Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rtMi1meNT-T_8FHvc9djoHfvrlk.roa
File: rtMi1meNT-T_8FHvc9djoHfvrlk.roa (raw, json)
Hash identifier: JQgqXWJkTddM0/b2mAkGeRHE5VSu/oWTYottG/sp5Vg=
Subject key identifier: AE:D3:22:D6:67:8D:4F:E4:FF:F0:51:EF:73:D7:63:A0:77:EF:AE:59
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1A883803042A95850B82E02E93A2
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rtMi1meNT-T_8FHvc9djoHfvrlk.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34648
IP address blocks: 217.156.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1a:88:38:03:04:2a:95:85:0b:82:e0:2e:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aed322d6678d4fe4fff051ef73d763a077efae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:61:ff:85:f0:17:be:44:ef:81:02:84:f5:
36:25:11:b4:27:9d:33:f8:94:18:39:98:8e:84:05:
6b:a1:81:02:fa:1f:2a:91:36:c2:de:1d:b6:42:7f:
94:cf:de:d6:6a:e3:87:34:a6:f1:08:dd:fc:01:09:
8d:39:61:02:4a:6a:34:b5:8c:fe:66:48:6f:09:fd:
b3:27:cb:24:b7:08:d6:e7:4e:d9:fb:f5:48:26:8f:
37:c1:1a:c7:ea:bd:8e:13:b6:77:02:62:7a:e0:3c:
2d:f4:fe:d2:67:ea:17:ca:a7:db:ac:da:7c:f8:84:
d6:d7:5e:bd:4c:29:bb:58:a2:d1:93:a3:5a:34:90:
07:61:6c:09:c4:24:4d:97:af:f2:65:29:e1:3f:5c:
aa:6b:54:19:d8:55:5c:37:31:c4:71:e7:e7:0a:38:
27:c6:ca:e7:5f:bb:66:f7:2a:03:83:c0:b2:5b:76:
c5:af:17:1d:b1:d9:8a:80:d2:39:46:d4:c2:69:df:
e1:77:22:ab:c3:f1:04:0e:3d:40:6d:12:2b:a8:6f:
9f:ad:c0:37:54:91:69:30:82:12:81:fa:7a:ff:e5:
9b:84:06:8f:c9:6f:fc:6e:d8:ce:d9:dd:e7:74:e3:
06:f2:7d:4b:0b:a9:08:95:47:2a:36:55:cb:69:0f:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:22:D6:67:8D:4F:E4:FF:F0:51:EF:73:D7:63:A0:77:EF:AE:59
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rtMi1meNT-T_8FHvc9djoHfvrlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a6:e9:78:8c:7f:a7:55:dc:c0:db:6f:e9:36:d6:d0:03:2e:
d2:a0:43:f9:9f:ad:8b:0a:ee:e7:57:8f:8b:7c:1f:30:c7:22:
60:84:ae:b0:43:13:94:6a:51:b5:88:a5:43:54:ab:eb:f0:c1:
3b:0c:20:32:6f:f6:07:50:29:cd:23:81:26:c1:c3:c5:44:aa:
dd:3f:a3:0f:be:c7:8d:cb:fc:66:25:ff:7c:b7:62:1a:93:4e:
fd:e4:80:59:68:08:2e:0b:d9:0e:03:9e:51:9a:76:8b:39:8e:
e5:97:d3:73:d0:db:23:1c:2f:0a:4b:c7:f7:8d:02:0b:9f:da:
2d:15:36:e1:46:46:50:b1:59:5e:98:9d:d8:0c:32:02:5f:ea:
4a:7e:10:0a:e3:e4:a2:53:61:6d:97:d0:41:d4:5c:88:27:38:
46:2c:3e:d7:91:cc:b6:5b:1f:79:d0:e0:ef:89:b2:91:6b:fa:
7a:77:6e:d2:7d:bb:1b:1f:53:3a:9c:94:dc:09:a5:d2:d5:9c:
6b:b7:98:a5:51:52:e5:62:40:ac:8e:0b:e0:b1:17:77:47:cf:
87:3b:6d:9b:28:e6:e6:51:54:e7:ae:ea:56:ce:64:a6:fb:a9:
50:5c:15:5e:f0:84:f1:28:09:37:1f:47:98:3e:95:1f:9e:9d:
4c:62:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:33 2025 by rpki-client