Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wMNls6aGPElAO-q1J1yhX2YjyMw.roa
File: wMNls6aGPElAO-q1J1yhX2YjyMw.roa (raw, json)
Hash identifier: T5LNkfUUjSqO9ZymGqQoAIJA3aG+G/WQ2mWR/OBaa5g=
Subject key identifier: C0:C3:65:B3:A6:86:3C:49:40:3B:EA:B5:27:5C:A1:5F:66:23:C8:CC
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0195812FABB171463D26D973CE325719DBD2
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wMNls6aGPElAO-q1J1yhX2YjyMw.roa
Signing time: Mon 10 Mar 2025 17:52:19 +0000
ROA not before: Mon 10 Mar 2025 17:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50214
IP address blocks: 45.93.62.0/24 maxlen: 24
45.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:2f:ab:b1:71:46:3d:26:d9:73:ce:32:57:19:db:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Mar 10 17:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0c365b3a6863c49403beab5275ca15f6623c8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:9d:16:96:7f:e6:8e:b2:c6:56:b7:8d:e6:
27:a9:e3:50:99:82:48:02:e9:5e:72:8a:32:fc:dc:
42:e6:7a:76:1e:f9:ce:e1:3c:cd:20:19:a4:82:bb:
be:05:98:bf:0c:c8:24:07:a2:96:39:f5:bd:5a:34:
dd:92:d3:6f:74:4b:32:ea:4e:98:bb:9b:b1:61:64:
fb:f7:fd:43:2b:f4:40:ed:0d:8a:2a:c7:9e:5c:e0:
8d:7a:b8:fa:2c:01:8c:34:4f:4f:66:b8:f0:96:34:
3b:aa:ea:46:b1:48:b3:43:73:f1:cc:af:24:9e:87:
1f:cb:eb:d4:db:74:7a:a3:9e:ea:58:16:d4:d5:14:
af:66:a6:7a:4c:8d:03:b1:fc:e0:26:ed:86:6d:52:
c3:b0:9e:00:3c:e6:f6:c2:20:59:0e:9c:e3:74:24:
20:e5:04:96:a6:bf:ee:e2:17:ba:1f:d2:cb:89:bf:
c1:62:61:5e:df:dc:62:c2:89:19:61:e7:27:fa:3c:
22:f4:30:3b:61:65:34:8f:48:5b:bc:a3:3c:99:f3:
5c:aa:84:38:7e:63:d7:3c:a7:43:f7:31:9c:df:0e:
17:87:2d:c2:0e:2f:3f:11:a5:a7:32:54:75:b2:50:
c6:7d:40:f3:30:5a:51:fa:a7:a4:53:3e:4d:aa:1c:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C3:65:B3:A6:86:3C:49:40:3B:EA:B5:27:5C:A1:5F:66:23:C8:CC
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wMNls6aGPElAO-q1J1yhX2YjyMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.62.0/23
Signature Algorithm: sha256WithRSAEncryption
17:df:d0:36:85:e1:19:19:c2:c2:8d:48:7e:6a:b9:1b:bd:d1:
85:77:35:4c:c2:cc:67:d1:6b:96:97:3b:8b:5e:b6:95:71:c9:
41:40:fb:18:97:fe:8e:7a:e5:51:2c:5b:4c:46:84:1f:e5:ff:
a7:a1:c3:fe:16:9f:9a:1a:48:78:ae:c6:27:bf:e3:34:ef:51:
5c:f2:b7:fc:de:cf:ac:98:44:62:54:51:31:32:10:7a:e8:98:
8d:ab:1d:ff:a2:ec:16:e3:b2:5d:19:b1:b5:1b:3a:46:3d:74:
86:e6:1d:b9:7d:8f:27:bd:11:e4:c4:e0:da:9a:ff:06:d0:ff:
06:5f:bc:a9:a3:34:bc:6f:f9:8a:81:7a:7f:bc:5d:f3:1e:ad:
35:14:2f:44:b3:82:c7:fc:e2:9d:c6:d6:b7:d8:e1:d9:df:9e:
bf:9e:37:49:28:09:b4:93:e5:ec:b3:a7:e2:7b:db:27:b2:1e:
86:e3:43:6f:2e:72:f5:8e:f4:d9:7a:7f:5d:83:cb:06:c8:08:
ab:30:0a:5d:eb:25:53:0c:fa:4d:29:ca:35:62:6b:bd:7b:67:
06:93:85:ec:88:f6:9a:69:a3:ac:f9:a2:2d:9c:84:fa:17:86:
07:da:c4:af:14:a7:f7:d8:07:57:b3:e5:fc:5b:7f:de:aa:7d:
0b:c7:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:33:30 2025 by rpki-client