Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-MM_rptn9KMv_75K-ay6vNvpyUs.roa
File: 1-MM_rptn9KMv_75K-ay6vNvpyUs.roa (raw, json)
Hash identifier: zlNDAdLTHZvpvf0w2DpvpTrla0cH1fEXrehMOYmROsw=
Subject key identifier: F8:C3:3F:AE:9B:67:F4:A3:2F:FF:BE:4A:F9:AC:BA:BC:DB:E9:C9:4B
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC0E8160AA40DC8264E3306AD5C736
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-MM_rptn9KMv_75K-ay6vNvpyUs.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49443
IP address blocks: 45.86.19.0/24 maxlen: 24
80.94.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0e:81:60:aa:40:dc:82:64:e3:30:6a:d5:c7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8c33fae9b67f4a32fffbe4af9acbabcdbe9c94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:da:37:8e:87:00:60:16:41:5e:5d:36:e9:
a6:03:6b:f8:6a:f7:1d:db:15:34:fe:0d:2a:13:fb:
f0:ea:80:72:05:36:95:19:33:b3:5b:2b:0a:b1:2b:
7b:d6:fa:26:8d:9f:81:62:26:5a:ca:30:5d:a4:3e:
a5:62:66:ce:fa:9a:ef:61:09:db:7b:af:b8:13:1d:
cc:ac:9b:38:fa:28:75:8d:01:b8:c9:e1:63:5c:a1:
59:4b:d2:ee:8f:5b:7b:3a:d8:ed:22:1e:83:10:fe:
ec:e2:99:19:e0:ac:cd:3c:19:3f:00:46:2e:b5:c2:
75:16:fc:f8:b4:a9:ff:83:3c:ca:17:5d:77:d3:56:
99:12:c7:01:2b:90:7e:53:e5:82:df:e7:11:86:5b:
d0:63:15:13:50:98:c4:cb:00:c9:b9:bd:96:95:5e:
5b:85:a7:7d:d3:0b:39:93:b9:0e:61:f9:99:ed:1e:
4e:ec:88:ce:d8:ad:2c:be:32:dd:a2:89:2c:b1:84:
c4:05:b4:6f:6f:54:9b:33:10:2f:84:10:27:b8:97:
f7:5a:c7:bb:70:84:53:a8:4c:a0:fe:49:fc:62:dc:
c6:05:0a:b8:3b:44:b1:85:7b:58:43:b7:16:4d:6f:
c0:d3:a1:78:c1:ed:64:b3:34:cf:3b:56:72:23:9f:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:3F:AE:9B:67:F4:A3:2F:FF:BE:4A:F9:AC:BA:BC:DB:E9:C9:4B
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-MM_rptn9KMv_75K-ay6vNvpyUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.19.0/24
80.94.80.0/23
Signature Algorithm: sha256WithRSAEncryption
90:cf:bc:42:b3:0f:c3:75:00:e8:cc:d2:f3:73:a9:76:fa:84:
6a:9e:0b:b6:72:06:07:b5:0f:b3:20:9d:e7:0b:89:18:7e:05:
ab:f0:48:16:c1:0c:bd:39:0d:22:59:d2:d1:ea:67:2a:46:f2:
14:8e:0e:a0:13:34:44:e2:43:66:3b:eb:ea:c2:19:5c:d0:90:
76:27:fd:9d:75:2d:a0:11:d5:d0:33:4d:de:62:f9:9f:50:1a:
65:78:af:2a:c3:20:a8:48:55:93:0d:4d:9e:56:cb:13:14:b4:
0e:30:62:fb:f4:e8:61:4e:03:53:01:72:6e:9e:d1:1a:f3:b2:
23:f6:4f:a9:97:df:8a:fe:ec:f9:d7:35:6d:e1:af:eb:2b:ae:
c0:b4:c4:17:b9:0c:aa:19:5d:ee:c9:c6:7a:2b:cd:c3:41:2b:
97:7a:a8:44:71:db:9a:0a:53:71:8c:4c:3f:9d:91:86:ad:c4:
46:ea:42:52:c4:20:ae:98:f1:25:b2:6e:fd:e5:7d:64:24:0f:
7f:29:0b:bd:fe:9c:bc:6d:92:91:43:34:bf:e3:01:7b:15:14:
e9:e4:af:cb:c4:3b:c2:1c:27:36:14:58:3d:6c:e8:ef:9b:89:
6c:f0:83:4c:c5:f2:a1:ea:13:0d:4b:b8:5c:c1:dc:e9:2c:08:
93:da:2a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:44 2025 by rpki-client