Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/m_ulUmZxFygHU_zysCbIgwv6L8c.roa
File: m_ulUmZxFygHU_zysCbIgwv6L8c.roa (raw, json)
Hash identifier: eY0tsJswHojvsFru0ous91epuikbSDpSM/dYv20B5jM=
Subject key identifier: 9B:FB:A5:52:66:71:17:28:07:53:FC:F2:B0:26:C8:83:0B:FA:2F:C7
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2E7A9549461CF0814AF9DDC4E339
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/m_ulUmZxFygHU_zysCbIgwv6L8c.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50242
IP address blocks: 85.248.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2e:7a:95:49:46:1c:f0:81:4a:f9:dd:c4:e3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bfba552667117280753fcf2b026c8830bfa2fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:22:22:9d:ad:f8:b9:a6:ef:d9:40:e8:1c:
fb:e5:ee:02:1f:ca:c1:ec:a4:d6:e1:0a:4e:81:dd:
c9:8d:95:e4:d5:73:a5:59:c1:bc:e7:5b:6c:60:e2:
6c:35:35:9a:15:af:01:3c:30:e6:5d:f7:1d:c1:1b:
c8:28:31:42:7e:97:50:91:9f:20:41:1f:4b:4c:bf:
ca:4c:5c:77:8b:a2:1f:4d:08:91:59:6e:27:7c:7b:
33:1d:51:77:76:95:da:ea:96:24:24:40:da:91:ab:
f1:c9:7b:d9:bb:4b:a7:87:11:62:1e:37:ea:7e:e2:
1e:32:a0:b7:e5:2c:81:89:5d:0a:30:aa:38:c9:64:
84:24:1c:c7:c0:2e:22:ce:60:b8:ce:78:4d:90:ee:
09:71:05:8e:2a:bc:1b:39:2c:02:dc:46:02:e6:20:
bc:17:48:26:34:8f:a0:c1:55:d8:c1:3f:d9:12:5f:
81:d1:01:38:6b:02:59:a8:63:b3:0d:c7:e6:ae:87:
19:d8:49:de:ba:e2:bb:21:c3:f5:28:39:83:7d:18:
90:f5:7d:dd:90:1d:cd:55:c5:51:6c:4b:4c:a0:c4:
1c:27:41:f3:67:1d:2a:76:77:31:8a:0a:01:52:d3:
89:65:64:cf:41:50:e4:1b:d2:70:2a:ea:2c:c5:0d:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FB:A5:52:66:71:17:28:07:53:FC:F2:B0:26:C8:83:0B:FA:2F:C7
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/m_ulUmZxFygHU_zysCbIgwv6L8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.124.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0e:97:b0:b5:b3:90:c7:66:b9:43:0e:a7:d2:d7:8c:55:04:
84:f1:66:51:61:c6:68:11:26:44:65:21:b4:ec:19:fd:9f:4d:
d3:77:58:06:12:09:71:f5:80:92:2b:45:36:0e:53:59:83:f3:
73:0b:35:88:77:20:94:31:aa:97:82:b1:55:0f:3f:d1:88:f3:
96:5b:fb:e1:27:78:2e:a6:b9:f8:c7:bc:57:8c:fa:16:f6:35:
2c:19:38:cb:c8:20:9f:74:1f:37:2a:d4:75:a8:54:d4:e4:dc:
0a:87:9b:4a:c4:86:95:ac:86:34:cd:7d:30:ba:a3:a7:2a:f2:
ee:7f:d9:66:31:13:86:29:ed:46:08:70:99:30:f1:0c:b3:7a:
e3:ca:89:9f:db:8e:91:de:2d:12:01:ac:0d:cf:4d:3d:3e:13:
dc:02:4b:aa:87:aa:0b:55:0e:6b:bd:9d:bc:fb:a6:7f:76:a6:
21:6d:e0:06:b5:8c:fd:85:c4:1f:11:84:aa:84:01:b9:32:68:
1d:fe:fd:40:58:84:ec:8d:86:e3:b3:8e:1d:73:d6:34:d2:eb:
63:00:d1:f0:ae:f7:43:48:43:02:56:c2:c0:7b:c2:5b:14:c9:
42:21:ae:e6:ae:bf:94:3c:fd:55:80:ed:cc:13:16:56:9f:60:
ea:f1:89:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:53 2025 by rpki-client