Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/m11OWXhefXzJ44FLBlsWKfsOtOo.roa
File: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (raw, json)
Hash identifier: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=
Subject key identifier: 9B:5D:4E:59:78:5E:7D:7C:C9:E3:81:4B:06:5B:16:29:FB:0E:B4:EA
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 0194258EF00825D10F21CE0F41A16567B689
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/m11OWXhefXzJ44FLBlsWKfsOtOo.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13189
IP address blocks: 195.35.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f0:08:25:d1:0f:21:ce:0f:41:a1:65:67:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5d4e59785e7d7cc9e3814b065b1629fb0eb4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:e6:35:0f:bc:77:22:b2:d9:8f:08:bf:9c:
cd:20:1c:2b:59:72:f6:cf:c7:25:e5:4b:56:af:77:
1b:3d:6c:4c:8c:c6:f7:70:0c:c8:4f:e9:81:0f:39:
b3:29:3e:93:19:fd:66:b1:ce:d1:a0:db:72:fd:46:
0c:c0:00:f3:6c:cd:b1:af:af:27:10:91:a6:59:3c:
36:b6:5b:05:25:f6:8b:7a:f1:0c:b3:93:6c:98:e2:
a2:07:04:ac:3d:47:0d:f3:ea:1c:d9:a0:71:30:a0:
e3:8d:0d:54:70:45:de:b2:4b:ed:e1:92:67:3a:65:
6c:55:f7:d7:07:0a:63:3b:9b:18:73:46:51:eb:79:
9a:d9:0d:d1:0f:d1:c5:86:71:73:b6:43:21:6a:f1:
93:d5:46:1e:fd:38:05:b6:36:ce:be:03:4b:13:9c:
6e:4d:e1:50:42:30:93:e3:26:89:02:54:4d:1f:39:
22:30:74:f5:5b:60:f8:9f:6f:7b:9d:c4:f8:86:2f:
31:2f:3d:1e:23:0f:60:c4:4f:3b:c7:60:f1:3c:63:
4a:1f:87:73:4b:9b:c6:95:69:3b:cd:f1:bf:9d:80:
bf:d5:45:7b:ff:f6:14:9c:1a:75:a2:1e:e3:dc:7e:
15:e5:23:c9:30:f5:dd:22:e7:f0:3f:77:25:d2:fa:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5D:4E:59:78:5E:7D:7C:C9:E3:81:4B:06:5B:16:29:FB:0E:B4:EA
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/m11OWXhefXzJ44FLBlsWKfsOtOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.101.0/24
Signature Algorithm: sha256WithRSAEncryption
70:93:1a:d5:cc:db:9d:51:54:4d:e0:d6:df:44:86:ad:13:17:
db:f0:d7:09:6b:46:0a:d8:99:0a:21:b7:71:19:1e:76:ba:78:
40:83:74:c1:92:fc:c1:51:9f:c8:02:23:74:a6:4d:7a:43:5e:
38:12:cb:6c:1e:ad:1e:74:3c:f9:73:1f:5c:41:0a:5f:8a:2b:
45:1a:e6:45:c0:c6:7f:40:b4:43:47:78:32:7a:18:69:1a:eb:
f5:d6:53:4a:fc:e3:0c:93:b6:e6:54:18:eb:00:bf:0b:d7:bc:
1d:69:f1:cc:7b:e5:d8:4f:4f:c3:56:31:69:03:4f:04:88:15:
21:45:93:06:76:73:e5:d1:96:fd:7e:9c:17:7a:8d:4e:77:97:
9b:ec:62:77:ba:c9:89:61:5c:20:48:78:2f:cd:3d:ae:db:ec:
ea:3c:35:34:b7:85:46:c0:b9:6c:f0:f8:19:9e:30:21:b6:5e:
14:6e:15:14:3c:8a:a0:98:b3:63:50:af:b2:24:a5:8f:c2:03:
3b:2f:3f:4c:fe:66:81:21:b4:81:2e:86:5c:de:8a:5e:eb:ee:
f6:98:fb:5e:d9:a9:9f:10:06:7f:bc:de:92:dc:ac:b9:e2:c3:
80:26:4c:cb:31:ff:27:67:b4:e3:a8:30:a6:85:46:a7:e7:bf:
ef:80:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:02 2025 by rpki-client