Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/MEQtA-51-LVqFHEVZDRMjfjnudY.roa
File: MEQtA-51-LVqFHEVZDRMjfjnudY.roa (raw, json)
Hash identifier: mP68hXGlyjMnNhpMDZaBlI/pFMVdjYCWoJ7Gpxv9o84=
Subject key identifier: 30:44:2D:03:EE:75:F8:B5:6A:14:71:15:64:34:4C:8D:F8:E7:B9:D6
Certificate issuer: /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial: 019423D736200CE30B46A158C8D0EA4C7FCF
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/MEQtA-51-LVqFHEVZDRMjfjnudY.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202495
IP address blocks: 193.148.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:36:20:0c:e3:0b:46:a1:58:c8:d0:ea:4c:7f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30442d03ee75f8b56a14711564344c8df8e7b9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:9f:26:c7:4c:a9:a3:5d:64:57:85:6a:c5:
91:3d:f0:22:98:53:67:46:a8:46:7b:ad:a7:1b:5f:
7c:d2:72:52:99:bb:e3:c3:43:77:c2:d8:41:c5:0d:
3c:0a:a6:7b:c6:26:d9:3f:c1:84:69:71:0f:cd:d3:
59:0a:ff:3b:57:05:0b:dc:0c:c6:d3:8e:1a:f0:27:
09:85:71:68:e6:55:af:e1:74:20:de:1d:bd:59:48:
0b:3b:90:a6:3f:bd:b5:19:4d:49:30:2b:81:f0:ef:
af:89:6e:dd:89:f3:fe:e0:04:1c:eb:ff:c8:c4:22:
5b:19:5c:bf:5a:38:70:eb:13:e1:2c:36:90:80:36:
88:02:b6:e0:2e:15:c7:51:7a:ec:40:0a:67:32:09:
11:3b:6c:6e:c0:9e:b8:5b:1a:d6:70:5d:21:2c:80:
8c:c5:fd:a2:dc:7b:6f:ae:63:05:5c:b6:ba:28:bc:
e7:54:53:94:4d:db:a3:25:3f:e6:d8:58:20:07:c2:
9c:8c:d0:4d:39:63:29:37:a6:03:65:44:41:d6:14:
79:ca:4a:24:af:31:4e:5a:33:bd:87:5a:c1:f4:3f:
04:87:a7:c0:fa:25:57:6c:17:cb:33:1d:9b:66:ca:
2e:33:ca:04:8d:2a:f5:5f:e3:46:07:6d:6b:db:c1:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:44:2D:03:EE:75:F8:B5:6A:14:71:15:64:34:4C:8D:F8:E7:B9:D6
X509v3 Authority Key Identifier:
keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/MEQtA-51-LVqFHEVZDRMjfjnudY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.8.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:42:e9:7c:ae:11:81:b7:3d:9c:32:e1:5f:fc:a2:35:dc:d5:
2a:bd:4c:12:e3:f2:83:79:46:f5:6d:8a:a2:e7:ef:f2:09:af:
d4:00:c9:ac:82:0b:6d:17:e7:e1:35:a8:c0:32:a4:3c:66:af:
b0:1f:e5:3d:42:b0:66:b0:88:47:f9:a8:d5:f9:20:b4:81:b9:
96:f4:de:50:d5:9e:ed:9c:bb:35:6c:1c:14:80:12:ad:fe:8c:
f2:53:f0:ea:7e:9e:f7:92:a8:1e:d0:40:13:f9:0c:94:cf:af:
de:31:8c:75:f2:3d:74:c1:62:08:47:9d:00:11:67:83:20:0a:
15:d3:7f:d7:d5:45:3e:02:88:cc:6a:54:ae:f7:88:36:38:d7:
19:47:14:34:ab:aa:89:01:12:38:e5:fe:58:07:6e:67:42:ab:
76:01:3e:ee:2d:50:7b:ef:68:cb:6a:24:f1:be:0e:0a:38:e9:
07:9f:13:ca:33:6a:39:1f:5c:61:ce:ed:48:0e:ad:bd:03:c3:
47:cd:1b:80:b5:ad:14:e4:df:27:23:ca:04:dc:ca:87:f8:ec:
69:ca:57:7e:bd:09:f4:fa:ba:2d:45:09:12:4d:8a:b4:a6:42:
98:e1:c3:6d:00:b8:78:02:78:30:e0:df:ce:38:6c:cb:ac:7e:
ea:9a:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:07:20 2025 by rpki-client