Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa
File: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (raw, json)
Hash identifier: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=
Subject key identifier: 32:1B:C4:DE:A9:A6:2D:14:F4:37:B0:D2:6D:32:F0:F4:2B:32:DB:74
Certificate issuer: /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial: 01942669E1BB3D83F6E04398802066D849DE
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa
Signing time: Thu 02 Jan 2025 09:47:40 +0000
ROA not before: Thu 02 Jan 2025 09:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197248
IP address blocks: 185.130.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:e1:bb:3d:83:f6:e0:43:98:80:20:66:d8:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Validity
Not Before: Jan 2 09:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=321bc4dea9a62d14f437b0d26d32f0f42b32db74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:5b:d5:a2:10:9c:af:82:f0:c5:d0:f5:48:
de:10:5d:e0:65:6d:bd:d0:13:7f:51:60:63:84:31:
2e:e6:7c:59:b3:f5:3e:60:3a:08:44:70:0a:7e:36:
9c:dc:b2:a9:47:27:f8:29:c9:ba:e4:df:eb:a2:a1:
b8:e2:67:b5:04:d5:e6:16:ab:2f:ba:8f:74:97:1a:
9f:2d:0f:88:ed:dc:87:6e:bd:01:20:71:42:a6:85:
d2:a0:7a:77:24:ec:7e:1b:d0:d1:aa:da:da:98:be:
82:3a:61:22:2c:73:44:4e:2e:88:0f:f3:9c:d3:15:
a9:32:83:50:cf:0b:18:4b:ae:76:3a:a2:31:57:0f:
32:a1:1a:06:6b:7c:27:91:f1:1d:df:a4:ab:5a:0f:
8b:56:f3:79:f5:b7:95:c8:fb:41:65:0e:0d:4e:46:
c7:34:f6:d1:db:f8:24:b1:b6:68:82:4e:c3:ee:30:
b3:55:19:47:1d:c5:a3:42:da:6c:d5:98:1e:f4:1b:
a1:98:09:5f:a0:87:48:60:af:d1:a6:fa:16:88:8a:
13:06:95:08:f8:c0:e3:1d:66:a0:91:fe:06:8a:cf:
48:5a:f7:97:d5:93:d9:dd:39:d3:8e:e0:4c:f7:93:
25:67:ec:c6:d3:cd:5d:40:1b:dc:33:38:3e:2f:fd:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:C4:DE:A9:A6:2D:14:F4:37:B0:D2:6D:32:F0:F4:2B:32:DB:74
X509v3 Authority Key Identifier:
keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.193.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0b:85:a2:51:40:cc:ae:df:ab:b0:a9:a0:8a:0e:65:f4:1d:
47:08:2e:b5:48:c8:ed:4d:48:56:17:f9:14:97:72:01:d6:81:
13:48:c2:a6:87:b3:a0:0b:b7:a5:ba:91:88:f5:d6:6f:75:e8:
f4:f0:be:c2:84:7e:f7:c9:53:5f:48:65:83:c7:30:08:f4:09:
05:c0:7f:63:f9:2c:c9:aa:fd:05:ea:9e:b0:aa:0b:df:ae:76:
08:14:43:87:a5:d9:40:8b:ae:ce:bd:f4:89:3b:3b:36:c1:54:
5f:bb:8d:6f:37:7b:73:6c:54:60:da:04:f6:dc:13:ba:8e:c0:
4a:78:82:46:8e:63:5f:94:1d:58:7a:29:9a:7d:a3:4e:01:7b:
ab:e0:bc:fe:db:76:35:53:0b:e3:c9:3d:f5:31:e6:c9:1a:2e:
1b:38:a6:d6:44:1f:83:a1:5c:5f:35:3a:12:07:5e:0b:26:c0:
5e:73:2d:93:42:76:73:0b:ed:4a:d5:6f:f8:ac:f3:b6:a9:f2:
c0:1b:aa:7d:ce:2e:10:b6:8b:21:85:c1:bd:cf:a5:14:55:e8:
dd:bd:15:ee:2e:7a:0a:a6:32:06:72:a2:94:bc:e2:7c:25:e4:
d2:46:84:cd:2f:88:60:53:67:a3:5a:eb:cd:9e:42:23:e2:ae:
9e:23:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:01 2025 by rpki-client