Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa
File: mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa (raw, json)
Hash identifier: vhmVQoIhA3FIJBKAD6bm8klXoG45fnkM5F0sTYLfvS8=
Subject key identifier: 99:92:5E:D1:D3:AD:95:51:90:5D:1E:67:08:6B:53:C4:38:ED:61:48
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 01942444A8D362186CD50232DEF9CF4645F3
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa
Signing time: Wed 01 Jan 2025 23:47:46 +0000
ROA not before: Wed 01 Jan 2025 23:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.227.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a8:d3:62:18:6c:d5:02:32:de:f9:cf:46:45:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99925ed1d3ad9551905d1e67086b53c438ed6148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:25:35:9e:8c:6a:f7:6f:da:fc:8d:3c:c5:d0:
66:2e:eb:02:8a:8a:3b:c0:d9:a4:e1:15:23:82:26:
4a:ac:49:9b:72:c7:40:85:75:45:bf:ef:0a:7f:18:
08:e9:7a:fe:8a:2f:a4:63:12:73:6f:02:37:10:f2:
c0:e2:23:31:fc:d8:1f:d0:79:09:ce:f2:97:b5:6e:
f8:6f:1b:b8:27:7f:5b:62:0f:53:91:9f:18:a7:a1:
ee:3d:e0:9e:6d:6e:c3:40:4b:27:ac:6c:1f:74:c7:
51:64:d6:47:7f:00:a6:ce:04:ed:89:9a:fa:fa:7e:
3b:53:72:fc:68:7a:79:cb:c2:81:37:81:1e:0e:ab:
74:2f:d0:c9:70:fa:03:f4:19:07:1e:83:dd:f5:75:
bf:f4:a2:b7:96:53:0b:5b:3e:4c:5f:6e:b9:fa:5b:
e4:76:6b:87:f1:ce:54:90:13:d1:90:e8:a7:02:4e:
72:c9:f3:0e:53:4b:25:77:44:fb:9b:67:d4:49:39:
13:28:1c:7b:c1:bd:e4:48:bf:50:df:0e:d1:58:c2:
9f:06:5c:e9:3e:c3:0a:3d:36:e5:3e:ff:68:5c:ed:
31:50:11:a4:c2:5a:83:a5:77:7d:3b:29:5e:11:bc:
db:29:02:72:0b:c3:41:90:bc:40:f6:ad:b8:fc:b3:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:5E:D1:D3:AD:95:51:90:5D:1E:67:08:6B:53:C4:38:ED:61:48
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
60:04:1e:a1:e1:7a:cb:20:28:19:1f:38:42:44:3a:5f:e7:b8:
7c:fa:ea:9d:ea:77:0c:4c:55:9d:a5:60:be:b9:7e:fc:46:7d:
a8:66:23:72:85:77:80:66:55:94:3c:70:d5:0b:08:e5:d0:22:
26:8e:ce:f0:a9:01:54:2c:6a:bf:81:49:6c:db:16:1b:f3:87:
e6:87:5a:b1:f7:cd:d3:3c:c6:51:83:a9:83:43:28:42:7f:af:
40:d1:49:a2:30:1d:73:b4:24:c5:52:d2:de:f3:0f:53:42:f9:
3c:52:87:60:31:e3:d5:63:a6:18:09:ed:34:a5:e3:d6:8b:77:
a8:d5:8d:e3:1f:0b:80:0f:6b:f3:69:07:4d:a2:c9:cb:de:54:
b8:97:55:c2:6f:de:9e:81:af:3b:9a:6b:dd:86:b1:54:ff:c2:
26:e0:41:29:2a:ee:32:2a:fd:af:00:df:63:bf:c4:d3:00:25:
5d:e4:fd:bc:4d:d0:bd:42:bd:5c:0c:10:03:c7:b5:c1:dc:b5:
01:da:a2:d8:fa:35:6e:81:c8:bd:90:ab:56:25:b0:14:1b:cd:
b0:38:c7:02:2e:72:e6:22:bc:5d:63:b3:97:c6:9d:a8:db:a1:
69:bf:b6:11:4d:c5:17:ad:ef:db:27:9b:f1:c5:30:98:9c:a4:
07:89:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:13 2025 by rpki-client