Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/mG8mM9hAi5tyBvOZ0k4XQ9eDC3w.roa
File: mG8mM9hAi5tyBvOZ0k4XQ9eDC3w.roa (raw, json)
Hash identifier: i28NXYaU9BIfTzGbAKxV6YptlyKNtJ+eMa7uooSMYKw=
Subject key identifier: 98:6F:26:33:D8:40:8B:9B:72:06:F3:99:D2:4E:17:43:D7:83:0B:7C
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01946F8DB9B75A18116A3441FFF825874255
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/mG8mM9hAi5tyBvOZ0k4XQ9eDC3w.roa
Signing time: Thu 16 Jan 2025 14:39:06 +0000
ROA not before: Thu 16 Jan 2025 14:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 82.206.48.0/21 maxlen: 24
82.206.96.0/19 maxlen: 19
82.206.96.0/21 maxlen: 24
82.206.104.0/21 maxlen: 24
82.206.112.0/21 maxlen: 24
82.206.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:8d:b9:b7:5a:18:11:6a:34:41:ff:f8:25:87:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 16 14:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=986f2633d8408b9b7206f399d24e1743d7830b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:c6:2f:05:20:f2:99:c6:57:fd:95:ce:d0:
76:8c:7b:83:a5:1d:c5:98:76:6d:b3:f2:e1:e5:8d:
7a:90:c5:45:14:3b:c2:90:f7:5b:13:b4:00:10:b6:
1e:26:21:c8:a8:38:41:b2:5d:47:0d:4c:77:ff:28:
b2:95:a7:7d:0f:99:8a:70:99:18:72:f4:d7:ee:66:
b1:d4:8e:9f:70:2a:fe:98:97:aa:e4:f7:a8:d7:bf:
fc:b0:cd:f6:50:89:b8:63:62:cb:1e:18:01:89:6c:
05:70:1d:56:a7:ed:c1:d1:6d:7a:4f:7a:89:0c:68:
1a:4a:67:89:a6:db:45:00:c0:be:7f:5d:ab:10:6c:
eb:30:68:e1:5c:54:1c:47:ea:92:5e:4d:2a:c3:62:
a6:65:21:2c:c0:c0:e1:41:9c:53:16:13:f5:18:02:
a8:52:2e:cd:63:d8:cf:c3:f0:69:0b:ea:84:bf:cf:
be:ad:6a:d8:8e:45:9a:21:3c:78:71:fb:41:cf:45:
a7:74:af:1d:c4:aa:c6:6e:d5:1a:ec:79:b6:66:0d:
db:49:78:10:81:9e:5b:ed:1e:6c:68:eb:0b:57:93:
8b:cb:37:8f:9f:05:2e:46:65:b7:b7:fe:04:c5:4a:
7b:8c:f2:fc:73:67:38:ad:8b:23:75:d8:67:92:5f:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6F:26:33:D8:40:8B:9B:72:06:F3:99:D2:4E:17:43:D7:83:0B:7C
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/mG8mM9hAi5tyBvOZ0k4XQ9eDC3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.48.0/21
82.206.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:69:5a:93:bd:ac:3d:b2:ac:13:3c:82:26:d9:11:5c:56:92:
f6:ea:f7:30:2c:1f:3c:9b:0c:34:f5:60:28:43:76:d0:54:68:
ba:29:4f:cf:76:2c:7d:a1:ee:50:4c:ec:ea:3f:f0:45:eb:db:
4f:a4:9d:87:d7:45:b1:d4:04:9a:9b:35:f1:50:a4:be:38:7f:
ad:bf:d0:48:5c:79:6c:2f:ca:c8:bc:3a:99:8d:d0:15:93:9e:
3c:0e:d1:ed:b2:e9:33:46:5e:93:21:76:ce:f8:36:81:43:ec:
0a:ba:75:1b:98:b5:21:7d:81:30:ed:d9:67:43:e9:cd:31:94:
be:c2:f8:c5:31:65:77:43:63:76:07:e4:48:15:db:b3:e1:3b:
e4:a1:32:4d:4d:1f:7e:47:4d:a1:d6:7e:54:77:45:a3:4d:eb:
d9:52:fc:ab:e1:e4:a6:dd:a5:f3:06:35:86:48:66:40:c1:2e:
9a:cc:50:60:f1:a8:fc:b7:d5:69:bf:70:8d:6b:65:e3:42:9a:
08:01:c2:ab:1f:fe:b0:e7:ae:e1:a3:29:e5:c9:c0:bf:22:5c:
41:90:6a:31:3e:29:87:33:3e:a0:68:e1:0f:69:c0:55:bf:76:
cc:47:be:fd:79:83:d0:8d:df:be:31:8e:d7:b5:58:0a:1c:d8:
85:2b:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:15 2025 by rpki-client