Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa
File: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (raw, json)
Hash identifier: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=
Subject key identifier: 9B:73:72:B5:21:50:DC:CF:BB:7A:56:C6:16:4E:85:DF:A4:89:FD:0F
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0194221F9BB048E74ACA8D148EFC2BBC5FD4
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 45.87.136.0/22 maxlen: 24
193.38.156.0/22 maxlen: 22
2a0d:6940::/29 maxlen: 48
2a0e:fe80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9b:b0:48:e7:4a:ca:8d:14:8e:fc:2b:bc:5f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b7372b52150dccfbb7a56c6164e85dfa489fd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6e:35:3a:52:68:49:b2:a8:f2:00:5a:40:da:
56:df:1c:0b:e8:63:6c:49:b1:eb:06:ce:a8:29:5b:
0c:69:30:8f:59:c2:32:1c:c0:9e:e3:66:22:00:e1:
cb:93:ea:1d:76:0a:08:30:56:ac:b0:c2:4b:da:9d:
1d:3e:f6:2f:ca:f7:cf:e8:f6:fe:0c:96:32:92:cb:
8d:c2:8f:1e:c4:b5:6c:a5:65:3b:ad:f9:68:a4:3a:
5d:9b:3a:9c:8d:10:68:09:67:94:80:55:7d:36:e1:
1b:a6:c9:8a:39:6d:a8:3a:c5:c1:8f:61:86:71:42:
c9:3e:de:49:42:d0:76:67:ab:fc:43:97:91:d8:81:
38:fa:62:0d:ba:0e:18:3b:63:64:04:4d:19:0a:44:
61:4f:1c:76:f3:8f:fb:46:b3:40:30:07:b5:4d:22:
40:3f:21:71:00:06:c2:9e:ee:3e:01:e7:5b:ed:d9:
aa:b1:43:fa:8b:5c:07:e4:e2:90:fb:1e:6f:1d:a3:
3c:8a:76:44:d5:e6:c7:a0:08:33:37:f0:15:0d:a0:
c3:08:a1:5f:9f:3d:7d:77:44:6a:b1:37:cc:9b:c6:
15:bd:fa:a2:8a:c4:11:b4:fb:97:e8:e2:74:33:ec:
94:22:79:04:1e:c0:7b:d8:60:cc:e4:32:53:67:1f:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:73:72:B5:21:50:DC:CF:BB:7A:56:C6:16:4E:85:DF:A4:89:FD:0F
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.136.0/22
193.38.156.0/22
IPv6:
2a0d:6940::/29
2a0e:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
24:a9:9c:d1:03:8a:8a:89:90:cb:1f:ac:e8:f9:6f:5d:8b:b3:
9e:de:ef:2a:db:3d:d4:d8:4f:70:61:ec:ee:56:e7:f1:ad:6d:
84:4f:35:a0:72:2d:1d:7c:ae:93:b3:31:aa:8e:72:63:c3:fe:
32:f4:2b:a3:29:ac:cc:6c:f7:5c:11:bc:3a:40:75:3f:25:67:
31:29:ca:cf:92:d2:dd:cd:d6:23:53:14:32:65:02:07:f5:ad:
77:5a:8e:24:6b:0c:e8:ab:25:6c:03:84:12:44:44:9d:95:08:
c7:09:d7:9e:2b:05:26:c5:eb:72:b7:5b:55:dd:bc:fc:6a:15:
16:c8:7c:c6:d9:70:48:02:8f:4f:5a:ea:e8:8e:1f:e0:55:12:
02:db:24:e5:45:23:b8:de:99:e7:d9:3e:c8:78:5d:f1:e1:8a:
90:e5:24:06:38:ab:65:cf:bf:a5:ef:0f:05:57:17:59:65:fc:
31:e1:5d:ae:0b:09:a7:a0:7b:40:2d:91:34:7b:7d:76:4a:49:
28:75:0a:5d:37:be:87:93:11:64:e7:fd:5b:2d:1a:c9:29:03:
bb:51:66:d1:07:23:ab:57:20:c7:50:40:a6:e8:8c:4b:5a:e5:
b8:d6:c7:e5:6f:21:f3:27:e0:1c:33:45:9a:47:c2:0c:fc:6e:
d2:d1:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:29 2025 by rpki-client