Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/RqMgMpdcD54HUHiiovgo2_7eo94.roa
File: RqMgMpdcD54HUHiiovgo2_7eo94.roa (raw, json)
Hash identifier: eRUbOt1afNalKvV81WeaR6eAgifd6J7LvG2r3czI9hc=
Subject key identifier: 46:A3:20:32:97:5C:0F:9E:07:50:78:A2:A2:F8:28:DB:FE:DE:A3:DE
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 0194E0FF8D5327BE66137C11D8746C7D5B59
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/RqMgMpdcD54HUHiiovgo2_7eo94.roa
Signing time: Fri 07 Feb 2025 15:20:31 +0000
ROA not before: Fri 07 Feb 2025 15:20:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57558
IP address blocks: 185.15.168.0/22 maxlen: 22
185.197.8.0/23 maxlen: 23
185.197.11.0/24 maxlen: 24
2a03:b140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:ff:8d:53:27:be:66:13:7c:11:d8:74:6c:7d:5b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Feb 7 15:20:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46a32032975c0f9e075078a2a2f828dbfedea3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:af:8c:f2:62:bd:87:73:5e:e0:e5:07:e2:
0b:74:0a:f8:37:2f:30:a2:da:5e:e9:56:fe:fa:ab:
a4:b0:a0:64:2a:50:b4:04:56:47:51:34:d8:0b:bd:
4c:93:c9:8c:a8:8e:df:50:84:d2:88:a1:9a:da:41:
84:73:86:dd:71:f6:eb:aa:be:d5:e7:e2:f7:10:4b:
52:49:fa:f8:45:2d:ed:49:c9:be:e4:1e:a0:57:0b:
d7:49:16:99:65:5b:8b:33:ed:3b:16:7f:15:d5:f8:
8b:56:56:07:b0:15:23:a0:23:7c:91:5d:87:7a:4a:
e5:b9:8b:cb:2c:13:c1:59:76:d3:a5:2b:db:55:da:
6a:90:6c:e6:95:30:e0:84:40:2a:55:2d:39:49:7e:
8b:d0:c1:a3:0c:b3:9a:7a:42:a2:ea:cc:ec:79:ee:
65:95:b2:07:73:cc:a7:45:dc:af:4f:d9:0b:a1:52:
05:37:31:38:7f:61:63:b4:1e:6d:02:ae:05:76:41:
ad:4e:2a:c5:a5:5f:01:4d:0c:f7:89:2d:95:37:0b:
ab:07:f7:48:43:48:a3:0e:a7:19:bd:b6:65:8e:ca:
38:a6:7e:ab:c1:8b:ca:3b:34:77:45:35:01:76:45:
6b:99:90:fa:d4:e3:cb:d6:18:57:97:a9:ad:d1:82:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:20:32:97:5C:0F:9E:07:50:78:A2:A2:F8:28:DB:FE:DE:A3:DE
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/RqMgMpdcD54HUHiiovgo2_7eo94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.168.0/22
185.197.8.0/23
185.197.11.0/24
IPv6:
2a03:b140::/48
Signature Algorithm: sha256WithRSAEncryption
ab:01:6d:77:d3:62:4f:da:22:d8:10:8b:0f:c8:ff:22:bc:0b:
37:93:7c:2d:88:30:f8:9c:5a:b8:d7:d6:31:44:81:50:3b:bc:
a1:db:86:21:26:29:14:4b:62:48:4a:77:a7:21:7f:19:44:7b:
03:cf:53:82:26:38:9e:e6:9d:1a:e7:fb:49:a7:41:1c:54:45:
f7:35:ff:42:49:46:0f:c7:dc:4d:ec:cc:23:d3:ea:98:c1:f7:
5b:cb:cf:2d:02:1b:80:35:55:91:72:a6:f2:a7:46:0f:20:cd:
dc:82:1a:12:18:0a:9f:bb:08:f5:c9:ee:f4:b3:67:1a:c3:78:
c8:2a:e6:76:df:d6:e2:5e:89:cf:5e:cf:0f:3f:6a:62:63:9a:
e2:ff:8f:c8:d6:6d:41:9b:48:5c:76:97:14:c3:9f:30:48:42:
39:de:7a:c7:e9:c9:68:31:06:6d:e5:16:06:78:a5:6a:4c:f2:
43:1f:89:2d:a6:1b:86:d8:4f:0d:14:e4:c1:69:c0:50:43:eb:
d5:9e:8c:57:3e:24:fc:1b:69:15:b1:0a:87:73:0e:0d:6b:23:
24:0e:a2:50:4a:87:00:75:f5:c8:1f:ad:ec:70:38:18:43:d8:
b6:13:c8:35:f8:ba:50:1b:22:ce:50:f7:5e:f6:10:46:33:3e:
d1:dd:03:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:08 2025 by rpki-client