Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0u-mLGtboMb6NUiBnvyiOcB3hqE.roa
File: 0u-mLGtboMb6NUiBnvyiOcB3hqE.roa (raw, json)
Hash identifier: 8Wkf6WVFUSyimeZJrW0FbM1YIpltjUKjmJd4lEPA0Cg=
Subject key identifier: D2:EF:A6:2C:6B:5B:A0:C6:FA:35:48:81:9E:FC:A2:39:C0:77:86:A1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD8127625BF2EA1A9D3808C8A78D0
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0u-mLGtboMb6NUiBnvyiOcB3hqE.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41398
IP address blocks: 93.159.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d8:12:76:25:bf:2e:a1:a9:d3:80:8c:8a:78:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2efa62c6b5ba0c6fa3548819efca239c07786a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:7f:c7:1f:8d:7e:df:ea:f0:30:cc:f0:c1:
c1:19:49:32:09:73:ab:c5:8d:16:c7:19:a1:ef:04:
14:9d:c5:45:28:4d:e1:10:86:e0:f3:4b:9e:29:b8:
33:66:15:11:fb:3c:bc:e1:8e:5f:b6:7d:7b:c0:10:
84:a6:01:2e:10:b7:bf:5f:1e:e9:0c:74:01:5d:b1:
a3:13:7d:7c:b9:7d:f4:23:49:02:54:92:fe:c4:f4:
86:17:6d:eb:95:c7:1b:9e:75:4d:5d:77:28:3e:39:
b0:a5:52:ef:12:26:5a:fa:41:48:7f:3d:5f:2b:94:
05:f7:05:45:6d:de:34:43:51:ef:a1:42:fc:66:28:
97:f8:70:e1:6f:7f:b1:04:cd:a5:69:77:c0:5a:1e:
6f:81:ff:ed:ca:fc:cb:7b:b6:37:7b:a7:88:f2:a1:
7b:ca:97:29:16:7d:6a:dc:3e:94:62:e5:f0:9e:bf:
40:89:5d:0b:e6:3b:b4:83:a9:00:69:39:68:be:55:
c7:8b:7b:34:c2:4b:e8:4d:df:75:69:bb:50:5a:8b:
1c:34:12:ab:ec:b0:97:ba:eb:66:b9:25:fd:4d:13:
1c:6e:a0:56:4c:0d:f3:68:37:73:ba:c1:6f:46:7f:
fe:82:c6:48:1b:a7:5b:a4:eb:a7:0e:f8:69:71:ac:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:A6:2C:6B:5B:A0:C6:FA:35:48:81:9E:FC:A2:39:C0:77:86:A1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/0u-mLGtboMb6NUiBnvyiOcB3hqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.58.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:eb:99:9a:79:79:ab:ae:c0:fe:c2:78:14:3e:d0:4f:75:09:
34:de:a5:97:7e:c7:41:2d:f7:14:c4:49:0d:96:f9:33:68:61:
9d:6b:ae:ab:0e:f1:b0:b8:d8:42:cb:df:fb:01:9d:c7:46:f0:
cd:45:83:95:b0:4a:df:81:79:68:f4:8f:a9:96:6a:4d:86:61:
c7:0a:5a:71:99:6d:5c:46:99:87:05:d6:7e:0d:f8:97:06:9b:
36:20:fb:6d:60:f5:16:df:52:3b:1b:fa:fe:b9:81:38:0d:f1:
23:7a:cc:e6:dc:1b:ef:33:a6:f5:bc:9b:e1:ff:25:d0:5d:10:
b8:ef:65:df:96:39:7d:cb:f0:a1:54:20:36:60:6a:4c:7a:f2:
60:db:17:d8:54:5d:0c:e2:cb:86:1c:7a:bc:2c:03:44:54:4d:
53:4c:7b:43:a3:9d:54:fb:70:c1:c5:9e:58:bb:8f:30:50:d6:
5d:d7:84:60:d7:27:f7:20:d4:6a:de:4a:98:01:97:d1:b0:90:
d5:07:ed:2d:51:d5:1e:08:6a:be:25:ff:88:4c:db:88:56:a7:
20:75:c8:5a:c9:34:7c:0b:e7:28:8d:d4:b7:97:cd:6e:9f:06:
4d:54:36:d4:12:9f:81:37:4e:43:94:72:c8:ae:41:11:6b:a7:
b0:82:37:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:28 2025 by rpki-client