Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/mWU4uI3AED3kVRIGqsNYpuYsgY4.roa
File: mWU4uI3AED3kVRIGqsNYpuYsgY4.roa (raw, json)
Hash identifier: Fq84oAvE6fP7h+/uIBzyy7ivRhelDe2jm1K3Ltmpeog=
Subject key identifier: 99:65:38:B8:8D:C0:10:3D:E4:55:12:06:AA:C3:58:A6:E6:2C:81:8E
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01942825FA72FB9E749901BF97FF3905EC32
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/mWU4uI3AED3kVRIGqsNYpuYsgY4.roa
Signing time: Thu 02 Jan 2025 17:52:45 +0000
ROA not before: Thu 02 Jan 2025 17:52:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201133
IP address blocks: 95.169.196.0/24 maxlen: 24
185.7.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:fa:72:fb:9e:74:99:01:bf:97:ff:39:05:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 2 17:52:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=996538b88dc0103de4551206aac358a6e62c818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:da:65:f1:98:bc:d1:48:5c:7a:fb:14:c8:
3c:98:f5:42:db:e9:f6:43:50:d4:c3:ef:fa:13:98:
42:97:4b:42:c9:63:43:53:2c:e1:bc:cb:15:bf:83:
b8:4f:b0:fe:57:7b:53:3f:b7:01:22:26:72:86:5c:
10:75:6f:21:64:21:69:a2:80:f1:d3:8e:17:c8:c7:
3b:85:c3:83:32:c1:3b:0d:9c:b7:55:b5:e8:21:b9:
2a:59:d6:87:5b:75:38:7c:64:f8:d6:2b:62:93:fc:
2a:55:9a:09:c4:4e:ca:e6:a1:24:7d:5a:40:a2:b6:
2a:a0:cd:55:78:37:43:54:c1:6a:45:24:bc:6a:38:
f9:3d:50:8a:75:20:ea:02:a5:4d:47:14:ca:44:db:
cc:50:8a:2d:d1:de:fe:6f:d9:2d:9c:a8:d7:eb:04:
32:40:3d:bd:95:13:fb:a3:6a:a1:93:e9:5b:19:12:
07:29:65:6f:40:cd:00:b7:61:a7:6c:49:ca:6b:b1:
fc:3f:9d:a8:18:89:62:ad:ef:94:1d:67:ae:30:3b:
2d:58:e9:03:4e:89:b5:6b:68:0c:17:26:43:be:13:
ab:ea:03:e4:14:12:8d:9e:a1:f9:ea:0c:7b:42:fc:
6d:d8:49:5c:8c:c6:fe:f7:69:5e:f9:04:2d:04:0b:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:65:38:B8:8D:C0:10:3D:E4:55:12:06:AA:C3:58:A6:E6:2C:81:8E
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/mWU4uI3AED3kVRIGqsNYpuYsgY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.196.0/24
185.7.219.0/24
Signature Algorithm: sha256WithRSAEncryption
94:52:a1:95:43:a5:26:35:cb:46:7d:34:a8:68:08:51:df:57:
5f:32:1b:e3:51:bc:8c:34:31:32:d6:93:bc:20:e2:c3:2a:65:
77:31:b9:00:58:e6:1c:09:e5:58:b2:0a:5d:33:81:6f:83:ac:
12:e9:2d:55:55:e1:0c:d6:1f:3c:56:fa:1f:3c:ad:3b:02:9d:
4c:e3:d8:c5:02:ff:df:7a:ce:9e:1d:44:de:ce:ca:80:31:63:
4e:f3:d6:6a:ea:f1:2c:c1:c8:13:e8:cd:93:ea:51:f2:96:70:
53:a3:29:e1:78:3f:c1:b6:d4:5b:87:2d:fd:76:fa:e7:3b:83:
d2:0e:cc:04:85:00:ff:6c:1b:f2:ed:c0:91:da:d5:99:e2:c4:
b7:a9:a8:43:3d:8d:24:da:12:a6:a1:e3:41:69:d4:a1:6e:aa:
42:84:f7:81:12:a2:05:09:97:b9:db:27:86:b9:e9:15:73:32:
ea:6e:9e:9f:f8:7e:49:51:74:d2:20:51:c0:34:14:ac:53:31:
b6:e5:58:52:99:11:ae:ea:d8:b0:21:47:9f:cf:c3:40:6a:41:
0a:52:63:a7:43:f5:71:f9:07:4b:c0:d6:c3:15:61:d7:b4:f8:
d5:50:66:37:45:0f:a4:01:87:c5:05:1a:77:1a:27:db:b8:4e:
82:99:e3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:11:27 2025 by rpki-client