Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/V_dMITyg0o4yHp4v8D9mTe6CxKs.roa
File: V_dMITyg0o4yHp4v8D9mTe6CxKs.roa (raw, json)
Hash identifier: 5xss2ydVOa64bp1JjgZlBG0W1rKDvC4+6oZPPOh4X4M=
Subject key identifier: 57:F7:4C:21:3C:A0:D2:8E:32:1E:9E:2F:F0:3F:66:4D:EE:82:C4:AB
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 0194221F9F78B2F3441FF9388E0BC1DFB7B1
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/V_dMITyg0o4yHp4v8D9mTe6CxKs.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49509
IP address blocks: 185.79.80.0/23 maxlen: 24
2a02:23e9::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9f:78:b2:f3:44:1f:f9:38:8e:0b:c1:df:b7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57f74c213ca0d28e321e9e2ff03f664dee82c4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:0b:ad:12:7a:34:7e:94:f7:67:35:ee:5f:
17:a9:b2:3d:5c:77:04:ec:57:a9:ee:74:93:50:03:
42:9e:a6:46:5d:66:28:9c:be:7d:fb:af:d1:f8:8c:
92:94:ef:95:f6:6e:9d:99:69:79:81:33:cd:38:a8:
a5:e4:87:a1:0e:85:4d:52:55:df:cf:2b:dd:04:2f:
16:35:63:aa:0e:ce:29:25:94:a7:5f:98:d2:83:ec:
cc:4d:9e:e8:9f:4f:15:9d:d0:9c:b8:b5:79:12:30:
d7:01:7e:25:9f:13:ec:76:66:d1:27:74:bb:17:bc:
b8:7a:2b:36:ff:0b:a0:92:96:d2:5d:85:d4:51:66:
91:5a:e1:14:b1:59:23:73:9c:23:e9:e4:78:9f:24:
8a:6f:d4:e4:38:e1:49:0d:8d:68:cd:83:54:02:7b:
2c:07:8e:14:80:a3:00:c2:82:f4:eb:c3:b7:6f:64:
82:56:09:f1:a6:47:a8:0e:e2:c4:9c:ff:75:ff:15:
57:0e:56:ac:64:58:53:3b:03:b9:2b:52:43:b9:cd:
45:3f:32:b0:1e:65:2a:da:7d:bb:2a:57:2b:62:78:
5c:3b:7e:af:c9:26:44:30:5c:4a:2a:7c:0a:85:62:
be:16:d0:b7:0f:6c:75:93:6c:ba:66:40:80:78:aa:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F7:4C:21:3C:A0:D2:8E:32:1E:9E:2F:F0:3F:66:4D:EE:82:C4:AB
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/V_dMITyg0o4yHp4v8D9mTe6CxKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.80.0/23
IPv6:
2a02:23e9::/32
Signature Algorithm: sha256WithRSAEncryption
65:54:c3:6a:1c:c9:fc:16:85:d6:bf:88:a1:22:c1:e5:a9:d3:
81:f0:7a:59:b5:99:33:4c:95:61:3a:8c:f8:29:37:0d:d0:5f:
0b:e9:64:5b:c1:67:08:aa:46:29:ca:c2:1d:87:62:95:0b:f2:
cc:55:81:31:74:11:bf:59:6a:a0:5f:cf:c9:bb:a3:4d:d9:3e:
35:0e:2b:52:e3:cc:95:53:78:3e:f3:2a:ef:8b:86:c6:6e:69:
d5:4b:43:44:a9:0e:e6:c9:1a:66:34:0b:8c:03:aa:4b:bd:e5:
2e:aa:c6:4e:e8:d3:39:54:14:85:d4:cf:2c:12:fd:93:2c:80:
2d:19:ce:93:c1:1d:e2:ef:a8:65:8f:25:92:43:83:42:1a:91:
f7:6e:f7:56:a0:9c:50:9f:ce:45:22:13:e2:01:6d:55:5a:d2:
f5:31:ec:9e:f9:38:e6:2d:df:0d:1c:0c:f0:f5:9d:51:3b:aa:
16:39:6c:b1:af:0d:9c:cb:1c:e5:db:1a:c4:cf:91:cd:68:87:
d0:2b:45:90:25:d3:22:6f:75:55:59:bb:07:14:cc:51:e2:71:
f3:1e:31:0e:90:6f:3f:d3:77:09:cb:9c:d7:b2:1d:3a:52:c4:
42:83:15:62:5d:38:e0:20:92:33:40:f3:cb:58:62:d0:91:27:
4a:2e:e0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:39:37 2025 by rpki-client