Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/ma2RNCPOqKr6px7ttaC3OYadV5M.roa
File: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (raw, json)
Hash identifier: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=
Subject key identifier: 99:AD:91:34:23:CE:A8:AA:FA:A7:1E:ED:B5:A0:B7:39:86:9D:57:93
Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial: 019449DA6D3C468F61EA6411BD3EDFB54E6F
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/ma2RNCPOqKr6px7ttaC3OYadV5M.roa
Signing time: Thu 09 Jan 2025 06:57:19 +0000
ROA not before: Thu 09 Jan 2025 06:57:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59547
IP address blocks: 151.248.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:da:6d:3c:46:8f:61:ea:64:11:bd:3e:df:b5:4e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Validity
Not Before: Jan 9 06:57:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ad913423cea8aafaa71eedb5a0b739869d5793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:1b:80:87:30:91:ff:7f:b5:a8:1c:4c:2f:
8b:05:c4:75:07:b3:91:99:00:f9:df:4d:bd:f4:48:
7a:34:23:a9:1d:c7:27:9e:7e:d5:78:3b:1f:62:a4:
e5:c7:da:fd:6b:c5:cd:f8:a0:44:24:be:92:ad:4f:
51:72:ee:56:64:0b:17:25:3e:2a:22:ce:f6:dd:e6:
4f:dc:3c:53:71:6e:62:30:a5:98:c1:60:31:8d:c5:
d2:1f:26:8b:0d:8e:84:07:7c:30:cd:7a:96:1f:9f:
6b:08:4e:f6:f9:55:a3:82:53:a4:62:22:17:b4:05:
e7:6b:d7:e5:a4:f8:0d:49:f7:49:23:4e:ee:0d:4d:
67:5f:ee:d3:9d:9a:7e:fd:80:df:40:f5:f4:58:33:
9f:d5:33:3f:50:8d:bf:d3:68:7f:3e:4d:95:f5:bf:
62:ed:5d:f1:a9:0a:33:13:81:f9:81:b3:f1:27:e6:
e8:35:1e:5b:52:3b:89:0e:a8:5a:0b:cc:1e:64:39:
b1:d2:9b:2d:e9:6c:89:63:f4:9f:55:ad:84:fa:b2:
8f:7b:7b:26:30:ba:79:39:0c:ed:44:8e:62:40:e9:
b1:de:92:06:20:87:4e:bf:30:94:fc:eb:f2:91:0d:
9a:90:4e:3f:c2:e0:51:ed:1f:eb:5b:37:b1:bc:b9:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:91:34:23:CE:A8:AA:FA:A7:1E:ED:B5:A0:B7:39:86:9D:57:93
X509v3 Authority Key Identifier:
keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/ma2RNCPOqKr6px7ttaC3OYadV5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.48.0/21
Signature Algorithm: sha256WithRSAEncryption
04:62:0e:99:49:e2:20:98:4c:31:10:e9:8f:bb:7a:67:3e:c0:
6f:d0:b7:26:14:f4:8a:fd:eb:5d:2f:19:6e:c2:d9:b5:90:0c:
e0:52:14:67:05:32:47:5c:1d:78:6a:0b:69:60:eb:3d:d5:84:
bc:72:b8:f4:7b:df:3d:d6:4e:7d:c3:69:9c:25:54:db:c2:42:
fa:49:e6:0e:ca:83:5e:15:ab:04:99:83:30:29:2b:46:38:f5:
f6:54:2d:ec:26:f2:e2:38:ec:7a:26:0c:37:00:58:1a:7a:be:
54:55:ce:10:a8:f2:ef:b9:0d:ec:eb:fa:b4:c7:7f:12:c8:12:
cc:3f:d9:34:e0:6e:95:bf:47:1d:b8:7d:08:5a:e7:7e:80:ec:
d5:48:be:31:8d:76:ad:a8:54:1a:36:fd:76:5d:8f:46:1f:a1:
48:0f:ad:63:da:13:49:e0:3a:d4:09:fd:69:b4:7d:9c:fd:95:
1a:bb:e0:6a:60:7a:ff:73:11:ce:8b:2f:45:00:cd:74:74:a0:
16:48:2b:5e:04:62:be:b1:5e:d4:90:50:34:e7:72:91:50:57:
d7:d3:98:bf:bf:6f:92:aa:45:d0:ea:84:f1:64:7c:b2:ab:e0:
cd:e1:83:55:d6:bc:b1:2a:82:2a:74:84:c0:8d:23:de:b0:5c:
63:fc:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:56 2025 by rpki-client