Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/mIeBpS2n4kCr0BZmoszWNjvAQck.roa
File: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (raw, json)
Hash identifier: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=
Subject key identifier: 98:87:81:A5:2D:A7:E2:40:AB:D0:16:66:A2:CC:D6:36:3B:C0:41:C9
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0194221F84497FB4D81E6CA3474AE766B2EE
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/mIeBpS2n4kCr0BZmoszWNjvAQck.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41268
IP address blocks: 81.19.128.0/23 maxlen: 23
81.19.130.0/24 maxlen: 24
81.19.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:84:49:7f:b4:d8:1e:6c:a3:47:4a:e7:66:b2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988781a52da7e240abd01666a2ccd6363bc041c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:a5:2d:38:f1:bb:65:f8:1e:4d:79:f7:e8:
9e:0b:e1:bd:92:d4:ae:81:9f:fe:5e:ea:e1:24:6d:
94:9a:e8:e5:f0:9b:5a:86:8e:50:13:7a:55:9c:1a:
03:bc:20:39:8a:31:3b:30:62:9c:b8:8a:fa:e7:38:
54:b5:7a:c2:ee:5c:5d:df:44:df:d7:8c:24:db:75:
1e:55:51:06:0e:c7:24:17:e4:b3:82:95:c5:1c:bb:
56:ba:47:e3:3a:c1:43:9e:34:73:30:6e:36:b4:05:
1e:10:a8:75:80:d8:ee:22:50:55:26:ed:06:46:47:
24:71:8b:32:8c:65:55:4e:e4:14:e4:2a:35:c2:01:
11:13:88:66:eb:10:ad:60:28:1b:0d:48:68:ad:a1:
f5:6a:b8:42:71:1e:62:5b:25:8a:bf:1f:40:e7:fa:
94:d0:f1:79:1b:60:8f:54:e6:9a:0d:1f:fe:82:d0:
1b:22:29:05:e8:52:81:37:e0:20:c8:41:0c:8e:56:
ee:62:12:c8:4b:93:43:a4:1a:16:e3:16:47:0f:95:
d1:c1:ee:21:a9:42:7c:67:57:e9:d5:a1:ab:a0:46:
f3:66:c1:e3:ce:50:ee:9e:6a:6a:e8:dc:4b:b6:17:
70:f9:f5:ee:24:e2:78:34:37:a3:2f:b0:13:d4:c9:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:81:A5:2D:A7:E2:40:AB:D0:16:66:A2:CC:D6:36:3B:C0:41:C9
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/mIeBpS2n4kCr0BZmoszWNjvAQck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.128.0-81.19.130.255
81.19.142.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:bc:09:0c:12:10:66:21:b4:31:9a:9a:a2:51:12:83:0a:a4:
49:83:45:89:dd:da:c9:1e:32:21:ad:d6:7e:e7:e9:b9:d8:b8:
0c:12:48:e9:1f:0a:11:0e:3a:b9:3e:3f:08:f3:47:0b:95:2f:
6b:89:3c:89:3a:2c:ce:1f:18:ee:fb:43:20:e2:58:4e:66:d3:
2b:a5:04:e8:59:8d:e8:e2:88:3b:51:d0:aa:67:70:79:fd:4c:
4f:0a:24:46:f6:f1:cc:b6:25:45:bb:d9:11:b5:ef:22:cd:94:
b8:2d:ee:31:b0:88:c8:b0:cf:8d:86:8a:57:df:66:b7:2c:d3:
7a:d3:a5:00:4e:13:6d:c9:57:6d:82:ed:ae:8f:6e:e0:7f:48:
3e:e9:57:f0:76:2c:eb:c2:bf:b5:81:12:8d:fd:b7:6a:03:18:
c6:7d:1a:d7:1c:19:52:b4:ea:25:62:51:47:45:e5:f9:dc:0f:
dd:3d:5e:a8:c6:35:df:8a:b8:7f:21:ea:39:fd:5b:d5:22:80:
7e:40:41:cf:3f:a1:0a:60:2e:da:c9:f0:e3:ef:f7:b4:c0:e7:
59:85:c6:9b:31:e9:a1:ff:d6:f7:e8:34:35:5f:5e:05:24:8c:
9f:46:94:6b:67:eb:56:3b:31:9c:ed:2d:b4:4f:43:2c:01:d3:
ad:f2:9e:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:20:00 2025 by rpki-client