Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/muQqhNcFqaAhliY1Xe6uhTF-w60.roa
File: muQqhNcFqaAhliY1Xe6uhTF-w60.roa (raw, json)
Hash identifier: 5ol3Dy/oyYKpD5jnMaSN9uea7FQti15q53TRbPs48Kg=
Subject key identifier: 9A:E4:2A:84:D7:05:A9:A0:21:96:26:35:5D:EE:AE:85:31:7E:C3:AD
Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial: 019424B3B061F832EBF3766F1218F82CA854
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/muQqhNcFqaAhliY1Xe6uhTF-w60.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202987
IP address blocks: 194.246.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b0:61:f8:32:eb:f3:76:6f:12:18:f8:2c:a8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae42a84d705a9a0219626355deeae85317ec3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:50:11:e5:80:11:38:60:93:3f:7a:43:71:
91:f7:23:20:57:91:50:c3:c5:bf:c9:75:93:6c:74:
a2:a7:79:7e:41:95:70:e2:b3:58:af:48:99:4f:13:
ec:07:05:bd:38:c8:42:f9:db:9a:a8:2f:98:eb:77:
44:7b:35:8d:ef:07:e7:60:ae:ae:ac:4d:07:6a:fc:
34:1c:24:c7:d2:03:59:38:f1:17:22:72:59:7f:f2:
c5:c5:15:1a:cd:72:1b:5e:30:55:13:9e:36:e3:50:
1c:7f:f6:c3:e1:a9:4b:c3:e0:bd:f9:b0:64:de:e6:
af:8a:35:d4:49:f9:4f:11:4d:fa:7c:c5:d6:d9:06:
db:4a:b3:07:04:15:af:c0:8f:58:ee:05:e3:64:f8:
d7:a2:d2:a7:79:d6:6d:9a:42:d4:f7:ab:f6:00:64:
bf:a9:2b:40:e1:d7:a9:fe:19:2d:e3:68:e3:a6:3f:
aa:fa:bb:7f:81:d3:56:d2:0f:2e:f2:08:ae:f8:b4:
23:38:ad:cb:bc:2a:ed:1f:99:f2:0d:ea:0c:43:ab:
87:3a:1e:b4:1d:e6:3b:eb:12:cc:48:52:a5:ab:e7:
43:bb:8f:3f:93:95:07:b8:12:6a:a7:ed:2f:1b:a9:
f1:40:e5:6a:bd:b3:16:05:b0:14:72:cc:87:ba:da:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:2A:84:D7:05:A9:A0:21:96:26:35:5D:EE:AE:85:31:7E:C3:AD
X509v3 Authority Key Identifier:
keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/muQqhNcFqaAhliY1Xe6uhTF-w60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f0:0d:b0:da:5a:f5:83:3f:7b:66:0d:87:2e:63:10:a8:0e:
f6:26:78:c8:a7:cf:6e:54:70:6a:b6:b3:2d:97:7e:59:47:96:
5d:62:85:67:3b:73:2e:44:b5:d5:93:16:1d:84:ba:d9:eb:ac:
b5:7e:f3:e7:1e:33:be:72:4e:52:56:73:b6:d1:52:94:ce:44:
3e:9a:02:ed:af:ce:52:c6:cb:01:21:24:76:5f:9f:5e:b8:1e:
c4:00:24:c5:76:0a:fd:a3:85:da:7b:67:51:03:f8:d9:6b:ed:
71:c4:7c:f7:f6:ed:b3:25:a3:5c:68:dd:65:d6:e8:2a:21:ae:
2f:4c:d2:45:e7:3e:0c:a0:52:fe:a5:18:c7:85:fb:71:10:19:
85:22:d5:90:8c:28:d7:4b:5e:54:8f:d2:2d:79:0b:a4:b1:a7:
2c:27:6b:36:72:5d:1f:69:03:02:4b:c6:77:d8:ce:1a:9a:93:
02:a1:71:32:d9:37:d7:19:37:2c:55:1b:0b:1b:41:19:85:7b:
33:42:0b:c1:9f:5f:cb:ba:f6:6b:91:aa:59:5e:05:5a:57:f0:
4e:6e:bc:9c:ac:88:20:11:84:81:12:fb:b8:5c:02:d7:0c:99:
bc:1c:6e:c5:7a:de:d5:3a:d7:d1:43:cf:ee:ee:9f:19:58:68:
3b:58:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 14:35:18 2025 by rpki-client