Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/m1lGm4fEaobGdVYTzpU0xGWbGx0.roa
File: m1lGm4fEaobGdVYTzpU0xGWbGx0.roa (raw, json)
Hash identifier: A2xthXoavYpkPagHlqk5oZxMnWLNK4bp16IhxM0zdXY=
Subject key identifier: 9B:59:46:9B:87:C4:6A:86:C6:75:56:13:CE:95:34:C4:65:9B:1B:1D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA6951EB1F60D6AF013FA0F5CEC49
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/m1lGm4fEaobGdVYTzpU0xGWbGx0.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 194.124.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a6:95:1e:b1:f6:0d:6a:f0:13:fa:0f:5c:ec:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b59469b87c46a86c6755613ce9534c4659b1b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:8c:cd:c3:47:0c:f1:d4:9a:c0:d9:93:0a:
cc:76:3a:3f:72:ca:a4:69:e6:bc:48:0e:97:31:77:
2b:43:6f:c3:a8:1e:00:9e:8f:06:ee:ac:da:c0:1b:
b9:97:cb:7c:ed:fb:76:d0:df:c6:e0:f4:36:f3:cd:
47:1f:fb:e5:88:44:69:77:7b:22:b3:7d:25:b5:14:
2b:0f:58:43:1e:19:d8:e2:18:9e:e3:31:19:d8:db:
b3:7d:70:32:6d:e8:90:c1:35:6e:93:03:01:1e:8c:
a6:b0:27:df:06:ad:3a:18:48:1b:aa:37:5b:b4:d4:
45:f0:46:01:52:30:e5:83:f8:46:bd:d1:26:9e:6f:
2f:c6:db:b2:e4:f0:11:4c:df:46:4f:70:d6:32:d7:
24:ff:b8:91:17:60:8d:97:df:8c:c0:34:2b:00:e5:
08:64:5c:22:b0:2d:5b:20:c9:90:8e:c4:cd:24:bd:
15:e7:21:f4:0a:8f:7f:88:fa:a4:7d:b9:c0:d1:e1:
a1:54:ba:a7:5d:87:ab:90:b7:7d:45:77:3d:6e:67:
c2:e4:e9:44:be:2a:22:e1:01:04:25:0c:12:98:91:
56:6e:ba:61:7f:27:94:14:46:66:05:50:74:62:50:
55:c4:e1:81:9a:2a:bf:45:7f:6d:7a:ab:76:91:aa:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:46:9B:87:C4:6A:86:C6:75:56:13:CE:95:34:C4:65:9B:1B:1D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/m1lGm4fEaobGdVYTzpU0xGWbGx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.40.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d8:8b:a8:e6:e1:3b:5b:6f:43:f9:1b:32:f1:f8:e1:74:51:
ad:ad:44:d1:fc:a7:61:9d:14:8d:46:c1:4e:65:bc:49:34:32:
94:54:77:f4:6d:42:d8:33:cf:3a:f5:8c:af:fe:d9:b3:b9:5b:
74:5c:b8:5c:32:86:66:a1:55:d9:2b:c5:12:33:42:1e:88:62:
c7:d3:6f:d9:e4:44:65:80:f4:81:c7:14:2b:9b:fb:e6:3a:c9:
c0:33:9c:56:47:f4:00:a9:e2:e4:cd:ce:0b:5e:3f:ee:2e:b8:
98:db:71:9f:28:73:d2:3e:e0:0d:42:e5:53:00:56:21:7a:9e:
7b:06:68:42:71:28:e2:cc:b5:74:b8:cf:a3:32:30:ee:74:7c:
0c:d6:ec:77:a9:51:40:94:64:f4:88:a4:50:43:61:b7:32:22:
45:22:ed:7d:9b:25:91:4c:de:0e:eb:ce:e7:91:6d:d4:88:ed:
26:1c:1a:af:4a:dd:da:17:c4:85:53:60:2d:24:7e:d4:1e:2e:
52:48:7d:be:0a:42:8e:77:71:84:44:b1:7c:a2:63:ba:0b:05:
59:00:90:88:4b:ca:de:b1:82:f1:29:38:55:a8:4e:96:26:89:
5f:12:6d:97:43:b1:23:b6:72:ef:e7:f5:d4:10:9c:04:22:80:
34:5d:7d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:03:29 2025 by rpki-client