Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/mFnUZao6jHrrA3z87rGBpSOdTUg.roa
File: mFnUZao6jHrrA3z87rGBpSOdTUg.roa (raw, json)
Hash identifier: 1fZ4TbgHvorfr9usJsO+SOpspxtknAWHwxdZ49h/ILc=
Subject key identifier: 98:59:D4:65:AA:3A:8C:7A:EB:03:7C:FC:EE:B1:81:A5:23:9D:4D:48
Certificate issuer: /CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Certificate serial: 01941FFA21C0277290399C4FDE68D650E117
Authority key identifier: 58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/mFnUZao6jHrrA3z87rGBpSOdTUg.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34863
IP address blocks: 194.30.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:21:c0:27:72:90:39:9c:4f:de:68:d6:50:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9859d465aa3a8c7aeb037cfceeb181a5239d4d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:86:8a:d6:c6:30:d2:03:f0:0b:4f:b9:1b:
bf:4e:95:f9:a3:f0:83:01:b3:6c:39:a8:84:d4:f6:
a8:87:82:47:1d:08:7a:8f:df:5c:8f:9e:f9:3c:6c:
80:09:80:c8:26:a6:95:4d:fd:5d:f4:5a:ae:62:ba:
e4:eb:78:88:6d:4e:18:40:12:ce:e7:91:4d:9b:dc:
3e:02:ee:e5:2c:88:a4:d2:7c:33:e4:4e:94:6e:69:
e6:c7:df:c7:5a:28:a1:71:40:48:12:74:b6:c7:d9:
3a:0c:4e:05:ac:ea:26:4d:8f:b0:fc:3f:63:e5:c8:
5a:71:b8:23:ad:8b:65:8a:6d:48:e2:08:af:e8:ad:
7d:8b:89:e3:b9:47:44:a9:3f:a1:5b:61:c8:62:20:
99:99:d3:7d:f2:3f:f9:10:17:8b:76:6a:60:91:af:
45:1d:4d:04:f1:33:ac:d6:a0:f4:41:25:66:42:a0:
56:6e:39:d4:25:5c:43:fc:71:07:ac:4c:2b:19:ed:
ea:91:f0:6b:cc:e0:20:51:c6:c2:f0:bb:06:61:1b:
98:b0:7a:29:74:d1:59:48:6f:64:23:2f:c4:e8:f1:
65:79:52:87:95:0e:86:69:ff:3f:6f:99:8f:a3:75:
33:4a:b4:7f:0b:bb:c9:66:76:90:2c:c0:07:3e:dd:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:D4:65:AA:3A:8C:7A:EB:03:7C:FC:EE:B1:81:A5:23:9D:4D:48
X509v3 Authority Key Identifier:
keyid:58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/mFnUZao6jHrrA3z87rGBpSOdTUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e8:b1:68:ff:ca:9a:62:00:c0:d4:e6:e2:d8:e3:32:5d:dc:
30:82:f9:a8:29:57:34:8d:02:26:9f:7e:8f:05:cf:06:39:63:
15:7a:9c:c9:7e:d5:8b:08:f6:c6:4f:6f:06:e1:b4:33:e3:78:
ab:d2:ed:a7:4d:92:6a:26:87:19:d8:50:f1:98:5d:99:69:10:
47:42:a4:c9:52:7d:df:55:8f:83:a3:9d:39:dc:3c:65:6a:ef:
fb:7b:b8:4d:ff:e9:b4:6c:8b:7e:25:b9:16:38:8e:58:61:11:
03:31:95:d3:b0:c0:1d:c0:b1:5e:47:73:e0:21:73:8f:fc:3b:
71:d4:66:77:72:ee:0e:dc:38:6c:00:fc:3c:e4:b8:42:7a:33:
81:21:6a:02:53:23:c8:66:1d:88:16:75:c0:90:fe:49:d3:6a:
82:51:21:b4:42:0e:46:f3:86:01:29:d2:ac:6b:d3:9d:a6:83:
2d:c7:d1:94:94:48:6d:fd:2b:08:ac:6d:26:13:05:a7:76:41:
4a:e0:8e:ff:1e:e5:e6:89:6b:8c:86:43:6d:ad:20:d9:be:0e:
5c:20:dc:dd:89:62:31:b9:55:26:29:27:ec:50:b4:bb:5d:71:
3d:b5:e1:f5:fd:48:2d:a6:79:dd:09:ff:02:8e:59:c1:19:89:
60:82:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:35 2025 by rpki-client