Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa
File: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (raw, json)
Hash identifier: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=
Subject key identifier: D2:67:8F:65:1D:64:69:FF:A1:5F:66:29:E2:18:F1:B5:A1:C2:5C:E6
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 01942444BF9D87D6E58015A0A224A57D1C84
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207640
IP address blocks: 195.69.140.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bf:9d:87:d6:e5:80:15:a0:a2:24:a5:7d:1c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2678f651d6469ffa15f6629e218f1b5a1c25ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:0f:7c:64:c9:34:b6:13:5d:3a:82:e3:fa:
f2:bf:6f:1b:eb:ff:36:bd:50:12:46:b3:49:7f:2f:
d1:4d:eb:65:0b:ac:10:a1:d3:33:85:04:67:a1:ba:
a3:f2:76:4d:e2:a4:2e:15:e3:07:65:45:33:8d:48:
d8:7f:8c:e1:bd:80:33:47:43:1d:6f:50:9f:50:61:
fa:69:2f:4b:fb:51:83:34:5b:88:28:23:dd:f1:f3:
99:31:c6:45:a7:15:e4:45:42:ac:d3:95:e1:ec:56:
ce:3e:26:37:37:82:42:5a:1f:98:25:dd:dd:92:6d:
c4:a6:9b:29:9b:2b:40:da:7d:c6:62:93:a3:85:12:
db:ee:dd:b9:ad:2c:e6:7f:77:e1:78:c9:a6:df:61:
d1:c7:d4:89:b9:86:23:38:63:da:ae:9b:6d:41:88:
a4:09:3c:12:4d:1f:6e:1c:f7:cd:56:ae:ac:18:44:
9c:76:36:d0:70:a3:2a:36:8d:32:8f:79:1f:45:52:
32:6f:23:2f:fe:44:24:45:8e:f7:cc:36:69:23:ad:
bc:0a:2d:7d:b6:24:f9:a0:d4:56:3f:bd:ea:91:ec:
2e:fd:38:f8:72:4f:b2:db:56:59:69:ba:0a:e5:4c:
5e:fa:be:66:a2:2c:08:7f:2a:e4:0c:ea:47:d1:77:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:8F:65:1D:64:69:FF:A1:5F:66:29:E2:18:F1:B5:A1:C2:5C:E6
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.140.0/22
Signature Algorithm: sha256WithRSAEncryption
38:80:45:02:59:21:2b:db:5f:87:4b:df:5e:fc:fc:af:e2:f6:
a7:45:e7:f2:ea:1a:0f:cf:0f:c4:5e:c2:b1:7b:06:14:23:0a:
01:63:ae:6c:55:c5:aa:d3:a5:bd:b6:d5:a7:30:d9:e5:6b:f5:
24:ce:9e:49:e1:30:d5:b0:d7:d0:5c:93:63:69:2e:3f:0f:59:
77:9d:a9:1c:a7:55:1a:0f:8e:ea:a0:c5:3c:f0:5a:63:ef:3f:
dd:1c:b2:7b:90:8c:68:d2:d8:8e:1d:d3:90:47:be:b7:bc:89:
36:d6:15:93:b3:af:2e:d4:1d:fe:6c:61:cf:aa:8c:54:11:ed:
cb:57:18:00:99:48:19:34:a6:dd:3b:07:21:43:56:b5:b2:47:
8d:4f:f0:b3:da:b0:5a:60:11:7a:84:f8:92:67:2f:3b:ad:e0:
dd:db:e1:43:c3:3c:72:c7:01:bc:0b:94:33:4d:9f:9b:90:a0:
1f:82:73:09:62:e1:9a:d2:09:eb:c5:c0:7b:cc:41:2c:da:d5:
6d:5b:04:3b:01:4b:7a:7d:27:59:23:97:40:76:8d:2e:69:c4:
98:0d:a5:ab:bc:3a:c6:c9:6a:85:66:90:9c:b3:20:ad:d9:b4:
26:da:69:fe:37:a3:81:50:49:d7:d1:7c:10:3a:70:98:e3:3d:
86:73:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:49 2025 by rpki-client