Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/maPCADcTD0j72xKETkOFhfCf_VM.roa
File: maPCADcTD0j72xKETkOFhfCf_VM.roa (raw, json)
Hash identifier: 9uY37uZRkjCzq9ikmQn0wEUh2D8+w+AywsiqaUxRG64=
Subject key identifier: 99:A3:C2:00:37:13:0F:48:FB:DB:12:84:4E:43:85:85:F0:9F:FD:53
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019519D101AE609517C458C311DE25B4A176
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/maPCADcTD0j72xKETkOFhfCf_VM.roa
Signing time: Tue 18 Feb 2025 16:08:02 +0000
ROA not before: Tue 18 Feb 2025 16:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214449
IP address blocks: 109.236.48.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:d1:01:ae:60:95:17:c4:58:c3:11:de:25:b4:a1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 18 16:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99a3c20037130f48fbdb12844e438585f09ffd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:18:51:f4:ca:07:a7:33:dd:dd:4b:d5:ee:
e9:75:77:89:c0:93:e4:61:0b:5d:95:79:16:32:54:
67:51:61:1f:76:9f:3e:62:a6:31:b8:b2:d0:cf:d7:
6f:c1:88:3a:c9:3c:2e:08:63:5d:ff:5a:30:f5:a9:
c5:81:b3:bc:5a:89:68:bc:68:dd:de:56:c6:f0:2a:
63:bb:11:20:46:b3:38:86:9f:92:9c:41:89:9b:20:
e6:b3:6d:83:3b:d2:c3:a1:75:86:42:7a:0c:30:5a:
73:55:84:22:3b:b6:b1:93:7e:1a:68:96:05:8b:44:
9d:b9:96:92:db:5e:74:85:d3:e1:4c:ac:e5:36:a7:
7e:81:33:ea:68:6d:c3:77:39:26:ef:65:ae:6c:ea:
14:8e:3a:b5:66:11:9f:98:fd:7b:b6:a2:30:88:16:
f7:f7:af:8e:13:67:d2:08:38:ea:a1:61:43:e2:2f:
b9:b8:f3:1b:c0:af:73:06:9c:2c:e2:a0:d6:d4:5a:
4f:84:38:49:f7:22:1d:e1:08:3f:68:92:43:f2:01:
d5:3b:9f:c8:5a:e6:46:26:a4:2b:82:91:8a:38:65:
7e:c9:54:aa:55:a9:4b:ad:0b:27:cf:ef:c1:8c:0e:
f4:ab:de:42:09:c1:ec:df:7d:19:7a:e3:1e:ed:fc:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:C2:00:37:13:0F:48:FB:DB:12:84:4E:43:85:85:F0:9F:FD:53
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/maPCADcTD0j72xKETkOFhfCf_VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.48.0/24
194.62.54.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:db:2e:18:fd:3a:e9:a9:ab:52:52:ec:31:d9:84:fd:16:80:
87:ad:68:de:56:72:cc:0f:9d:c3:97:2a:e8:30:7b:8b:62:dc:
25:21:00:8b:7e:23:41:e1:25:ec:b1:0c:15:85:25:d8:82:4d:
a3:9c:3e:11:84:b1:f6:33:db:26:fa:14:b6:d0:be:57:5c:76:
96:7c:fc:0f:ac:b3:0f:40:1c:b8:17:2b:1c:94:59:16:b2:72:
c0:8c:c4:3d:52:f9:4f:64:72:67:b2:c5:47:a0:8a:f4:3d:bb:
5d:c6:f1:3c:7c:e6:8b:ef:94:a8:87:9f:43:29:21:f9:df:6c:
8c:9a:69:78:a7:d7:79:d4:56:6e:a6:05:a8:c7:29:7b:4a:d9:
fd:63:4b:0f:39:d5:2d:58:ee:f5:9a:ef:62:73:76:36:f3:55:
64:bb:7a:72:0b:a7:65:31:e4:a5:ef:a9:94:f2:e4:de:6b:6e:
5b:a0:0d:32:23:b9:ff:78:7e:ce:15:f1:e9:e0:8f:59:1d:3a:
7d:ef:16:14:82:4a:03:06:cd:c9:cf:76:3a:63:37:b4:84:e1:
49:c2:5b:c4:60:63:43:09:33:52:1d:f5:98:20:0e:c4:d4:a5:
03:2f:70:e5:1c:6d:57:73:5a:6d:16:3e:46:8f:b8:37:d3:22:
71:c5:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:35 2025 by rpki-client