Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/mWwZIZi_bVc1h908CjAKkL5Od18.roa
File: mWwZIZi_bVc1h908CjAKkL5Od18.roa (raw, json)
Hash identifier: 61r7bPQMg9kj6M2m+bl2SoqT9NucemfdfUzk79Tyxy0=
Subject key identifier: 99:6C:19:21:98:BF:6D:57:35:87:DD:3C:0A:30:0A:90:BE:4E:77:5F
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01942827808E1442426E72009D819987EE27
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/mWwZIZi_bVc1h908CjAKkL5Od18.roa
Signing time: Thu 02 Jan 2025 17:54:24 +0000
ROA not before: Thu 02 Jan 2025 17:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212280
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:80:8e:14:42:42:6e:72:00:9d:81:99:87:ee:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jan 2 17:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=996c192198bf6d573587dd3c0a300a90be4e775f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:9f:94:88:44:4f:ba:ae:fa:85:1e:37:c7:
e0:2d:8b:a7:bf:02:00:77:f8:86:1b:4c:a0:ce:8e:
ea:bf:8c:21:af:01:a3:53:b3:5b:ab:06:33:82:17:
45:c4:20:91:5e:0b:5c:2c:ff:23:b9:ac:96:49:f5:
7c:06:89:e5:63:e1:63:35:3d:1f:8f:7a:2f:59:99:
b1:d0:4f:72:cb:c0:7d:18:45:6e:b5:58:7e:16:94:
10:6c:5c:d8:6c:5c:1d:43:e1:a7:92:e4:c2:b9:1d:
f4:97:8d:0d:fa:c5:ec:6f:62:5d:de:44:9e:fb:b7:
ba:bd:bb:04:7a:f9:9b:2a:b0:27:e0:d2:e9:1d:ad:
4d:ae:e4:ba:18:f4:9e:a4:a6:3d:d2:34:fa:b2:b0:
f5:f3:c6:79:e0:23:2f:42:da:75:2d:bf:49:d0:f8:
af:35:61:24:ed:b0:ff:ae:68:7b:e4:45:c7:fd:cf:
f5:3c:d0:84:26:36:b7:df:ff:e3:1b:38:38:81:4d:
7d:a9:34:53:b1:3c:a4:f3:fc:32:17:6a:5b:00:13:
1f:76:fc:f1:e6:51:59:b3:ab:90:27:5d:42:dd:86:
a7:a5:f7:b1:14:43:58:f1:f0:23:a6:60:f5:53:d1:
10:de:6b:c7:9b:c5:65:b8:fb:df:ea:f5:8c:cc:cf:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6C:19:21:98:BF:6D:57:35:87:DD:3C:0A:30:0A:90:BE:4E:77:5F
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/mWwZIZi_bVc1h908CjAKkL5Od18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/24
185.122.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:84:d2:e5:58:b5:7b:6d:4f:07:8b:a8:78:04:34:ca:36:74:
a0:6c:91:31:d1:3c:28:3c:68:bd:8b:b1:6e:5b:42:f3:b6:79:
b2:47:3a:8f:df:d0:26:23:4a:37:42:af:88:96:14:08:2c:9e:
85:bd:5b:15:b1:fa:f2:09:d4:78:7c:47:56:d2:ba:f0:17:42:
26:28:0a:be:de:33:48:1d:45:a5:52:f0:0a:93:90:5d:3f:ec:
b6:9d:c0:1c:19:a5:40:4c:74:f6:73:76:8b:03:7b:cc:e1:d5:
d7:2b:50:a3:ff:8d:bc:5d:ca:fe:b7:33:be:1c:43:1c:d7:66:
cb:3a:ab:3f:85:4d:d0:5f:ff:a7:b1:70:0e:46:0d:50:1e:61:
d1:85:d6:62:ba:c0:e2:16:9a:ae:5d:19:a3:8b:aa:28:55:8c:
8c:7b:a6:be:ab:77:82:ff:52:cc:dd:ac:1a:d6:fa:28:a8:d0:
58:9e:bd:52:40:96:57:04:ae:40:98:2d:17:79:66:4f:39:0b:
a6:fe:5b:af:00:45:c3:22:01:2f:5c:79:28:a9:18:6d:d6:11:
cc:b3:32:24:f8:28:8b:83:82:63:be:50:3e:91:9e:fa:83:c6:
19:bb:d6:be:e5:0b:72:eb:34:52:e5:58:22:92:7b:43:c7:e4:
ce:cc:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:34 2025 by rpki-client