Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/CmtSe5W47sEvu4dqUbsE8AFHRfo.roa
File: CmtSe5W47sEvu4dqUbsE8AFHRfo.roa (raw, json)
Hash identifier: IMShtZENk7lbdDo/N1aCJsixVqWpjgjzDkLqSHXXRLg=
Subject key identifier: 0A:6B:52:7B:95:B8:EE:C1:2F:BB:87:6A:51:BB:04:F0:01:47:45:FA
Certificate issuer: /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial: 0194228E045ED255834B90C16F291B915EEE
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/CmtSe5W47sEvu4dqUbsE8AFHRfo.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201059
IP address blocks: 185.81.148.0/22 maxlen: 22
2a05:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:04:5e:d2:55:83:4b:90:c1:6f:29:1b:91:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a6b527b95b8eec12fbb876a51bb04f0014745fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:16:be:de:62:21:96:3b:7c:4b:6e:fc:73:
4c:3d:d9:e4:7e:a0:b2:21:09:3b:12:d9:9b:71:c1:
b4:21:61:9b:35:77:9d:d2:b1:38:aa:c4:bd:ae:b5:
d2:d4:b6:91:fa:26:c2:d4:8a:01:c6:7b:00:8a:9a:
51:21:a8:a4:c4:ef:90:d5:51:1c:7c:22:a3:32:c7:
fc:3a:7a:e4:88:0a:d7:6b:c3:e9:c3:d6:9a:a4:3c:
1b:cd:a2:79:76:30:bc:2e:13:35:da:96:52:8d:19:
b3:3c:64:6a:3c:5f:da:9a:09:bd:9c:80:3c:c8:aa:
14:e4:97:cd:60:b6:47:3a:4e:e1:2a:2b:32:2a:cd:
12:0b:ed:69:23:ef:14:cc:75:ea:ed:4f:3c:e5:14:
95:cd:bf:0c:bf:d7:9e:df:53:2e:3d:e8:39:c7:0d:
23:ca:3f:47:6c:28:45:74:56:7b:fc:b8:3b:05:02:
99:da:cc:0c:99:0f:ce:9d:bb:37:73:17:89:9d:33:
80:d4:d0:12:71:0a:69:18:2e:72:22:9c:2a:0a:86:
b3:f0:9c:0e:55:de:de:87:5b:54:a6:89:75:ef:24:
14:a3:5a:73:1c:3c:a8:6f:39:16:9d:02:cb:7a:8e:
17:0b:57:ea:de:f6:cf:6e:de:bb:35:d5:33:c5:8a:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:52:7B:95:B8:EE:C1:2F:BB:87:6A:51:BB:04:F0:01:47:45:FA
X509v3 Authority Key Identifier:
keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/CmtSe5W47sEvu4dqUbsE8AFHRfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.148.0/22
IPv6:
2a05:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
03:3f:57:1e:da:03:23:f0:6d:ff:95:01:60:e0:e2:fc:72:ef:
eb:eb:0a:43:c6:1c:6f:3b:ca:c5:9a:72:bb:84:92:f9:1e:69:
4d:a9:9b:01:77:6b:97:2d:5c:a2:5a:90:00:94:9c:7a:e0:03:
7f:23:ae:10:21:f0:cb:70:02:18:70:c8:1e:58:f9:80:ce:b0:
d9:24:42:23:df:5e:5e:ee:77:c4:5d:9c:59:aa:a9:76:87:fd:
6d:8d:97:19:0c:12:c9:ec:03:b1:87:25:0f:78:d9:f1:5c:fd:
09:5a:af:16:c1:27:79:be:53:91:f8:55:66:f1:98:58:a6:c6:
bf:10:85:42:0b:2a:9b:37:f5:50:fc:73:19:95:c0:2f:6a:5c:
ed:dc:41:56:26:b9:43:19:ca:fd:9d:ef:fc:da:80:38:4f:f1:
8a:c6:4e:16:ec:16:28:e3:d5:0c:0b:fe:4e:19:47:c1:e4:a1:
7f:41:4c:c3:9b:28:38:38:63:c6:de:c3:5f:7d:8a:5f:d8:50:
cc:c2:8b:76:c5:81:2b:10:05:b0:49:0e:5a:5f:dc:3b:e2:a9:
9a:db:08:20:ae:d3:e4:fb:7b:7b:c2:72:7b:bd:68:79:d6:a2:
75:db:51:60:74:55:16:e7:80:78:07:da:e4:c6:18:09:9c:78:
34:0c:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:26:19 2025 by rpki-client