Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/mNova3WsqOD86eozlCah8ixo0-U.roa
File: mNova3WsqOD86eozlCah8ixo0-U.roa (raw, json)
Hash identifier: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=
Subject key identifier: 98:DA:2F:6B:75:AC:A8:E0:FC:E9:EA:33:94:26:A1:F2:2C:68:D3:E5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472B2B0BE0392BC2C91B680F8F7153
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/mNova3WsqOD86eozlCah8ixo0-U.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60446
IP address blocks: 185.254.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2b:2b:0b:e0:39:2b:c2:c9:1b:68:0f:8f:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98da2f6b75aca8e0fce9ea339426a1f22c68d3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:1e:30:05:ba:d3:5b:c8:e9:eb:5f:de:02:
af:2c:13:2d:0f:03:77:c7:26:bf:7d:78:c1:bf:d9:
68:05:90:d7:25:af:4f:54:69:a3:4a:00:4f:10:90:
76:bd:aa:5c:9c:8b:a2:11:93:8f:62:7b:59:41:73:
24:b3:e6:58:db:2a:10:83:7d:8b:8b:fe:f2:dd:fd:
f1:41:c9:b4:57:8e:5d:16:1f:2b:d0:22:c2:6a:37:
28:36:81:1e:af:33:37:53:29:35:aa:91:a5:86:63:
d8:b2:e8:fb:05:58:da:89:3e:a9:d1:72:d5:79:e6:
55:7b:90:e5:15:26:fa:7a:98:0b:4a:ec:42:c1:ea:
54:2d:30:2e:7d:fb:00:a0:c0:f6:42:4d:76:e5:4f:
b5:a8:74:c4:02:d3:4c:b1:02:32:98:82:e5:a1:c6:
41:fe:ca:29:c4:f3:37:b0:17:bf:51:f1:7b:64:2f:
74:11:85:d3:27:64:1d:b6:2e:29:34:bc:26:41:7c:
88:47:9f:90:fa:4e:cc:ae:a6:5f:be:c6:4b:6f:f5:
f9:34:e7:50:0e:6e:25:f0:66:fe:b5:be:53:30:ba:
3a:dd:06:74:44:0a:78:6f:bf:a2:01:c3:e4:bc:b5:
ab:93:a0:bc:6f:06:40:69:54:8c:32:05:4a:92:3f:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:2F:6B:75:AC:A8:E0:FC:E9:EA:33:94:26:A1:F2:2C:68:D3:E5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/mNova3WsqOD86eozlCah8ixo0-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.30.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a1:6b:56:14:d9:9c:05:c6:b8:9d:fe:85:86:8c:67:82:26:
6e:91:d6:31:01:7c:a7:c5:ac:f6:a1:f0:aa:de:c6:84:37:90:
9d:fe:16:eb:79:80:d1:04:5f:18:1c:67:3d:a1:1f:2c:84:96:
cb:a7:1b:6f:c4:b0:eb:08:d7:6e:4c:5c:72:8d:83:47:b8:cd:
f8:2c:a8:17:e3:c0:9a:0b:ed:81:da:c4:bc:8e:a6:97:27:ee:
5f:70:45:b7:8e:3f:78:66:fd:d6:c9:4a:f8:3c:27:ee:85:79:
af:72:03:ac:9d:bc:87:19:3b:67:21:41:1e:c1:5b:2a:cb:cf:
58:84:f1:b0:c5:39:5d:72:f9:80:aa:8b:e7:e3:b6:d2:0e:b4:
0c:9d:4a:7f:c4:40:7b:f2:74:6f:f4:5a:ad:a0:c3:cd:72:58:
cd:7a:87:ee:8f:34:09:c4:12:f7:b9:1f:32:05:8b:6e:39:c0:
ce:14:e3:fa:4d:a3:80:f9:f0:d2:c3:fe:44:df:ff:b2:45:df:
d2:f8:35:9a:40:a3:ca:57:04:1b:b4:6b:95:9e:9b:ae:80:1f:
41:e4:10:41:1d:75:f5:a1:af:b8:63:09:37:65:29:b3:c1:e4:
bc:77:ca:18:8f:ea:ff:0b:d1:79:de:74:be:a5:b4:a0:9a:31:
3d:c7:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:02 2025 by rpki-client