Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/mTBy0j8EnJsdaUzGVXZ-14s63tY.roa
File: mTBy0j8EnJsdaUzGVXZ-14s63tY.roa (raw, json)
Hash identifier: helve75lh7gtxaq/8CTnY/dxHsO6u+Iv8BV7ge1atis=
Subject key identifier: 99:30:72:D2:3F:04:9C:9B:1D:69:4C:C6:55:76:7E:D7:8B:3A:DE:D6
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01941F8C62BCB332616A3CE47A67BB7B00B5
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/mTBy0j8EnJsdaUzGVXZ-14s63tY.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 147.185.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:62:bc:b3:32:61:6a:3c:e4:7a:67:bb:7b:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=993072d23f049c9b1d694cc655767ed78b3aded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:40:e5:eb:fc:35:08:5e:92:cd:a6:87:80:
e5:68:3c:cb:04:e1:8e:5d:cb:1c:e7:76:0e:01:bb:
23:81:65:df:59:40:4c:30:72:9c:76:12:ac:eb:e7:
73:5b:88:fe:de:bd:96:22:1b:85:f8:15:81:ef:be:
8c:c2:05:f0:5b:9a:c5:d6:4b:f3:03:00:cf:ac:95:
2b:26:02:77:23:53:87:1e:d9:7b:84:39:7f:1d:79:
14:b3:41:79:71:f5:f2:3c:c1:41:a8:79:c0:5f:1a:
24:c1:98:53:c7:5a:f8:10:96:e8:49:6f:3f:1c:fb:
04:a8:af:10:dd:07:4d:0d:1b:a2:e2:27:41:76:8d:
30:7c:e0:1b:bf:98:b4:10:24:ac:4a:5c:1d:4e:36:
17:95:46:c5:00:c4:15:89:7a:e2:cb:a9:45:8e:07:
83:7f:00:06:96:a7:33:db:9e:9e:bc:02:1a:87:3a:
48:d8:9c:9a:b8:18:3c:26:18:d6:d5:d1:81:26:99:
86:3d:d1:ba:18:97:7c:be:16:41:49:7a:e9:78:30:
29:9f:9b:fd:5c:05:94:89:ee:35:09:85:06:75:ad:
16:c6:a4:78:96:09:f5:76:59:d9:34:c9:f6:b0:82:
f7:31:98:eb:91:3d:bf:fc:58:40:ea:3c:51:04:97:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:72:D2:3F:04:9C:9B:1D:69:4C:C6:55:76:7E:D7:8B:3A:DE:D6
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/mTBy0j8EnJsdaUzGVXZ-14s63tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.106.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bd:fa:6f:4b:2a:f0:a9:a8:ad:0e:81:df:02:54:d5:46:f9:
f0:83:c3:0a:17:93:f7:7a:cc:0e:01:fb:86:94:aa:2b:a0:5b:
6f:55:88:34:cf:d9:ab:ff:c1:cc:f1:13:01:85:06:ed:63:9e:
80:d9:dd:83:96:41:fd:d8:b4:3e:25:56:d9:a2:60:44:51:01:
79:73:20:5a:a2:54:4b:85:24:26:80:f2:04:13:0a:79:c4:e9:
fa:ec:b2:87:62:41:90:7c:28:5b:ac:10:fc:7c:c2:69:ba:90:
97:fa:7b:a1:6d:cd:ba:21:7f:bd:48:bd:17:d7:cb:6a:c9:6e:
fc:c8:4b:a0:c0:9b:76:13:af:6c:0a:39:05:6a:23:e7:df:f1:
49:e4:de:bf:72:46:01:a5:d9:64:0f:89:54:e5:32:1f:d2:e4:
45:bb:77:e8:7e:e4:a7:b4:ba:cc:20:f5:d6:ed:4d:ed:28:08:
35:0c:ad:88:d0:85:85:30:dc:95:47:52:6c:46:de:0f:8e:58:
ec:b1:59:c4:a4:b4:2a:3d:67:eb:38:ed:0a:86:89:31:f5:26:
56:c2:69:60:3b:f8:69:cf:07:5c:06:26:43:2d:54:93:97:67:
d2:af:d6:da:81:0e:65:83:39:28:5a:85:a2:1c:e1:71:13:c7:
34:16:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:38 2025 by rpki-client