Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/RmRTHkNLraqOOzazgFQdU_YCKkM.roa
File: RmRTHkNLraqOOzazgFQdU_YCKkM.roa (raw, json)
Hash identifier: 5SoXabo2aLivwm4lm+kA69S7S7+v67Nc52d80muCgcE=
Subject key identifier: 46:64:53:1E:43:4B:AD:AA:8E:3B:36:B3:80:54:1D:53:F6:02:2A:43
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 0194266C2E61A84CE76DA1C2B8D2D7F671D6
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/RmRTHkNLraqOOzazgFQdU_YCKkM.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47396
IP address blocks: 195.216.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2e:61:a8:4c:e7:6d:a1:c2:b8:d2:d7:f6:71:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4664531e434badaa8e3b36b380541d53f6022a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:49:7e:a1:40:90:21:9d:70:e9:06:2b:78:
e1:a3:28:c3:5d:7f:1e:f5:6c:99:88:4e:af:db:ed:
5b:d4:e5:a3:3c:1d:9d:df:ea:49:3f:47:3e:d5:d8:
d2:21:1e:4c:10:dd:cd:7c:46:55:d6:f9:f7:7c:92:
ab:ac:b9:e3:9e:98:7d:42:b3:5b:b2:47:e9:63:96:
19:9b:45:64:8f:7f:15:51:a4:9a:53:9b:0d:55:a2:
3c:e1:8f:e2:ab:a4:4d:a2:1b:56:32:ff:76:65:a0:
d7:23:7a:f6:6f:4f:90:08:b9:99:af:e7:66:f2:9b:
79:db:30:eb:e1:4e:dd:cf:37:2e:86:af:7f:2d:5e:
aa:2f:22:e1:aa:55:70:30:f4:46:c9:5b:b7:b2:f5:
46:ea:40:a4:aa:5b:7c:0c:e9:a5:bf:56:cb:f8:a9:
a5:ad:b8:9d:57:a1:a7:31:a1:d3:21:a5:c4:71:d2:
b2:2e:86:4e:9d:9c:3c:9a:94:d8:2b:5a:40:6f:1b:
f7:0c:9b:0f:54:b9:68:7f:ae:18:2e:a6:f6:9a:ac:
4d:8c:4c:0e:06:9d:c1:03:b1:13:76:d0:79:c7:cc:
31:98:de:30:e6:ea:73:2a:06:06:6f:9c:61:95:ba:
48:f1:e9:c8:b7:f4:89:58:f2:6f:98:9f:a1:ef:92:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:64:53:1E:43:4B:AD:AA:8E:3B:36:B3:80:54:1D:53:F6:02:2A:43
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/RmRTHkNLraqOOzazgFQdU_YCKkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:9f:a3:37:18:e4:cb:e9:2f:ed:16:1a:7e:55:ba:54:48:17:
91:8c:73:14:a1:cf:3b:e0:7d:fe:b6:94:89:af:bd:99:0f:ac:
a3:b4:62:c4:ad:12:11:7d:16:d4:f6:3a:e4:cd:af:66:2c:38:
fd:1b:f2:c5:83:28:42:18:26:bd:d8:7d:39:65:74:62:81:2e:
ab:09:15:dd:1a:57:64:74:af:2d:e8:df:f6:fb:6c:e4:62:c9:
80:d9:bd:6b:95:58:b5:bd:c8:d1:d9:7e:1a:f6:97:53:c0:b3:
02:d3:02:8b:05:5a:67:08:8c:10:61:5b:49:1c:02:76:ba:45:
3c:bb:b4:08:a4:64:fa:91:94:ac:e0:b0:6a:90:03:44:83:91:
da:12:1b:8d:40:6a:d2:bf:2e:8d:0a:b5:fc:c6:25:79:90:98:
17:2f:b7:af:e2:01:cd:86:24:65:11:46:00:21:5e:e8:2b:8c:
ee:2a:e7:45:09:f5:0f:29:c2:82:71:68:a1:04:6c:b2:27:cc:
f0:f4:2e:56:01:a6:36:91:ef:51:7c:bf:c7:e2:42:73:c3:67:
c7:dc:57:a5:5a:8e:d4:35:36:62:80:3f:bc:c9:2b:e7:d0:3e:
51:a7:63:60:6b:ce:50:b6:9c:fe:d8:ba:3c:c6:c6:fa:3a:86:
1e:b0:76:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:12 2025 by rpki-client