Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/mmvuqSKrxCIOK5dTOpgllxAuYB8.roa
File: mmvuqSKrxCIOK5dTOpgllxAuYB8.roa (raw, json)
Hash identifier: cXrhSBrwqA5XppxSkBQnZWJRKIyKnPJRdZjf9M/iItg=
Subject key identifier: 9A:6B:EE:A9:22:AB:C4:22:0E:2B:97:53:3A:98:25:97:10:2E:60:1F
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 0194266C07E52787C8FBE3C655C09CFDAD1D
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/mmvuqSKrxCIOK5dTOpgllxAuYB8.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31708
IP address blocks: 185.199.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:07:e5:27:87:c8:fb:e3:c6:55:c0:9c:fd:ad:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a6beea922abc4220e2b97533a982597102e601f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:07:d3:3f:99:ca:6c:81:29:00:58:78:72:
b3:7c:e7:80:90:b1:18:c4:c6:88:b6:b1:94:98:01:
00:55:ac:cd:d8:59:39:e4:91:6a:da:3b:70:83:a5:
83:99:d6:21:dc:73:6b:3d:9c:0c:b8:7c:8e:c5:01:
12:72:69:2c:d6:17:5b:ac:bb:38:12:8a:5d:d9:07:
a7:a0:cc:d4:78:8a:21:73:8f:07:ef:a1:fb:bf:34:
2e:37:5c:ce:2a:b3:11:ad:ad:fe:d5:55:ac:31:ca:
ee:d4:07:8d:8c:db:3b:7e:e5:74:0c:25:05:eb:e6:
93:c9:74:f6:f2:92:7c:db:89:7c:d9:b4:da:eb:88:
50:5c:64:cd:80:03:d6:76:2f:71:e2:a7:cb:2c:80:
67:aa:a9:2f:4c:78:c1:33:92:01:62:a4:28:8c:61:
1d:30:f0:b8:94:34:7e:d8:48:e1:0b:9d:ec:6a:d6:
58:74:0f:b3:88:10:34:86:55:05:ca:af:b5:9f:c6:
28:ba:42:a9:81:b1:ec:55:66:a5:54:be:60:2c:4b:
71:da:64:4c:71:8b:5e:37:02:58:e8:f6:9d:74:ca:
c4:fa:b7:64:d5:25:c7:41:cb:8e:f2:d2:51:b3:e6:
91:0a:60:aa:89:ab:c9:50:84:e1:7f:fc:29:56:af:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:EE:A9:22:AB:C4:22:0E:2B:97:53:3A:98:25:97:10:2E:60:1F
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/mmvuqSKrxCIOK5dTOpgllxAuYB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.36.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:8e:94:01:30:0d:d9:06:00:82:c2:91:6a:01:6c:23:da:a2:
57:d8:2e:ed:bf:2e:ce:00:b5:11:20:e8:00:c7:f5:2a:2b:e7:
80:32:b5:6f:49:11:3c:b1:93:37:9d:78:4a:67:ed:fa:e0:87:
ee:f8:93:0f:c0:4d:e0:fb:8a:f8:78:a2:12:2a:7c:1b:bd:ca:
82:59:73:0f:a9:e9:14:75:c0:11:45:04:3d:c0:59:68:81:ec:
b0:de:79:df:fe:ac:3a:31:06:15:1c:e8:bd:9c:96:15:6f:d0:
da:30:1d:2d:a8:1f:2a:3d:94:0c:d8:47:86:a3:51:13:59:36:
e9:bf:a7:e0:3b:d1:1a:44:34:cd:41:62:ad:55:66:84:4f:95:
12:e5:20:86:10:bd:6f:68:f8:c5:07:c2:2b:f8:da:eb:5a:af:
a2:4d:d3:59:c8:1a:3a:9e:90:49:0b:d7:df:5d:17:c7:0a:3e:
0c:91:b9:2f:15:40:e5:bf:13:0e:7c:95:ea:63:e1:1b:1f:c9:
ad:0d:6c:fd:56:22:11:46:5c:8b:a2:09:14:5d:93:09:b9:d8:
a9:ac:bf:b9:03:91:8a:08:15:4a:00:1d:c9:b2:93:39:26:78:
b2:cf:34:a1:ed:8f:ae:2a:1c:1a:02:65:11:1f:0e:6c:ff:3a:
06:cf:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:44 2025 by rpki-client