Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa
File: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (raw, json)
Hash identifier: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=
Subject key identifier: 9A:D1:21:5D:5B:2A:E2:D4:2E:D9:0F:66:20:3A:31:C5:6F:08:61:9C
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019420D6628C76EE0E0B6152EF73763E937D
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396426
IP address blocks: 185.101.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:62:8c:76:ee:0e:0b:61:52:ef:73:76:3e:93:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ad1215d5b2ae2d42ed90f66203a31c56f08619c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:b5:6b:0a:8a:9c:37:6e:d4:82:d4:67:bf:
51:e2:cf:22:a5:5c:65:36:da:c6:ed:50:76:fc:51:
e7:45:52:f5:ad:b8:76:2b:5f:a6:cd:31:1c:a4:ce:
8c:25:55:54:1b:b9:19:0a:1a:3a:69:98:bc:0c:98:
65:e7:32:de:93:05:3a:27:f7:c5:db:12:2e:b1:50:
3c:20:10:b3:bf:c9:40:7c:79:e8:0f:7f:53:5b:28:
b3:eb:8c:cd:6f:9a:06:0b:ea:73:12:c8:83:bf:cc:
47:10:8f:05:28:22:a2:cd:90:a0:b2:4d:a9:15:67:
52:00:31:ef:8b:9a:7e:f7:d0:ff:1c:97:f0:8c:34:
80:f0:b2:89:e8:dd:55:9b:6a:e0:57:c0:37:d7:ea:
18:4d:00:57:13:d9:22:e4:74:ba:ac:ca:12:09:45:
a1:be:23:77:d8:23:12:b1:a7:ad:d3:28:2c:42:b8:
d1:c3:c3:c2:f2:67:d0:91:35:9f:b0:0e:ae:95:2e:
ad:bc:5b:83:24:47:11:b1:3f:5e:8e:d7:0b:93:ec:
aa:47:da:b5:be:b5:90:5e:c5:f1:20:f8:88:ec:1e:
a4:5d:6c:78:fb:fc:4f:9a:bb:ae:82:9a:45:1f:28:
82:2a:0c:1c:2c:7c:d1:64:91:83:22:bf:55:fd:3e:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D1:21:5D:5B:2A:E2:D4:2E:D9:0F:66:20:3A:31:C5:6F:08:61:9C
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e6:88:1d:7a:55:bc:9f:c2:52:ec:bf:d5:c8:8a:39:20:3c:
59:7e:22:27:ff:b0:ea:f8:af:41:bc:d1:6d:c8:92:e7:3f:6b:
03:f6:85:c3:18:00:17:2f:44:22:25:87:0b:c1:99:87:77:54:
62:29:c6:fa:5d:2e:5b:fc:f6:d4:1c:ed:96:cc:88:07:cf:91:
03:6b:c6:c5:1a:f8:ab:a8:87:6f:52:fd:c6:ef:70:47:3c:b7:
db:2a:ea:3a:80:bb:51:51:7c:12:ff:80:b7:d7:76:e3:bd:b8:
68:08:75:ef:e6:82:31:c1:50:f1:1f:6b:b8:f3:be:74:b7:47:
12:90:1a:1b:3c:4c:d1:1f:60:1e:a2:0c:a2:de:49:89:2f:9e:
ff:b3:fa:01:85:8c:a2:f3:f5:cd:4a:b1:c3:ae:c0:34:4d:67:
1a:01:10:83:58:90:26:ab:95:1b:0c:ba:6f:8d:3e:f0:0b:86:
fe:91:58:10:53:0b:51:bc:c0:65:60:6d:94:9c:34:26:8b:c6:
16:74:25:29:0a:81:f1:ed:d7:81:75:9e:79:a1:82:b7:e2:cc:
e6:fb:79:6b:5c:ab:4b:09:55:95:33:91:5f:7b:b5:ad:ba:e2:
79:8d:82:02:98:9f:74:91:f3:7a:4f:18:39:7f:89:4f:7e:03:
69:f3:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:50 2025 by rpki-client