Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/sMCSmLssLrgia16zJI5XE9yo4Pc.roa
File: sMCSmLssLrgia16zJI5XE9yo4Pc.roa (raw, json)
Hash identifier: PFtIIur3mQmVxOsLtK02cY2okE4kZ+3bYDiOKr8hnFU=
Subject key identifier: B0:C0:92:98:BB:2C:2E:B8:22:6B:5E:B3:24:8E:57:13:DC:A8:E0:F7
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0195B764C66A1A630D8A6EA6ADB19695E427
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/sMCSmLssLrgia16zJI5XE9yo4Pc.roa
Signing time: Fri 21 Mar 2025 06:29:49 +0000
ROA not before: Fri 21 Mar 2025 06:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 86.107.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:64:c6:6a:1a:63:0d:8a:6e:a6:ad:b1:96:95:e4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Mar 21 06:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0c09298bb2c2eb8226b5eb3248e5713dca8e0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:f9:99:ac:07:61:1b:28:03:70:21:01:12:
cc:33:7c:5b:b6:90:ca:a9:4b:8a:60:82:d2:fc:21:
ff:60:11:97:e2:59:98:f6:6f:0e:10:01:a2:3c:37:
81:64:a5:ce:c9:81:77:a8:17:71:c5:e9:f2:7f:1f:
d2:db:60:cf:3d:ea:04:ca:77:5b:d4:36:5a:e1:12:
d5:19:7a:be:d5:d3:ff:72:05:52:db:6a:73:d0:c7:
4b:9c:c4:f7:7c:71:3b:51:c3:f6:63:48:27:0d:b3:
7c:bd:34:52:80:72:f3:b6:1a:92:fa:55:66:ec:66:
45:86:f4:3f:9c:71:7e:45:ac:a1:6e:15:9e:4f:37:
c1:3e:c9:0c:3e:a4:b9:28:6f:0e:3e:73:39:e9:f9:
7a:4c:38:c9:3c:ba:e8:61:78:58:6b:04:fb:ad:98:
bd:d6:ef:e4:7a:42:96:69:fb:00:19:44:6c:68:a2:
30:15:3d:c8:1f:ef:f5:5e:ca:60:4d:7a:53:c4:99:
04:53:8a:30:19:38:6a:7e:f7:2c:2c:85:a4:e7:fc:
20:58:4f:08:62:10:e5:69:9c:3b:4c:81:03:0e:0d:
b1:d3:c6:6e:d1:a6:75:a3:93:67:9b:50:40:40:81:
b7:ae:b0:b6:f6:a5:23:0a:d8:70:c5:02:e8:65:fe:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C0:92:98:BB:2C:2E:B8:22:6B:5E:B3:24:8E:57:13:DC:A8:E0:F7
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/sMCSmLssLrgia16zJI5XE9yo4Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.72.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3f:32:ad:81:06:48:9f:21:b6:3c:58:6d:2e:48:18:02:a9:
70:eb:17:c2:79:3b:49:b8:dd:ec:d2:6c:ff:b0:84:44:29:6b:
f2:cc:0f:8e:90:b2:1f:8a:4f:ca:83:61:a7:0e:75:c3:74:ed:
dd:63:0d:24:3e:04:6f:40:a2:1a:a5:27:76:6a:c5:28:fb:c7:
78:c8:44:04:c6:9d:b6:61:0d:37:80:bd:9d:b7:df:50:06:40:
f3:be:45:17:64:86:ca:4a:20:84:d1:d6:d1:8d:34:40:dc:64:
bf:33:e1:7c:40:5e:93:1f:ac:0c:f9:15:bd:98:4c:ff:95:b3:
38:56:4f:33:d6:3c:d7:e8:01:0c:d6:d9:82:3d:84:f7:b8:ec:
0b:db:c9:f1:78:c7:cf:f8:a5:b0:28:d6:d8:1b:bd:6d:1c:89:
a9:cc:2f:48:17:1f:17:65:fc:42:11:90:70:6a:10:98:99:7d:
09:8e:9c:be:d7:64:d8:f7:e3:d4:67:67:96:e1:60:4f:ae:72:
0b:c6:5d:1b:56:fd:74:be:fb:de:f3:3f:97:39:f0:fe:ec:c4:
22:01:92:0b:28:78:fb:84:92:cf:24:13:ce:8e:67:88:b9:b0:
0c:2c:6e:5b:0e:e8:86:1e:8e:1f:15:1d:e6:f9:8a:25:9d:b4:
92:e3:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:38:02 2025 by rpki-client