e:91:fc:ed:30:a4:ad:ca:84:da:f9:17:5f:0e:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:04:F8:BE:0F:0D:90:68:1B:E5:F1:E4:2B:E1:96:9D:92:45:95
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RmAE-L4PDZBoG-Xx5Cvhlp2SRZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4a:9c:3d:a4:a7:38:04:35:6b:80:7d:32:9e:1e:91:04:d0:
eb:52:90:1f:95:99:ee:58:5f:a2:ec:44:d3:86:bc:71:d7:f7:
26:db:7c:d1:63:e1:74:ef:2f:20:4b:a9:f1:3a:e1:12:4a:4b:
31:81:84:2f:7a:2b:7a:82:04:38:66:17:28:2e:3e:6c:8b:5e:
46:99:b5:6e:04:93:01:b4:5f:fa:08:8b:3f:70:36:96:5c:d0:
be:e2:9b:41:2a:a8:b0:b3:1b:2f:5c:a4:09:94:34:79:c2:42:
9e:33:d8:6d:bd:bb:0e:e8:72:88:5c:25:55:c8:a9:f1:94:0a:
b7:95:24:52:bf:c6:3a:0b:b5:22:dd:e0:a5:16:15:a0:67:aa:
5d:c2:df:a5:ef:24:2f:d0:1f:fb:eb:bc:03:6d:13:f0:51:ca:
2d:7e:cc:df:8d:15:68:01:95:9a:6b:5d:44:13:4e:bb:56:5e:
8d:b0:93:f5:d6:bc:1c:9f:12:2a:4c:05:3c:8d:ee:88:34:6d:
df:2d:0b:b2:60:4e:7a:1b:7c:22:49:73:56:aa:5f:15:06:f4:
98:7c:d4:d1:c5:1a:5a:cb:37:45:e2:ba:f1:30:ed:04:d1:d2:
d7:86:70:a7:b4:ed:5d:85:6f:69:b5:06:8e:a9:83:04:08:95:
d6:18:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:08:48 2025 by rpki-client