Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/RmN9zhNzrcosUTM-5d1gTAjxE1E.roa
File: RmN9zhNzrcosUTM-5d1gTAjxE1E.roa (raw, json)
Hash identifier: uL4bwjKQw+5HAkk/uHdj99zle5Zhy8r9K/Xf1FOLrg0=
Subject key identifier: 46:63:7D:CE:13:73:AD:CA:2C:51:33:3E:E5:DD:60:4C:08:F1:13:51
Certificate issuer: /CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Certificate serial: 019420684585C94B2660D8522820834049D9
Authority key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/RmN9zhNzrcosUTM-5d1gTAjxE1E.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 195.49.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:45:85:c9:4b:26:60:d8:52:28:20:83:40:49:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46637dce1373adca2c51333ee5dd604c08f11351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:0e:b7:f5:bb:aa:d8:f5:9d:e1:74:eb:7a:
a0:a0:ae:e9:dd:fb:76:4a:1a:35:c3:a2:84:a2:49:
d6:8e:23:1b:86:68:90:46:b3:14:31:94:54:35:0d:
c9:58:dd:b9:0d:f1:c1:ee:cf:a7:ed:1a:79:db:10:
2c:5c:b9:28:8d:39:af:12:a2:cf:29:80:54:dd:33:
45:f5:c2:c7:64:e5:54:a5:a5:48:0d:9d:f7:69:38:
80:2a:3c:1e:4f:9d:f0:07:12:28:b0:40:72:e4:fa:
09:76:8b:c4:e7:e0:5c:08:69:93:26:be:5f:55:f3:
6c:da:f7:d3:3e:1e:8a:0f:64:e0:98:59:77:09:ff:
8a:b7:c1:aa:81:35:2d:c3:21:1e:b2:2d:05:fe:c7:
45:a0:34:d6:5b:6a:22:ea:6c:8f:72:ec:16:6c:59:
5d:b9:f9:5c:13:6b:84:35:09:59:7f:8d:16:ab:ac:
3a:13:a8:a1:90:50:72:fd:79:d0:8e:59:47:78:c9:
a2:58:a0:ff:f0:d0:d0:51:bc:f4:9e:34:75:41:da:
46:6b:d9:74:6f:2f:f1:ef:8c:f8:19:dc:82:de:d2:
e2:27:b7:28:88:c1:9f:a1:b8:a6:58:ed:62:a1:e7:
c8:43:d3:39:e2:02:3d:83:23:dd:73:19:b6:b9:8a:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:7D:CE:13:73:AD:CA:2C:51:33:3E:E5:DD:60:4C:08:F1:13:51
X509v3 Authority Key Identifier:
keyid:9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/RmN9zhNzrcosUTM-5d1gTAjxE1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.180.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:62:78:00:96:08:8c:c7:8e:ee:64:b5:1d:4e:82:09:c0:d0:
c7:91:90:52:b0:7a:ee:82:52:59:29:50:c1:9b:d1:cb:6c:2d:
f6:61:b2:8c:c2:d9:ec:d9:9a:7d:3c:0a:69:a5:46:7a:ff:92:
07:3e:17:55:1c:60:01:6d:47:a1:4b:b2:85:58:7e:55:70:7d:
96:d0:2d:0f:84:bc:73:b9:02:08:77:0f:aa:6a:d8:a8:7d:1c:
9f:d9:80:47:1c:46:6b:66:61:89:43:f6:7b:04:20:63:56:00:
28:25:34:dc:37:e9:e2:40:61:b6:09:62:3e:86:56:ad:89:45:
55:82:2a:9d:05:cf:fe:b7:70:68:e9:b4:69:90:2f:3f:ba:df:
03:f5:7c:8c:97:c0:57:54:a1:87:dc:6b:49:07:0f:ff:43:f3:
1c:0c:9f:5a:6f:75:4d:bb:99:6b:bb:fb:d2:33:1c:3b:2f:68:
c5:b8:74:9c:f4:dd:9e:0b:b5:9a:10:99:9c:7f:fd:28:4e:cf:
64:f9:83:94:17:12:55:71:4d:32:48:ec:79:8a:cc:15:ca:0f:
c9:0c:5b:e3:3d:d9:d5:f8:95:25:58:9a:d0:26:3c:0d:a5:e1:
94:ba:c7:73:b4:10:68:ae:e8:91:dc:b2:a9:26:3c:2d:b5:ea:
3a:cb:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:28 2025 by rpki-client