Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/MyHgwE9JQ37sKu_CcRwNe642FMI.roa
File: MyHgwE9JQ37sKu_CcRwNe642FMI.roa (raw, json)
Hash identifier: UWTUq6zuuwDHpYw/C8xNP37TF6tAxhLymuOUDHs6DJk=
Subject key identifier: 33:21:E0:C0:4F:49:43:7E:EC:2A:EF:C2:71:1C:0D:7B:AE:36:14:C2
Certificate issuer: /CN=68309900e648b65a307a7860102bf78b16f55d75
Certificate serial: 019423D77D5B5D57A5FB0054E940706DE26E
Authority key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/MyHgwE9JQ37sKu_CcRwNe642FMI.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199315
IP address blocks: 91.218.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7d:5b:5d:57:a5:fb:00:54:e9:40:70:6d:e2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68309900e648b65a307a7860102bf78b16f55d75
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3321e0c04f49437eec2aefc2711c0d7bae3614c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:2e:38:26:0f:e6:cb:36:77:88:cf:e1:c8:
b4:4c:d2:42:ec:14:9d:76:2b:89:a5:04:80:b0:f8:
91:13:17:6d:2d:b6:0b:7c:6e:0d:5c:fc:3c:cf:36:
3e:30:fe:37:58:ea:5c:8d:06:64:cb:ea:09:90:1a:
e2:6d:94:3f:c1:47:bd:0e:eb:0e:08:06:a0:b3:bf:
14:e6:cc:89:fe:d7:d5:f2:bb:d2:05:0d:79:c3:16:
fc:09:30:e1:3f:08:02:1d:42:36:36:24:e1:c7:ae:
35:8d:9e:17:13:3d:85:33:8d:50:2b:ea:ff:18:97:
98:85:04:4e:c9:eb:56:c1:4d:65:a4:a3:2c:4f:f0:
02:d9:2b:37:5b:e5:47:4b:ba:3c:ab:7b:6c:08:65:
c9:41:7b:7a:d7:3e:c8:f2:6c:3d:e8:6a:f6:16:bc:
fa:15:fb:12:12:1d:f2:76:35:2f:2b:79:77:f0:a2:
93:21:71:a1:87:34:8e:12:bd:9e:cf:67:4e:57:42:
d4:27:82:27:43:47:66:00:44:c5:14:d5:43:c7:e7:
7c:2f:f7:d4:00:67:53:b1:63:21:24:b9:92:4b:c4:
10:5e:0b:e8:d4:31:52:bf:bd:ef:62:aa:7e:2a:2d:
c7:09:ca:c9:43:76:cc:71:17:46:c9:93:9c:41:fd:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:E0:C0:4F:49:43:7E:EC:2A:EF:C2:71:1C:0D:7B:AE:36:14:C2
X509v3 Authority Key Identifier:
keyid:68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/MyHgwE9JQ37sKu_CcRwNe642FMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.173.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3b:85:c2:5f:f6:bc:55:a2:76:c9:51:f5:ae:d3:fd:b8:b8:
73:5c:7b:2e:5f:ef:38:ce:20:9a:c0:c0:10:5d:f9:9b:e7:ea:
9c:d8:b4:f3:77:9a:5a:88:4c:c8:c9:ba:d9:30:75:76:41:fb:
a3:16:2e:9f:af:dd:6f:06:b0:f8:de:37:15:e9:36:de:88:13:
c9:18:23:5d:11:a3:47:7e:9d:10:f5:09:64:4e:03:30:55:16:
6c:9d:bc:f7:03:fb:26:06:c6:8b:31:75:1f:98:73:c5:e8:cd:
3c:09:8e:18:9f:d9:90:57:8f:30:d9:cf:5b:cf:8f:ac:b0:b2:
8a:c2:37:f6:27:1a:22:94:fe:0d:3a:46:b2:b5:9f:52:a0:0d:
49:47:47:b3:39:48:4d:64:8f:8c:4d:03:eb:df:48:5a:21:7f:
ca:0a:7e:2a:ce:f3:85:a5:54:4a:9f:1d:99:ff:05:29:0d:39:
f3:d0:48:2c:87:80:36:55:7b:76:65:e7:b0:f8:03:f9:f2:60:
07:51:d3:23:cc:8e:cd:17:9c:b8:62:2d:ba:67:04:9e:98:e4:
2b:8a:2a:d1:6e:fe:67:a3:0f:97:06:f4:0b:9a:e9:7f:d8:21:
23:29:ca:e7:1d:0d:ca:58:bf:88:9d:2f:45:43:97:7f:95:10:
55:58:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:49:17 2025 by rpki-client