Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/mVTx8X7zW9-jF_MuhkLfqeZLvKg.roa
File: mVTx8X7zW9-jF_MuhkLfqeZLvKg.roa (raw, json)
Hash identifier: tYbEebrUyUiI4ejPIzbtFxeT7l12ooRdzaX7lTItoII=
Subject key identifier: 99:54:F1:F1:7E:F3:5B:DF:A3:17:F3:2E:86:42:DF:A9:E6:4B:BC:A8
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 019423D79EA932AFD9475B800D392FFAEDC5
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/mVTx8X7zW9-jF_MuhkLfqeZLvKg.roa
Signing time: Wed 01 Jan 2025 21:48:40 +0000
ROA not before: Wed 01 Jan 2025 21:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 46.28.232.0/24 maxlen: 24
46.28.238.0/24 maxlen: 24
46.28.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:9e:a9:32:af:d9:47:5b:80:0d:39:2f:fa:ed:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Jan 1 21:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9954f1f17ef35bdfa317f32e8642dfa9e64bbca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:88:80:1b:25:8a:4b:96:28:c7:11:11:5e:
6b:74:18:fe:96:7f:09:95:50:13:4e:bd:ef:73:85:
54:37:43:ec:06:e2:8b:3d:19:92:7c:0c:70:3f:7c:
e7:b6:d6:84:e4:25:02:72:85:6b:f4:83:93:b9:0e:
b1:0f:18:b3:5c:c8:e3:d2:2e:7c:b6:fe:fd:27:eb:
60:7d:4b:1d:49:dc:ef:a2:85:3f:74:0d:e7:81:d8:
e7:8d:ae:70:e7:d4:81:87:5a:8e:39:9b:3c:3b:40:
89:db:83:71:f2:5e:d1:18:0c:24:88:c9:11:ab:99:
8f:ac:c2:eb:4b:a5:2d:1a:ee:67:8f:9c:93:5c:44:
c8:65:1f:26:e9:91:60:f9:e0:7b:78:32:b9:ec:84:
a7:a1:22:f3:43:a9:d1:52:08:de:04:b2:63:d8:13:
2c:21:d4:30:b5:68:5e:0e:87:e3:bc:76:b3:a1:28:
21:51:f2:e9:d9:32:07:f4:5d:22:67:3d:75:ea:d7:
f0:98:51:06:5a:ac:c8:1f:f6:e6:bb:d1:86:8e:87:
3c:f5:d8:47:34:e6:55:2b:42:95:0f:0c:48:1f:27:
ea:a1:fc:e9:4d:50:f1:d2:88:94:38:15:b9:aa:bb:
56:73:9d:80:e9:57:f2:43:6e:ab:ff:fa:6e:0b:d6:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:F1:F1:7E:F3:5B:DF:A3:17:F3:2E:86:42:DF:A9:E6:4B:BC:A8
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/mVTx8X7zW9-jF_MuhkLfqeZLvKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.232.0/24
46.28.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:8b:6c:86:2d:d6:be:9d:64:6e:f1:94:ce:2d:57:c5:ad:6e:
31:e8:b1:27:f5:30:a0:c0:84:3f:99:c1:72:4b:93:cf:ee:6d:
d2:b1:ce:f6:18:80:f1:f5:05:5d:0f:7f:6e:03:20:4b:17:29:
69:84:3e:21:1c:5c:cb:21:18:ff:7c:d4:4f:f9:1e:14:e5:13:
47:70:5e:7d:30:a6:34:2e:e9:05:d8:67:96:27:87:d5:77:17:
d1:da:18:d3:ff:54:59:30:81:64:50:82:0d:cb:c3:29:50:6d:
e1:94:c9:5a:77:0f:29:d4:13:f2:0f:87:7c:f1:5e:ec:45:43:
a8:b8:79:a7:d3:fc:fe:7d:d7:2b:ba:6b:af:3e:91:0c:13:a2:
09:86:f9:47:cd:69:33:74:35:ea:9a:e1:94:bd:6f:47:59:c5:
c6:39:20:03:2c:81:e5:9b:95:b8:6b:bc:d9:ef:65:6d:7c:aa:
b9:1f:ad:19:a0:8f:89:a3:2f:a1:6c:d6:05:03:6f:41:ae:9d:
f4:b2:29:c0:61:11:9a:79:99:a0:67:4c:27:d2:c5:15:5a:d0:
cf:93:49:69:1c:e7:de:63:ee:59:dc:83:e5:16:96:0b:b5:26:
bc:91:18:77:8f:1e:c8:20:40:77:40:d7:79:f6:2f:90:94:bc:
ee:7e:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:19 2025 by rpki-client