Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/mXWmJZwIRdfowUzFV6EabzHZO1M.roa
File: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (raw, json)
Hash identifier: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=
Subject key identifier: 99:75:A6:25:9C:08:45:D7:E8:C1:4C:C5:57:A1:1A:6F:31:D9:3B:53
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 01942520B33B026B6F06948C1BC7109409E8
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/mXWmJZwIRdfowUzFV6EabzHZO1M.roa
Signing time: Thu 02 Jan 2025 03:48:07 +0000
ROA not before: Thu 02 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 91.230.244.0/23 maxlen: 24
91.233.105.0/24 maxlen: 24
194.33.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:b3:3b:02:6b:6f:06:94:8c:1b:c7:10:94:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Jan 2 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9975a6259c0845d7e8c14cc557a11a6f31d93b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:ab:dd:98:3e:02:0f:d3:d4:d0:c4:53:ef:
2f:4f:cb:47:f6:aa:36:ed:07:ba:72:3e:a4:6a:8b:
56:09:5b:82:2d:d6:61:cd:e1:d7:36:6b:04:4a:eb:
19:db:ee:5d:65:15:18:44:a5:04:35:27:7c:9a:c7:
ac:cc:20:de:18:fd:3d:1b:e3:ba:f9:d8:13:8d:ac:
aa:7b:c8:b2:e1:b5:13:e5:9c:f7:f9:58:2f:f6:b9:
2e:75:49:f6:b8:f2:c2:73:70:81:e1:c9:0f:b9:67:
55:07:f8:0e:fb:5f:98:c9:e9:44:99:4a:e4:61:e8:
59:5b:b4:d8:87:57:8b:0c:54:35:f9:e4:07:55:92:
dc:fb:b3:50:b5:f0:b9:4c:b1:52:56:ae:fd:38:c9:
02:ef:95:8d:b3:87:79:3d:92:26:00:df:7a:6d:56:
37:12:45:a0:a8:69:3e:80:ba:1b:6e:ab:b2:97:32:
32:1c:70:b3:31:92:97:2d:9f:4e:3b:cc:fc:45:07:
b3:0b:8d:00:ea:6f:1a:26:6a:75:a3:a7:f0:57:f3:
a4:aa:e3:b1:c3:43:ac:7c:43:e5:04:07:ad:99:6b:
5a:5c:97:d3:52:84:0e:0d:cf:f7:5d:26:87:dd:e0:
bf:a4:c4:30:15:a3:e0:59:1c:87:40:be:f2:d4:5c:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:A6:25:9C:08:45:D7:E8:C1:4C:C5:57:A1:1A:6F:31:D9:3B:53
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/mXWmJZwIRdfowUzFV6EabzHZO1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.244.0/23
91.233.105.0/24
194.33.112.0/23
Signature Algorithm: sha256WithRSAEncryption
52:a9:c0:7c:ce:e6:33:96:06:50:35:b3:f5:c4:1d:02:50:ff:
84:f9:d7:80:f5:bc:c3:34:58:48:a2:af:2a:9d:de:44:61:6a:
eb:18:c0:90:31:ab:9a:37:5f:37:c1:08:ae:00:4b:af:a7:1e:
50:ca:0c:ff:75:1e:3f:89:d1:fa:8a:29:b1:a6:f7:d0:04:dd:
91:27:7e:8a:b4:78:12:78:85:4f:4a:e6:34:8d:5f:6e:30:72:
65:97:e3:5d:11:4d:9e:13:93:6e:8f:dd:08:57:6c:75:c0:17:
e0:e4:89:1b:4a:e8:87:e7:8b:b4:85:fd:27:0f:9f:1a:87:83:
16:34:3c:01:29:0d:63:d2:7a:2b:d7:36:f4:e5:b7:b2:92:97:
6e:0a:0e:a9:46:68:35:8f:4e:3c:c2:b5:4e:d3:e4:3f:17:3b:
2e:10:2a:e3:91:fa:54:11:6d:fe:73:5e:82:1f:25:54:06:d0:
35:30:b7:0a:f0:7d:da:2d:19:d2:93:01:c1:b7:f5:6e:81:88:
bb:3f:ef:e1:f7:a0:76:f7:5f:4c:b4:31:9d:ed:49:57:cb:e6:
f1:d8:43:4b:70:da:d7:34:b9:9a:97:1a:42:bc:4a:fb:35:8b:
d3:4f:d1:36:ba:35:f1:c5:7a:b5:4c:95:7a:9b:f8:78:73:fa:
5e:0c:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:12 2025 by rpki-client