Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/m01g-CBC5mmua20tUAtJoqGt3ww.roa
File: m01g-CBC5mmua20tUAtJoqGt3ww.roa (raw, json)
Hash identifier: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=
Subject key identifier: 9B:4D:60:F8:20:42:E6:69:AE:6B:6D:2D:50:0B:49:A2:A1:AD:DF:0C
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 019600CA24D878650366637776BA23BD4C92
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/m01g-CBC5mmua20tUAtJoqGt3ww.roa
Signing time: Fri 04 Apr 2025 12:32:49 +0000
ROA not before: Fri 04 Apr 2025 12:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207446
IP address blocks: 185.143.20.0/22 maxlen: 24
185.143.20.0/24 maxlen: 24
185.143.21.0/24 maxlen: 24
185.143.22.0/24 maxlen: 24
185.143.23.0/24 maxlen: 24
185.165.48.0/23 maxlen: 24
185.165.48.0/24 maxlen: 24
185.165.49.0/24 maxlen: 24
2a07:1e01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:ca:24:d8:78:65:03:66:63:77:76:ba:23:bd:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Apr 4 12:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b4d60f82042e669ae6b6d2d500b49a2a1addf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:23:22:9b:dd:27:18:9c:fe:bf:e3:2e:33:
b5:52:22:cd:d1:14:67:f8:bc:f6:0d:32:be:0f:ed:
e5:93:e2:aa:d8:ef:0d:06:b4:5a:50:67:38:68:85:
9a:26:08:d9:68:95:7a:96:82:e5:0f:16:6c:9c:77:
ff:d7:18:e5:f9:d8:0b:34:27:5f:d4:3e:4c:03:64:
47:e8:5c:07:29:aa:3a:23:d4:27:11:23:f5:20:2f:
00:97:bd:8f:25:63:c7:ea:ff:aa:e6:a3:51:37:6b:
b0:7f:bf:e2:8c:cc:94:cd:77:b4:5c:fa:1d:65:ec:
2d:89:5f:28:e8:5b:2e:62:cb:0e:ca:4b:6a:9c:7d:
91:36:6e:52:12:a0:c6:e6:3b:3f:12:ca:c3:f9:d3:
5b:e2:e6:6b:b2:26:b7:ff:b0:65:9d:f2:ea:af:86:
0f:c0:8c:62:70:90:95:7f:72:03:23:d5:74:54:f6:
eb:14:b7:0c:c1:7e:48:e5:0a:ea:d2:45:63:51:6d:
3c:56:7c:22:04:1c:6f:56:84:b6:42:50:d0:7c:bd:
91:bc:87:0b:e2:44:2c:0d:f9:23:57:a1:94:50:5f:
4e:97:2a:da:c2:22:fa:1b:52:8f:5c:5d:70:bb:11:
4d:92:c4:ed:69:60:cd:65:01:ed:ee:2c:b8:cf:d3:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:60:F8:20:42:E6:69:AE:6B:6D:2D:50:0B:49:A2:A1:AD:DF:0C
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/m01g-CBC5mmua20tUAtJoqGt3ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.20.0/22
185.165.48.0/23
IPv6:
2a07:1e01::/32
Signature Algorithm: sha256WithRSAEncryption
2f:93:ce:70:70:8b:e2:a1:a2:e6:9d:4a:77:06:6a:bb:65:32:
1f:c0:33:53:c7:6b:35:e7:8f:bc:59:10:3f:42:93:bb:e3:b5:
20:ff:7d:ae:21:62:c8:40:56:4b:eb:52:b5:20:c0:34:aa:d7:
a8:73:f9:aa:a1:01:40:c9:63:bd:ef:a0:4c:04:01:fe:e3:f5:
a2:83:3d:b7:f5:f0:87:4f:de:e8:dc:24:2f:7a:2d:b0:9a:1a:
be:f1:3d:6f:bd:d7:75:f7:18:a4:61:74:1d:aa:f4:80:d3:be:
65:34:3e:34:ba:0d:e3:5a:ce:f5:8f:24:ce:08:9e:d4:e0:ba:
b7:70:b0:c8:db:14:ea:4c:14:fc:65:d3:95:08:7d:9c:e6:94:
91:b7:ae:a5:69:8d:40:e8:98:a5:4e:39:44:a3:b5:be:12:b8:
aa:b7:e2:bb:ec:eb:47:38:2c:9e:d8:bd:2b:61:c7:01:94:3b:
20:2c:64:32:45:87:e6:4f:cf:b7:2a:0c:40:f2:cf:ab:53:ca:
78:01:78:d2:98:e0:1c:1d:5b:89:8c:eb:ef:81:c9:64:cd:37:
f4:d9:c1:f1:16:8e:1e:12:29:ba:e9:61:a9:8c:4d:0e:b9:6d:
d4:e3:a7:0e:a9:07:3d:44:ac:e1:99:06:66:b3:b1:2b:87:b8:
8d:63:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:33:48 2025 by rpki-client