Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/mj62OgAoVLcXYhLujPeU1dz3p5E.roa
File: mj62OgAoVLcXYhLujPeU1dz3p5E.roa (raw, json)
Hash identifier: yfaMi4yebTiRiJOBekXgnPGZjuzMXzxDPEzEgjH0cEM=
Subject key identifier: 9A:3E:B6:3A:00:28:54:B7:17:62:12:EE:8C:F7:94:D5:DC:F7:A7:91
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F34E7522B00F45445FB27A741683D
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/mj62OgAoVLcXYhLujPeU1dz3p5E.roa
Signing time: Wed 01 Jan 2025 13:47:38 +0000
ROA not before: Wed 01 Jan 2025 13:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43624
IP address blocks: 46.8.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:34:e7:52:2b:00:f4:54:45:fb:27:a7:41:68:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a3eb63a002854b7176212ee8cf794d5dcf7a791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:a1:9b:eb:7f:31:af:34:a1:68:bd:d0:19:
1d:f9:17:6b:96:21:84:e2:44:f7:67:4c:fd:ec:c8:
18:56:cd:8a:74:df:3b:ac:2b:38:00:b3:04:41:c5:
00:78:dd:65:f1:48:9a:b4:7f:3d:00:ec:54:29:a3:
07:6f:a1:a0:98:ee:07:28:82:2e:78:ac:65:9d:2a:
1d:e8:db:60:13:55:be:48:48:5f:f9:19:74:0e:94:
f0:0f:12:db:ba:07:66:c6:07:ee:4b:9a:7f:38:bd:
03:2c:2a:08:58:17:a6:33:82:28:57:c7:0f:9f:3f:
eb:3d:c8:e9:05:8f:d7:06:a3:38:df:ee:c7:40:1c:
f2:90:87:dd:f9:ff:28:e8:10:90:52:e8:c6:a4:24:
9c:33:96:90:6c:a1:a9:b9:79:5b:56:18:ab:14:74:
66:c7:70:b6:de:de:aa:b0:86:3f:d7:52:2c:bd:7f:
d7:02:e7:bf:66:75:ee:35:6b:f0:fb:e2:9c:ef:cd:
71:06:1e:5c:0d:99:ed:56:6c:a1:4d:1b:6f:5e:c6:
a9:38:e1:b7:9a:94:18:d2:fb:b4:2d:3a:4d:7f:e2:
5e:f6:1d:37:60:09:30:96:53:da:da:2f:6f:3b:27:
9f:a0:be:17:74:91:27:ab:9e:f6:1a:ac:d9:30:fe:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:B6:3A:00:28:54:B7:17:62:12:EE:8C:F7:94:D5:DC:F7:A7:91
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/mj62OgAoVLcXYhLujPeU1dz3p5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.202.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ae:37:94:7e:14:13:2e:2b:6a:7e:f0:45:44:93:f1:d1:15:
a3:4b:7e:ef:3a:67:af:68:b1:fa:7e:b3:b8:71:59:f1:ac:27:
a1:82:c3:07:a7:e8:80:30:f8:69:4c:f9:a4:a5:fa:6a:92:78:
7e:6e:27:bf:04:09:fb:d1:18:79:ae:ff:c9:44:fb:25:93:86:
d1:96:2d:ec:9d:db:dc:ba:37:b2:7c:3e:4f:4f:a7:87:f2:4e:
97:8d:ff:9f:92:30:b7:fb:83:3e:31:38:43:6f:c8:7a:a1:62:
4c:51:fb:a9:4e:47:83:df:ea:9d:a8:b5:3c:9a:82:71:51:5b:
b9:86:a6:41:78:ce:e5:1f:ff:5f:1c:5c:04:df:0d:0b:26:d9:
d1:e2:19:db:b7:5c:a6:9f:1e:9c:4e:01:b4:80:c3:c0:fa:9e:
a0:ad:79:96:11:97:32:71:d6:88:1c:c0:3a:f3:f3:bf:73:13:
72:dd:ad:0e:a5:80:f2:37:51:70:7a:2c:e0:81:40:31:91:b1:
d8:90:4d:7e:56:32:5b:63:06:87:18:63:dd:ed:1a:46:97:eb:
62:2b:a2:5b:cf:c5:6c:6d:e3:f4:55:78:bc:eb:45:2d:86:8e:
19:6e:e8:59:72:c6:a0:85:5f:df:67:c2:63:49:20:94:30:45:
f5:2b:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:13 2025 by rpki-client