Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/DMobrwEvAlt4_akaIi-0Lc6dPts.roa
File: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (raw, json)
Hash identifier: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=
Subject key identifier: 0C:CA:1B:AF:01:2F:02:5B:78:FD:A9:1A:22:2F:B4:2D:CE:9D:3E:DB
Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial: 01941FFA813E09D5898F032F2CE69252625C
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/DMobrwEvAlt4_akaIi-0Lc6dPts.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51932
IP address blocks: 91.221.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:81:3e:09:d5:89:8f:03:2f:2c:e6:92:52:62:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cca1baf012f025b78fda91a222fb42dce9d3edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:ba:5e:24:90:4a:69:49:a4:19:3f:30:d7:
64:dc:a8:7d:94:fc:b8:a2:fa:1a:f7:1a:fe:c4:b7:
d9:e7:b1:62:fd:cf:42:2b:79:1e:50:4f:f3:28:b9:
bc:d8:10:00:a9:dc:ae:77:29:0d:48:c4:26:5b:ca:
d5:77:fc:1e:39:39:7d:e3:3c:40:24:c5:13:bd:6d:
23:9d:d3:22:50:0c:f1:a8:74:c0:62:30:63:b9:5f:
b3:6c:81:a6:fb:d6:cb:54:9a:0b:b7:2c:0c:c6:0d:
46:4f:c0:17:a6:6d:ee:81:a9:c3:2b:a8:33:3c:c1:
9e:d0:1d:50:ab:46:ff:c4:b9:56:31:90:df:7a:88:
9e:50:31:2a:e9:c7:db:2a:05:1f:71:8e:00:47:e5:
0e:ba:63:89:e9:9c:4e:f7:f0:c8:5a:d5:c9:cc:48:
b3:47:64:9e:dd:54:ad:29:46:5e:a0:cc:08:92:44:
dc:c8:13:6b:d4:3b:97:93:00:41:80:f3:61:dd:ca:
51:c7:37:b0:87:06:d9:b4:b8:aa:33:d3:0d:ba:27:
19:54:fa:e8:d4:e8:e6:a9:a8:41:5a:fe:66:13:7a:
5b:35:00:2f:74:29:82:ab:0e:fe:a6:cd:a6:99:d3:
4d:e7:82:31:c7:91:ba:f1:18:49:68:85:16:70:6d:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:1B:AF:01:2F:02:5B:78:FD:A9:1A:22:2F:B4:2D:CE:9D:3E:DB
X509v3 Authority Key Identifier:
keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/DMobrwEvAlt4_akaIi-0Lc6dPts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.140.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:9a:92:fe:c9:44:40:b8:09:d7:96:7f:45:15:b6:44:b3:34:
60:e8:83:88:f1:1d:ff:c2:07:bf:ba:85:6e:bd:31:38:6e:ba:
7e:e1:81:7b:a7:bd:90:80:05:15:a4:9c:60:40:3b:15:19:32:
a5:17:20:01:09:19:15:c9:dc:18:37:9e:08:f6:78:ea:86:4e:
90:10:3d:69:f3:b5:a8:be:2c:6d:0b:ab:f2:55:89:e2:af:f6:
d6:1d:b8:5a:ee:85:db:97:66:5c:34:91:7e:1c:53:12:ae:dc:
4f:dc:74:4d:3e:bd:4b:70:7d:02:77:1f:d5:31:d7:19:f4:ab:
23:d9:44:55:39:39:eb:a1:22:80:f7:55:d8:8d:12:d1:73:d0:
86:eb:4d:f8:d0:d0:5e:82:83:a0:86:d8:82:07:aa:0a:23:f8:
65:f7:2e:19:f4:ed:17:09:2d:4e:e5:1a:53:f1:e2:d8:1a:06:
a2:19:de:7c:9f:8a:b1:bd:c5:f6:1e:79:a9:ea:7a:45:44:29:
3a:93:0a:ff:4d:8b:55:45:ce:cd:a7:c2:8c:9d:a7:0c:ca:45:
4f:df:27:64:bf:86:77:1c:ec:dd:ad:81:d3:97:9a:d1:5b:9d:
76:d9:30:85:4b:97:6a:80:09:a8:fc:97:bb:e9:54:46:d1:dc:
2c:56:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:28:21 2025 by rpki-client