Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa
File: ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa (raw, json)
Hash identifier: Hgc/3TJtI5yynn7M0w0nfY5PZGQECx2OAgvuax5O8ME=
Subject key identifier: B2:C0:99:A0:43:D9:EB:63:52:E9:9E:F0:EE:9E:D7:1E:D6:18:04:36
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BB4D93AA1E79BF74A5A610A1EC67
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201125
IP address blocks: 148.81.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bb:4d:93:aa:1e:79:bf:74:a5:a6:10:a1:ec:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2c099a043d9eb6352e99ef0ee9ed71ed6180436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:f6:c9:98:31:24:d7:57:d6:15:19:7b:67:
61:e6:69:8b:d3:6c:54:39:7a:38:ef:26:f0:de:bb:
79:1e:d7:2a:2c:af:fa:76:fa:4d:a2:b5:64:c8:d4:
72:48:7f:f5:e2:ea:de:07:d8:b4:34:b4:7e:d1:6f:
fc:a3:f6:72:b5:0d:be:a4:d8:14:43:d0:e6:1a:76:
04:1a:12:65:a2:64:0a:75:34:57:32:21:44:c7:cb:
49:1a:ff:bf:d2:0e:89:84:5d:56:6d:7a:5f:47:82:
99:ce:79:fa:ea:dd:18:f2:19:16:36:6f:79:66:c3:
1d:10:b6:23:f0:a2:74:48:fc:6b:42:ca:0f:e2:a6:
74:00:cd:5e:3a:1b:8d:09:ef:a2:b4:bc:e6:06:f8:
70:61:19:a3:6e:71:9f:6f:0a:df:37:dd:e4:21:d6:
4b:70:7f:74:6e:36:06:2e:aa:48:3c:b9:2f:8f:81:
00:46:e9:14:78:42:2b:b5:f7:11:54:a7:38:3e:4e:
63:12:0a:2d:34:22:2d:a0:71:3c:54:e9:6d:f2:e5:
d4:f0:e6:76:eb:5d:97:12:c8:dd:c8:96:1e:da:5c:
03:72:c0:fc:bf:ae:c1:23:0a:f1:b5:55:00:dd:f3:
6d:fe:16:49:f1:19:1c:5f:56:51:d4:b4:d8:2e:99:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:99:A0:43:D9:EB:63:52:E9:9E:F0:EE:9E:D7:1E:D6:18:04:36
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ssCZoEPZ62NS6Z7w7p7XHtYYBDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b3:a5:e9:3f:45:fb:e1:06:0d:f7:f0:24:ee:46:70:9c:58:
f7:98:b7:e6:4b:d3:8c:f6:cb:58:db:ae:0a:25:3b:34:e0:3e:
43:1e:e0:fb:01:dd:1d:51:cc:cb:3a:e0:a4:73:dd:0e:8a:99:
21:0d:63:fc:fd:d1:d1:d4:18:ae:2e:48:e1:ca:44:a1:5e:8c:
05:ee:75:33:c0:a3:ba:58:e6:b2:04:df:4c:28:23:ea:b4:82:
ca:70:44:e9:df:66:93:d4:cb:4c:bb:ad:dc:9c:25:bf:52:ac:
97:66:d8:00:d3:a9:2b:e0:06:03:15:11:c2:7b:23:11:c4:93:
4e:8f:8e:38:c0:0a:b5:6a:21:72:50:15:2b:bd:f0:03:f0:cf:
21:f3:5f:a0:9c:b4:35:76:87:9f:0a:4c:b2:a0:39:7a:c1:11:
63:1f:8f:a8:4d:ca:db:d5:aa:19:c4:6f:68:7e:b7:0a:ec:11:
33:89:1b:a3:4e:44:ec:74:c4:b6:29:e0:e9:b5:e5:39:23:1e:
c4:e2:a7:74:df:0b:cf:9d:49:0f:86:f3:85:74:fe:73:d2:40:
24:54:84:1a:f2:af:56:46:36:b4:52:d2:ae:ba:d9:b6:c4:9c:
e0:96:28:11:5e:00:6c:4e:5d:bd:d1:7c:a7:14:98:8f:d0:2d:
42:2a:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:42 2025 by rpki-client