Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/1-mam0MNYijlsUMBvUuzN8saQbSA.roa
File: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (raw, json)
Hash identifier: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=
Subject key identifier: FA:66:A6:D0:C3:58:8A:39:6C:50:C0:6F:52:EC:CD:F2:C6:90:6D:20
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 019422FC0D3364234A805FC78860C674F8A6
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/1-mam0MNYijlsUMBvUuzN8saQbSA.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197350
IP address blocks: 185.90.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0d:33:64:23:4a:80:5f:c7:88:60:c6:74:f8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa66a6d0c3588a396c50c06f52eccdf2c6906d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:86:53:62:94:15:90:20:ba:a2:89:3c:2b:
c0:48:f2:10:c8:ac:e3:e9:a7:e9:43:89:54:00:0f:
30:ec:9a:c0:b7:b8:cc:62:f6:0d:56:e5:c9:b4:0d:
a0:86:ea:86:41:2a:04:81:e3:6b:c3:08:e7:24:b6:
ca:be:9c:c9:40:41:4b:72:e8:a3:d6:48:5e:5e:1d:
4d:53:e1:61:0e:26:63:ed:7a:c2:ca:3e:96:c1:ee:
60:fa:d8:06:48:42:c5:dd:77:c3:5e:3e:a9:48:c0:
a5:de:a5:08:49:2f:65:9f:f0:51:89:4b:b9:fa:c8:
8f:36:21:64:00:50:28:ef:a0:a3:dd:49:95:d1:9f:
a4:8f:61:b0:01:32:88:02:5d:34:48:4a:ce:b8:d5:
47:b3:08:83:62:bd:fd:21:a1:83:88:c2:ef:a3:72:
f4:c0:09:78:cc:74:a0:96:9e:76:26:43:4c:85:d2:
c0:0e:d6:62:ba:1d:d1:0e:d4:b1:4f:0c:c4:9f:b0:
2b:df:cb:85:bd:65:07:34:14:49:90:0c:93:de:bd:
4b:c9:bc:61:cf:3d:4d:a1:98:4e:85:cf:63:67:fe:
f2:b5:7f:0e:08:c2:5c:d4:3b:ef:5a:ee:41:24:22:
97:ef:89:32:9d:81:14:9b:3b:90:50:b4:ba:3d:ab:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:66:A6:D0:C3:58:8A:39:6C:50:C0:6F:52:EC:CD:F2:C6:90:6D:20
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/1-mam0MNYijlsUMBvUuzN8saQbSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:fc:5a:1c:5a:c6:69:44:d0:98:dc:96:08:d3:3a:4f:f0:1d:
9f:f2:3d:e4:ca:db:25:41:78:74:75:1f:a8:65:d6:b2:0f:69:
42:9b:79:04:ca:c8:4a:53:a9:83:1e:24:46:80:95:8d:0a:b2:
59:37:01:1a:4c:18:33:18:88:80:a8:41:c4:61:2b:80:a8:79:
96:bf:37:ff:d8:84:2b:2a:21:c3:f9:f8:1e:07:4a:f4:1a:63:
a4:08:6a:59:ee:6e:c7:67:9d:7e:80:84:a8:1d:99:70:dd:9f:
63:83:04:fc:95:05:97:59:28:4b:fb:94:65:7b:ac:90:88:87:
d4:29:bc:2e:ce:89:04:82:fb:34:b6:a4:94:b5:8f:eb:fc:68:
1b:9d:d2:7d:db:b7:23:3c:c7:f6:74:d6:a5:ae:cf:21:d3:f5:
6b:66:9a:f4:36:18:04:74:1b:f7:8f:06:62:75:4f:a2:ca:e4:
57:2e:00:71:02:71:2d:9f:d4:15:14:64:c9:30:15:05:50:33:
64:51:1f:f0:9a:c1:05:0f:ec:6d:4a:8e:0c:e2:74:38:f8:8c:
f8:aa:27:4b:e9:90:05:1b:b2:46:30:c5:5c:a7:5e:c7:e1:6e:
69:51:4c:31:90:45:3c:2f:6d:7a:61:84:fd:c2:0b:26:b0:21:
95:83:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:24:08 2025 by rpki-client