Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/m0nMxzYjJ3R3QHD5BJw8r2Sa_as.roa
File: m0nMxzYjJ3R3QHD5BJw8r2Sa_as.roa (raw, json)
Hash identifier: rbAZuNuWgbMsOPz+SL7hz6CavHVkblBmo3SPOtv6FaM=
Subject key identifier: 9B:49:CC:C7:36:23:27:74:77:40:70:F9:04:9C:3C:AF:64:9A:FD:AB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0195FFD209BBD2ADE5C805750E68DD7F2BFB
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/m0nMxzYjJ3R3QHD5BJw8r2Sa_as.roa
Signing time: Fri 04 Apr 2025 08:01:49 +0000
ROA not before: Fri 04 Apr 2025 08:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210829
IP address blocks: 37.230.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:d2:09:bb:d2:ad:e5:c8:05:75:0e:68:dd:7f:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Apr 4 08:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b49ccc736232774774070f9049c3caf649afdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:80:07:10:4b:1a:30:a1:7f:8f:9e:70:16:
93:b0:88:00:a7:3f:f3:64:63:53:05:f8:bc:70:dd:
63:89:25:ef:c8:ff:ee:ea:a0:41:c4:e4:ec:19:d1:
16:42:86:99:ec:4d:56:f0:49:67:58:06:8c:a1:15:
c3:d0:70:c5:8a:63:cd:58:df:70:40:a5:cd:e4:7f:
8f:99:3a:c3:3e:a7:e9:62:e5:2e:11:22:2c:ea:e0:
0b:6d:31:0a:eb:68:42:10:5f:f4:9e:a2:1b:d2:d5:
ef:a9:ff:86:8f:72:2e:40:6b:89:c8:d7:1c:86:3b:
46:ec:51:1d:c9:c0:8a:23:79:e2:ac:9a:f9:f5:e0:
84:c0:77:e3:43:ce:c1:c7:cb:6d:ec:e1:07:a2:ed:
3f:c2:99:c2:ef:57:4c:02:f1:d2:6f:cf:5b:13:89:
b4:a9:9d:e1:b7:64:14:85:d9:a1:bf:05:36:b9:07:
56:c9:3e:9f:60:07:3f:5c:d9:69:70:49:40:15:d4:
23:48:9a:c4:12:60:6f:84:6a:2a:b3:d1:ea:96:6c:
a3:ad:f8:76:7e:7d:f1:8f:b6:07:20:e8:d4:09:9d:
93:cd:6c:a1:8a:aa:2e:c1:9e:6d:29:63:42:87:c7:
ae:5c:1f:a0:64:e6:a8:a1:11:89:f7:63:2f:fc:10:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:CC:C7:36:23:27:74:77:40:70:F9:04:9C:3C:AF:64:9A:FD:AB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/m0nMxzYjJ3R3QHD5BJw8r2Sa_as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.229.0/24
Signature Algorithm: sha256WithRSAEncryption
96:37:b6:69:da:7d:ca:c0:7d:2e:29:01:c5:6c:05:87:d5:e0:
af:05:fc:88:cd:b9:b1:b6:ed:0f:35:9c:37:e1:50:e7:a2:74:
a0:3e:3a:d6:02:24:62:f4:ab:57:43:4e:ae:a4:08:a3:54:9e:
e8:bc:94:d6:5d:4f:24:b3:fe:80:d3:36:46:da:98:b7:00:ff:
77:d6:3d:d0:7d:40:7a:bb:d6:47:6f:d9:51:af:9e:b3:d5:ef:
7a:4a:ab:ae:d8:83:75:73:ca:7f:ff:28:f3:cf:54:6c:59:57:
73:3b:1a:ee:63:dc:89:32:40:37:e8:76:7f:53:ea:5f:89:96:
0d:d0:fe:16:79:0b:c7:21:45:d7:50:b2:bc:2a:58:89:b2:2a:
a4:24:36:0b:31:99:c6:c6:15:63:17:a0:4b:cc:8e:9c:e4:5a:
93:fe:b8:dd:04:e7:8c:ce:e4:82:7a:ac:02:73:4a:9c:73:09:
3e:5b:b9:12:aa:63:80:46:69:6a:86:4d:44:9d:ab:60:3b:f6:
d0:7c:a1:ff:86:8b:76:97:c6:b7:99:03:28:89:3c:12:f5:9a:
1a:fc:7f:36:71:36:dd:99:2e:c8:77:b1:1a:76:74:a7:82:d7:
e5:3c:fd:1a:d9:49:bf:c5:d7:fb:da:16:b0:f4:89:7f:15:c9:
41:e0:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:40:26 2025 by rpki-client