Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/mao1uadVCeFMM8wryeWY5BR-7f0.roa
File: mao1uadVCeFMM8wryeWY5BR-7f0.roa (raw, json)
Hash identifier: O0Lx4ebG9mRcmgsWCpFUzVMc+24C/UMOL6lwkcukVPA=
Subject key identifier: 99:AA:35:B9:A7:55:09:E1:4C:33:CC:2B:C9:E5:98:E4:14:7E:ED:FD
Certificate issuer: /CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Certificate serial: 0195CCA5C153715411F64C7FD64445E20A04
Authority key identifier: 79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/mao1uadVCeFMM8wryeWY5BR-7f0.roa
Signing time: Tue 25 Mar 2025 09:32:49 +0000
ROA not before: Tue 25 Mar 2025 09:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 195.95.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:a5:c1:53:71:54:11:f6:4c:7f:d6:44:45:e2:0a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Validity
Not Before: Mar 25 09:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99aa35b9a75509e14c33cc2bc9e598e4147eedfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:d1:97:6e:d1:01:66:f3:b2:9c:a5:63:2f:
b7:51:44:37:8e:01:fe:0e:54:4a:b6:11:f0:a6:34:
f8:76:4b:68:76:fd:19:93:97:e5:41:73:dc:ab:a3:
44:e4:fc:dc:d4:4c:55:61:e7:b6:88:22:fa:0f:72:
7e:63:32:b2:27:69:6b:83:87:80:a1:b4:fa:45:c7:
8b:7a:2d:7d:50:0c:8a:91:7c:bf:76:15:c2:ba:8d:
38:c9:a5:23:6f:b9:53:ca:d0:9f:ab:51:59:72:c5:
5e:88:f6:65:71:dd:d4:e9:7b:c5:1d:55:31:3b:9d:
e6:9e:ce:fd:35:8d:f3:ea:de:7e:19:c2:61:c4:db:
a4:12:7d:cc:bd:3c:4f:17:25:d9:f8:89:11:99:f2:
d8:51:ab:89:e3:83:c0:e5:86:ae:45:23:4b:a3:88:
be:eb:bf:9a:28:20:94:a6:80:86:ff:81:7d:48:e6:
3f:20:b7:7c:57:97:bc:aa:46:67:fc:d0:45:2a:18:
f4:a7:7c:0c:b3:b6:f9:24:4b:9e:40:f5:b6:28:4c:
a3:46:a6:13:34:c3:e6:6a:ed:96:0a:3f:53:7b:61:
11:df:f4:f6:ff:ff:e7:f9:8f:6f:61:d5:01:87:e8:
75:bb:40:61:99:8d:ac:12:11:a8:7f:c4:f3:fd:fb:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:35:B9:A7:55:09:E1:4C:33:CC:2B:C9:E5:98:E4:14:7E:ED:FD
X509v3 Authority Key Identifier:
keyid:79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/mao1uadVCeFMM8wryeWY5BR-7f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.245.0/24
Signature Algorithm: sha256WithRSAEncryption
80:df:74:e3:6e:04:be:4a:c2:52:1d:c1:fa:39:45:c0:f5:8d:
a1:c2:44:f9:5a:38:48:6d:45:75:3e:33:fa:5e:fc:ca:45:80:
4e:b7:63:65:7b:24:5d:bd:70:73:bb:33:7a:fe:61:76:ce:49:
f9:55:78:f2:97:d0:40:fb:4f:ec:f9:41:6b:17:0b:d0:d9:13:
cc:e4:46:7a:f0:71:cb:0f:07:57:d3:35:b6:a7:0b:b9:67:e2:
70:9b:63:ad:50:d6:42:a5:c8:70:c2:65:c9:67:11:85:75:9a:
a2:30:e6:4d:e6:30:32:a5:20:3e:e7:ee:fc:d2:34:07:2b:b5:
af:72:4b:1d:55:39:bd:6e:86:82:60:07:04:11:ab:9c:25:6f:
1c:f3:40:dd:84:5c:c6:7d:8d:a3:cb:b7:3b:e4:36:4e:b5:df:
39:61:de:eb:b5:22:0f:2c:3a:37:6d:6c:50:ba:f2:c3:c0:3b:
f2:32:e7:2d:7d:37:f3:66:d0:ee:b0:16:90:67:9a:3c:eb:51:
e9:06:df:85:47:62:f6:45:c5:f4:2c:dc:cd:49:79:f2:30:2f:
d1:8f:c6:6a:e7:50:16:3c:a7:8a:4a:bd:a9:ca:9a:2c:49:dd:
45:57:30:29:04:cd:fc:d6:52:bc:a2:ac:f0:fb:d0:4a:c2:32:
06:54:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:36 2025 by rpki-client