Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dW06IK8GA6x1U9O5lNRwF0izBGA.roa
File: dW06IK8GA6x1U9O5lNRwF0izBGA.roa (raw, json)
Hash identifier: rzB9oN0f2RgPxhIZVQdADCmFl32mv6XnzDexekay6JQ=
Subject key identifier: 75:6D:3A:20:AF:06:03:AC:75:53:D3:B9:94:D4:70:17:48:B3:04:60
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2966B6ADF280ECFC1F3A89B5ADCA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dW06IK8GA6x1U9O5lNRwF0izBGA.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48881
IP address blocks: 81.181.166.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:29:66:b6:ad:f2:80:ec:fc:1f:3a:89:b5:ad:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=756d3a20af0603ac7553d3b994d4701748b30460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:53:7f:9f:50:a0:48:43:1e:43:8f:63:71:
62:70:9b:74:d4:62:9e:d0:ce:b0:71:fb:7d:03:8a:
57:87:00:11:92:15:b2:b9:61:27:41:50:5a:aa:c6:
b1:67:c7:ae:45:38:0f:9c:b4:32:0a:7c:60:8e:d9:
d7:8c:8c:eb:2e:89:5f:e8:bf:79:e9:77:b9:59:83:
71:2e:c8:c8:cd:cb:3c:a7:cb:da:03:77:08:61:8c:
79:3a:a8:8e:21:6a:fa:c0:4a:0e:74:93:0e:ab:05:
36:fe:e4:eb:4f:28:c7:a9:e6:80:6f:96:8e:d3:b8:
61:b4:ca:c6:06:8e:03:93:9f:92:d4:02:be:b7:37:
26:c4:44:8c:a4:51:57:0c:07:40:98:35:85:a7:a1:
3f:70:ec:70:3e:24:45:39:9d:62:4d:14:fa:3e:ef:
4c:83:90:35:a7:d1:a1:0a:78:8f:ac:19:e1:4e:f3:
86:bd:f6:90:49:89:97:b2:c8:7b:4e:81:f3:fa:38:
71:7c:08:35:c7:72:da:5e:ce:65:c4:f4:3b:cb:4b:
96:cf:6e:c7:13:d2:e0:7c:05:f5:ef:77:38:98:a7:
fd:bf:8e:56:0a:68:ca:07:05:a9:71:7b:f7:f8:cd:
4d:2f:0d:fb:1c:71:fb:8d:5c:b4:b9:da:da:56:b3:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:3A:20:AF:06:03:AC:75:53:D3:B9:94:D4:70:17:48:B3:04:60
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dW06IK8GA6x1U9O5lNRwF0izBGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.166.0/24
217.156.93.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b1:ec:80:60:15:81:dc:bb:14:9f:33:cf:96:8f:7f:76:05:
90:76:6b:93:d2:1b:26:d3:87:68:e9:a9:d1:b8:a6:0d:4e:f1:
0c:4c:af:91:19:9d:7b:e7:4c:63:97:67:c2:0d:e8:46:b9:a5:
42:59:f2:93:35:88:ce:25:b3:d6:2f:00:62:1c:7c:92:4e:73:
c5:ef:a1:e7:a0:a0:5f:bc:4b:26:cd:94:89:88:52:ed:ea:6a:
02:62:59:a4:8b:ee:8d:dd:ce:bf:4c:78:4c:09:56:5d:11:c0:
c7:3a:0f:bc:8f:51:00:db:34:6d:b0:9d:72:c5:79:d0:50:26:
64:0a:26:a8:3e:ff:7c:f9:2a:e8:e9:65:6e:ca:f4:d1:e0:fc:
bd:fb:73:cf:2a:70:0c:67:5a:4a:26:d7:0d:93:1a:d8:0a:06:
db:94:3b:10:3e:2e:c4:c9:89:55:a4:ba:6f:a1:03:8b:f5:9b:
7c:2e:06:08:78:b6:b2:21:dc:c0:ed:61:26:dc:44:81:bf:ec:
67:4b:8e:2b:68:76:ab:e8:66:4e:57:7e:84:40:de:9b:35:f3:
2b:36:0f:71:ae:38:d9:77:de:62:b9:76:6b:b1:1b:b2:96:af:
df:4a:98:79:bc:5e:43:ac:bf:50:96:a6:5c:95:0b:49:7c:a6:
e3:82:c1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:34:14 2025 by rpki-client