Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mHdWXvo40TDJOyLKfL51iZxIsCA.roa
File: mHdWXvo40TDJOyLKfL51iZxIsCA.roa (raw, json)
Hash identifier: YfYQsolk8GO73WhZBdWKq3yQTguFmNStO6yg/1m07Ds=
Subject key identifier: 98:77:56:5E:FA:38:D1:30:C9:3B:22:CA:7C:BE:75:89:9C:48:B0:20
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1F36C4E398852DAFE22F59AEBD68
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mHdWXvo40TDJOyLKfL51iZxIsCA.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207238
IP address blocks: 45.150.44.0/22 maxlen: 22
91.242.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1f:36:c4:e3:98:85:2d:af:e2:2f:59:ae:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9877565efa38d130c93b22ca7cbe75899c48b020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:e9:3e:0c:71:eb:4b:56:64:52:81:ee:68:
a6:6f:ad:73:3f:3a:69:16:f1:57:21:72:5d:ce:07:
bb:c5:c4:23:48:85:19:76:76:94:d8:45:95:d8:9b:
0e:c3:b0:fe:66:1d:e7:58:09:48:61:0f:50:97:e8:
77:65:24:5e:1a:a4:20:6b:df:d5:9a:66:3d:7a:e7:
de:d9:5e:13:65:da:fe:66:2a:90:77:e8:a0:d5:67:
83:c1:38:ed:56:27:ec:32:3e:37:64:47:53:0c:f8:
34:bc:ea:d5:e7:40:f8:17:af:11:95:03:5b:15:da:
18:21:b9:1e:60:6d:a1:64:fb:f0:40:60:06:e9:50:
02:5a:07:b3:85:4f:b7:2a:30:e3:07:e6:7f:f9:8a:
de:67:4a:64:1e:c4:b8:b2:44:5d:6c:38:88:0f:50:
0a:39:6e:11:33:46:18:8e:1c:66:c4:a2:1d:ae:dd:
67:00:01:e9:f6:54:5c:53:4e:17:d7:82:83:1c:94:
c1:2d:d5:16:cb:79:58:d6:d8:f6:0a:5e:f1:da:96:
d1:d8:d0:29:3d:e8:54:24:a1:18:4e:0d:c0:82:60:
b0:c1:a1:85:a3:d1:4a:1e:04:d1:f9:34:e3:ae:02:
69:27:55:9e:e9:b5:bd:31:fe:ec:8c:66:6c:66:c5:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:77:56:5E:FA:38:D1:30:C9:3B:22:CA:7C:BE:75:89:9C:48:B0:20
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mHdWXvo40TDJOyLKfL51iZxIsCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.44.0/22
91.242.68.0/23
Signature Algorithm: sha256WithRSAEncryption
00:e8:52:56:c5:5b:a4:18:de:99:15:58:83:d2:0a:08:85:53:
31:a3:eb:80:30:7a:7e:28:aa:63:7b:fc:63:6e:f3:88:3f:d1:
25:cf:7d:0a:10:20:f9:e5:a5:a4:2e:72:ef:a9:d3:c8:6f:fb:
2d:8e:93:10:4c:5a:05:84:08:9e:cb:7e:94:6f:5b:a1:69:ba:
6f:18:c2:8b:58:2f:67:63:2c:50:43:e2:a6:7a:91:b0:28:e8:
f4:20:d9:6a:03:8e:37:58:16:c1:d4:95:d9:57:5e:64:f8:70:
6f:d5:a3:5b:ce:5b:11:37:80:69:25:bb:2c:81:1c:11:17:c5:
57:a3:48:b4:0a:91:b4:50:6f:3b:c1:aa:a1:58:39:54:93:3d:
eb:56:94:4d:62:eb:1e:82:75:57:cc:67:c2:bf:bc:3e:ad:46:
d2:e3:22:48:71:3e:61:bb:87:22:36:ed:a7:f7:0c:1e:a7:15:
77:5f:b7:fe:be:4e:5b:c2:06:ab:cd:f1:45:59:5e:53:42:03:
7f:30:87:66:cd:41:0b:32:59:1a:e1:a1:dc:98:e5:32:93:83:
ad:88:c8:c9:03:d1:9e:e3:2c:a1:ee:5d:0e:63:8d:26:42:4f:
1e:fe:a0:aa:d4:49:86:57:ac:29:fd:e7:91:06:02:92:a0:34:
64:b9:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:13 2025 by rpki-client