Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mX4YQjIkKu6HiRo2ABaA3BLcYrk.roa
File: mX4YQjIkKu6HiRo2ABaA3BLcYrk.roa (raw, json)
Hash identifier: /naJn6ud8gAhuc5cIlXNZBtLpGR9W8Bq0PuFFxhBhLs=
Subject key identifier: 99:7E:18:42:32:24:2A:EE:87:89:1A:36:00:16:80:DC:12:DC:62:B9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7B13D829E3BFE71F8108D90231AA
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mX4YQjIkKu6HiRo2ABaA3BLcYrk.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140042
IP address blocks: 46.249.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7b:13:d8:29:e3:bf:e7:1f:81:08:d9:02:31:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=997e184232242aee87891a36001680dc12dc62b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:10:cd:5a:c2:a4:b3:15:bd:69:e3:ad:d1:
7f:19:9c:89:70:c2:e6:fe:52:1f:60:9a:90:61:47:
b6:a9:9c:12:70:65:c5:52:5a:bf:dd:3e:be:f3:a6:
f5:40:95:e9:b7:5f:54:c3:0d:92:11:56:08:b9:1a:
2f:0d:0b:9b:07:5f:ba:db:dc:07:5f:da:5e:8d:47:
82:2f:e5:5b:13:bf:50:56:4e:83:1d:e7:00:b5:ad:
a6:d6:7d:eb:22:cb:39:7c:4b:01:cf:15:2d:90:b8:
aa:3a:9b:be:2d:eb:2f:de:52:6e:7a:d7:99:9c:2c:
7f:b0:a2:d8:cf:9b:50:6e:ee:ac:98:ce:46:3f:a7:
ba:8e:c3:a5:94:a5:6e:05:98:4b:33:a8:5d:95:32:
7b:ae:ed:1d:f5:96:1a:81:16:63:88:1e:4c:d4:ef:
58:e7:08:1e:94:2a:96:84:fd:98:6b:04:ac:59:f9:
7d:50:77:53:23:de:69:8d:e6:db:fd:df:19:81:e2:
fe:3d:ff:8a:60:0a:17:b3:1f:de:ad:4b:cd:3e:a4:
22:21:bb:fe:08:ad:6d:8a:cd:ee:5f:5b:6e:d6:aa:
42:d7:02:57:91:de:a1:fe:0b:56:e7:a4:44:1b:9b:
7a:85:e5:17:e8:f7:3a:52:3f:c5:9d:d1:37:a8:9b:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:18:42:32:24:2A:EE:87:89:1A:36:00:16:80:DC:12:DC:62:B9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mX4YQjIkKu6HiRo2ABaA3BLcYrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:b2:13:5b:22:28:b7:82:05:12:9e:d7:79:5a:64:54:a0:d9:
29:86:20:07:19:3a:a7:d0:a2:00:62:57:bc:36:14:a2:10:4c:
96:0a:72:06:5b:62:3a:42:80:80:68:26:8d:9b:ba:6f:df:e3:
31:8a:2d:f5:48:01:f6:4d:6f:38:b1:cc:f6:c6:b2:e9:2e:53:
2e:b9:ca:09:db:d4:dd:cf:45:f6:34:26:53:47:09:13:c7:ec:
f3:34:92:e5:db:4c:5b:a8:f0:5a:c4:fb:6a:54:3a:47:61:bf:
e4:93:02:4e:bd:c3:23:55:fb:85:94:86:e3:03:c9:03:8f:ef:
03:e8:65:2e:ed:92:fc:41:fe:b2:63:e4:32:8e:4f:3a:f4:10:
1d:2a:70:7d:7c:7e:3a:1c:9a:5c:e6:91:1b:60:c8:ab:d8:7b:
4b:06:48:c8:d0:50:b5:2b:7f:7b:f3:8f:81:32:c8:77:9d:7a:
3b:b1:53:b1:67:8c:6c:fb:58:0a:94:de:1e:f3:68:15:96:11:
75:e7:b6:85:52:96:74:38:60:41:c9:a7:6c:31:0b:11:69:fe:
55:fe:20:fc:f9:5a:4d:a7:16:1c:ed:71:50:2e:b1:94:cb:9f:
90:3f:b1:53:db:de:b4:43:6e:14:af:b0:ef:67:3a:6e:cd:b9:
0a:b5:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:35:54 2025 by rpki-client