Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/10H4MUNhSSva047O9EEp6SPRBJE.roa
File: 10H4MUNhSSva047O9EEp6SPRBJE.roa (raw, json)
Hash identifier: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=
Subject key identifier: D7:41:F8:31:43:61:49:2B:DA:D3:8E:CE:F4:41:29:E9:23:D1:04:91
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0194221FA503B526B5C2E49D9E55AC328EFA
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/10H4MUNhSSva047O9EEp6SPRBJE.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199925
IP address blocks: 45.149.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:03:b5:26:b5:c2:e4:9d:9e:55:ac:32:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d741f8314361492bdad38ecef44129e923d10491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:ec:8b:f0:20:d5:d9:78:4c:77:ce:b6:85:
98:7d:7e:16:8d:51:db:d0:c2:1c:ef:52:1f:77:33:
8f:29:c5:e2:12:f2:d1:0e:48:86:49:2d:2a:03:87:
9d:8d:bd:5c:2b:6f:00:24:fd:d9:ef:08:8e:9e:32:
a3:14:cd:11:c5:38:47:c2:c5:e8:80:bc:8c:53:66:
df:8c:9b:6d:05:77:2f:41:6a:3b:34:43:42:94:c2:
ed:1b:01:e0:a4:06:dd:5e:c2:d8:a2:f7:36:12:e7:
4e:d5:19:aa:0d:33:1d:9f:49:0e:c2:08:56:04:d9:
03:03:87:82:1a:a5:0c:ec:4c:3e:be:b6:ee:f8:83:
23:18:e0:21:86:60:f3:b2:39:60:69:29:4b:bb:53:
12:4f:ef:3b:7b:0c:1c:83:72:f9:5b:63:b3:dc:fa:
b5:d4:89:a1:53:ae:e1:b9:93:32:58:df:c0:a6:f4:
6b:11:11:ee:61:2f:fa:92:3f:80:82:40:cd:4e:e2:
7b:24:86:64:2e:fb:65:1d:8d:4a:09:9f:b6:83:98:
e2:9e:2f:d2:16:29:67:ef:32:27:f6:2c:f6:dc:fc:
7b:a1:30:b7:55:d5:55:9e:cc:5b:8e:c7:32:21:e8:
bd:42:31:f4:96:a3:52:2d:b3:7f:de:7b:93:04:53:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:41:F8:31:43:61:49:2B:DA:D3:8E:CE:F4:41:29:E9:23:D1:04:91
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/10H4MUNhSSva047O9EEp6SPRBJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:23:43:a0:ec:45:22:da:cf:14:d9:89:3c:69:69:92:17:68:
a7:e2:f9:89:ff:cf:39:70:d8:89:26:7c:10:f8:2d:5d:c8:9e:
a0:94:22:2b:bd:a7:e4:51:ca:c9:a2:4a:17:b8:cf:e4:96:b4:
1f:e7:b5:3d:d3:da:a1:b0:db:34:f6:a6:63:78:e3:d7:4e:03:
ec:42:92:6a:ae:99:5f:26:ca:cd:c5:64:b0:cc:18:51:46:30:
28:70:fe:bb:d4:24:59:38:31:11:8d:3a:b9:77:64:78:fd:d3:
f6:ec:3c:10:43:ef:4b:46:05:bc:ff:20:8d:b6:fb:b0:d1:3a:
00:a8:ac:1c:82:0a:7f:a9:7f:4e:9a:b1:89:fc:c0:14:83:fb:
6d:c6:47:c4:d4:cc:50:e2:bb:c5:43:d5:c6:c8:aa:5a:d8:99:
e9:1f:3b:06:5c:3e:b8:33:59:4d:ff:e3:61:cf:f9:d5:8e:94:
36:52:7e:a6:85:5b:6a:4b:b4:07:e1:81:b4:f8:a4:9e:2e:5c:
79:1a:16:51:e7:f5:62:0a:47:21:8e:4e:d7:54:28:75:c4:06:
f3:94:99:d6:19:4a:18:57:1c:b0:78:4c:15:28:fe:fd:6a:22:
f8:1d:20:05:77:f0:4a:f6:71:59:f9:cb:25:b0:42:5b:03:73:
63:f3:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:29:05 2025 by rpki-client