Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/mNAF2VYNOm40TevDLixep8OByyQ.roa
File: mNAF2VYNOm40TevDLixep8OByyQ.roa (raw, json)
Hash identifier: IS1EBlMWFeP4mcyqN/4gcodeTTb5ux4e/60FBp3gFB0=
Subject key identifier: 98:D0:05:D9:56:0D:3A:6E:34:4D:EB:C3:2E:2C:5E:A7:C3:81:CB:24
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 0196251E3867DEBEDA5B623383589B032CAA
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/mNAF2VYNOm40TevDLixep8OByyQ.roa
Signing time: Fri 11 Apr 2025 13:50:59 +0000
ROA not before: Fri 11 Apr 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15415
IP address blocks: 185.211.102.0/24 maxlen: 24
185.211.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:1e:38:67:de:be:da:5b:62:33:83:58:9b:03:2c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Apr 11 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98d005d9560d3a6e344debc32e2c5ea7c381cb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:37:7e:84:c6:73:ca:5a:c0:d6:28:85:a1:
0c:51:38:40:27:6d:ce:d6:fe:b0:13:8f:c4:41:ae:
7c:c8:dd:6e:f1:22:05:c7:6c:96:e1:36:fe:1e:42:
1d:35:bd:41:71:2e:e0:21:66:5e:5c:16:78:74:b4:
68:45:1d:7e:6c:49:3b:a5:e6:a5:5c:ab:36:48:2b:
86:a7:05:87:47:59:64:37:d2:10:df:2d:5c:4b:86:
41:5f:df:e7:d0:8c:c9:28:0b:ff:2f:99:cc:7e:23:
fc:63:2b:42:af:96:c5:6b:07:a8:8a:3b:6f:2e:66:
d2:69:12:9a:50:55:6a:b1:4e:54:ff:24:ba:cd:43:
07:df:33:f0:25:cd:65:f6:97:13:be:36:8a:6b:b4:
da:35:b8:db:89:27:ef:04:ed:16:52:36:16:09:21:
43:31:62:11:4e:bb:c8:21:35:f7:ae:f8:39:5c:4e:
2f:eb:b8:97:4d:12:0f:14:23:14:5b:5e:e1:21:f1:
c8:d9:9a:c2:55:b3:d8:49:dd:bf:37:6e:b8:fe:e4:
93:66:89:f2:7b:64:34:fe:14:d2:f9:cb:f8:5d:a0:
75:56:7a:04:80:0d:ba:4a:63:1d:cf:cf:aa:88:c8:
2b:c6:7c:f3:f4:38:cf:6c:15:d1:74:d8:72:97:71:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D0:05:D9:56:0D:3A:6E:34:4D:EB:C3:2E:2C:5E:A7:C3:81:CB:24
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/mNAF2VYNOm40TevDLixep8OByyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.102.0/23
Signature Algorithm: sha256WithRSAEncryption
37:e4:1f:b1:28:e0:8c:0a:a2:e0:0b:da:5b:4f:cb:7a:d3:ac:
27:ea:7b:bb:a7:32:f2:c5:5a:81:04:41:1b:6f:6f:f8:93:8b:
f1:bf:74:0b:62:f0:51:06:ad:9e:84:65:e1:55:cf:de:73:1c:
a7:6e:12:57:86:cc:dc:2f:c8:d0:ad:ab:cb:86:31:05:03:07:
37:e2:18:0d:44:bf:1a:3c:67:14:9b:0c:60:a7:fe:ee:5d:42:
58:ab:6c:08:ac:3a:d3:74:07:51:77:39:dc:7e:df:fa:22:94:
5b:ee:e6:2c:06:50:76:f7:d3:7c:f6:23:11:71:49:cc:fe:45:
0c:c8:29:fb:d1:32:a6:d7:42:08:42:37:47:34:83:ef:15:58:
a7:d0:e7:d4:06:49:02:03:62:04:2d:86:a5:1a:fd:09:98:e4:
f1:ff:ef:3f:47:e3:a7:20:3f:d5:d2:c5:89:96:35:f3:52:92:
b7:71:6c:13:42:8b:d1:69:44:f7:b7:4c:8c:f9:41:1b:61:94:
3a:de:71:6a:76:22:0e:15:17:b8:b9:ea:0a:eb:eb:90:a2:4f:
8f:50:29:0a:35:62:c5:63:72:31:fd:26:f8:6c:75:71:53:f0:
7b:6f:3e:12:fb:89:38:16:7c:a7:a0:11:92:5c:7b:29:00:aa:
d0:f8:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:26:58 2025 by rpki-client