Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/0MRJhU0Qnhazf3uEIVGNielpVjo.roa
File: 0MRJhU0Qnhazf3uEIVGNielpVjo.roa (raw, json)
Hash identifier: QbTItXwb+MhiN+jNSFdFEHfTLMbgundvD0ftmWJwj5k=
Subject key identifier: D0:C4:49:85:4D:10:9E:16:B3:7F:7B:84:21:51:8D:89:E9:69:56:3A
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0195F80D825BFFC465A56F371D5534EE2FE8
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/0MRJhU0Qnhazf3uEIVGNielpVjo.roa
Signing time: Wed 02 Apr 2025 19:49:49 +0000
ROA not before: Wed 02 Apr 2025 19:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 185.215.132.0/23 maxlen: 23
185.215.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:0d:82:5b:ff:c4:65:a5:6f:37:1d:55:34:ee:2f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Apr 2 19:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0c449854d109e16b37f7b8421518d89e969563a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2a:c9:04:1e:16:1b:77:5f:7f:10:fe:e7:36:
74:c1:de:7d:fa:4e:57:8d:aa:69:97:0f:f5:5e:14:
db:79:74:68:12:01:df:c1:f9:66:cd:33:09:16:83:
81:da:78:7a:9d:cd:d1:51:8c:55:42:3d:45:45:96:
43:60:3c:97:fa:b4:61:31:f7:e9:57:29:de:fd:ec:
2c:d7:e2:4d:28:a7:31:61:aa:45:1b:46:28:b7:33:
96:86:a2:5d:b9:e1:d9:58:5c:5d:6c:74:f6:d2:80:
69:14:c5:16:cf:95:0b:51:ab:a5:fa:2f:dc:0a:c9:
61:35:a8:1a:6e:dc:cb:5b:10:3e:ef:98:c5:b0:fc:
be:0b:81:68:e2:44:ae:b7:d1:66:18:8f:5e:97:09:
29:90:9f:84:9f:c1:cc:ce:05:2d:11:88:3c:08:e6:
1f:23:4c:86:83:71:b6:49:5d:09:80:ed:86:74:d8:
40:f8:9c:6c:5f:d9:60:9d:92:bc:f0:53:e7:4c:cd:
4f:2b:0e:d2:7d:f8:24:2c:33:a2:0b:03:7a:1a:6d:
31:cb:21:03:d6:26:b2:89:29:3e:f3:cd:3b:83:a9:
76:4e:a3:57:97:d1:73:49:68:2a:94:dc:94:38:2e:
2f:4b:28:d1:51:ad:fc:6e:58:fe:bd:f4:5b:0b:e9:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C4:49:85:4D:10:9E:16:B3:7F:7B:84:21:51:8D:89:E9:69:56:3A
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/0MRJhU0Qnhazf3uEIVGNielpVjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.132.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:a3:bf:15:84:89:ba:22:2e:b3:aa:e5:b5:07:97:4f:50:68:
a1:a9:5a:37:ca:9b:0c:60:53:42:89:a1:36:2f:3f:18:a6:5b:
92:7f:8b:74:61:4d:55:b9:59:69:72:73:8d:f2:c1:d6:87:c1:
50:5f:d2:7b:27:30:62:94:3f:f0:0d:00:cc:3a:31:64:e5:43:
57:4e:33:2a:94:a7:07:c7:9a:cc:f1:f5:83:e8:db:25:c4:68:
bb:38:07:a9:8f:e4:9d:6d:6f:92:4b:40:14:06:9a:6d:a5:6c:
db:ba:e5:82:35:0a:34:fc:d4:e9:25:89:36:0e:30:56:e5:63:
6c:37:34:6d:ba:4f:d5:84:f4:04:75:9b:3c:51:20:a0:7f:5c:
60:1f:d8:49:21:e2:e7:92:f2:43:66:54:31:80:5e:1e:17:a9:
ec:65:69:48:e7:4b:a9:5f:04:17:c4:da:63:94:f6:6c:28:97:
44:29:57:4c:02:3a:4b:b3:9d:1f:5d:31:29:1e:83:fa:5a:ae:
f5:7a:1b:d7:02:06:46:53:e8:4b:e9:54:4d:3f:f8:63:a6:9f:
1c:e2:3e:9c:66:08:76:f1:98:48:fd:35:20:80:7a:31:77:79:
45:45:75:1a:92:a0:19:30:6f:86:f3:85:e2:3a:c8:c7:57:91:
e9:06:f9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:52:38 2025 by rpki-client