Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa
File: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (raw, json)
Hash identifier: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=
Subject key identifier: 99:B3:CE:5A:D5:3E:34:16:C8:19:96:4D:CF:32:ED:39:67:26:C6:3F
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 01941F8C36CF4D358C302A6DC7602C298817
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199342
IP address blocks: 185.11.152.0/22 maxlen: 22
185.11.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:cf:4d:35:8c:30:2a:6d:c7:60:2c:29:88:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99b3ce5ad53e3416c819964dcf32ed396726c63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:30:e8:84:fa:ba:73:bc:bd:90:24:4e:dd:
56:1f:a5:e3:59:26:81:9b:c7:e1:1a:40:00:7f:27:
57:8b:e9:15:3d:fd:e5:14:9c:65:5a:a2:fd:bf:25:
19:c5:05:fc:a2:eb:7b:11:01:54:fc:5e:c6:fe:09:
55:70:33:5c:f2:b5:80:7c:2e:49:0c:7c:08:3c:8a:
27:12:c3:17:3a:b7:75:34:e4:2f:a4:73:53:4e:1f:
62:9a:fc:e5:87:f1:b2:d5:96:fc:3f:99:7e:cc:2b:
fd:9e:52:38:fa:0d:cb:78:df:25:21:18:dd:8e:3f:
c2:67:99:d3:38:3f:e7:a2:90:e1:a9:b4:be:1b:95:
e5:73:26:33:f2:cf:b6:3f:38:bd:cb:3b:4b:10:32:
3c:76:0e:78:9d:6d:52:7c:bb:4d:ca:92:7d:b9:39:
a8:37:a8:32:97:05:eb:0d:c8:c5:00:8b:de:8f:3e:
d0:39:ef:1e:e2:3b:4b:3a:53:71:87:07:65:03:42:
fb:b3:fa:ed:73:99:d0:96:ea:da:23:ec:7e:4b:9f:
ff:20:d0:77:14:a1:46:29:d6:17:c6:ff:51:d1:a0:
06:1c:c6:d3:f4:19:3d:bb:0a:c4:04:f2:78:3a:bb:
24:03:f1:c1:2a:cb:15:b3:d4:08:d9:f9:a1:03:ef:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:CE:5A:D5:3E:34:16:C8:19:96:4D:CF:32:ED:39:67:26:C6:3F
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.152.0/22
Signature Algorithm: sha256WithRSAEncryption
25:c0:b6:ff:e9:dc:4a:6b:e9:66:bc:5d:55:0f:4f:68:3d:4f:
7a:37:4f:41:2b:02:46:26:8a:2b:87:fe:4c:50:ad:08:a3:9a:
1e:4e:35:24:f7:fe:9e:e8:d4:84:ec:e1:cb:e5:1c:d1:cb:74:
83:85:88:93:5f:0e:05:32:30:d4:70:d2:92:4e:69:0d:c0:a1:
13:2f:94:78:01:0b:7e:ae:70:54:2c:dd:93:3a:c0:0a:2c:ac:
00:7d:c2:c2:ee:92:99:c6:10:6a:5d:15:76:bc:50:33:34:1c:
7c:bf:8f:a4:10:cf:ef:2e:36:74:a0:74:6a:a9:29:ea:e0:ea:
f0:6d:2f:b4:48:50:e4:ac:9c:2a:03:cf:fe:35:4a:bc:0d:e2:
4a:12:43:b9:3d:40:8d:ec:4c:4c:51:38:88:8e:e2:20:c0:d3:
5c:07:a6:dc:cf:8d:49:b6:e5:32:55:0f:80:e9:89:44:90:20:
eb:71:99:fa:c1:ad:e7:11:51:ae:5e:18:59:9e:73:3b:3d:7d:
44:19:39:92:9c:59:3e:1e:06:6d:ec:df:a5:b2:c4:2a:d9:ab:
68:3a:d5:75:22:a4:34:d2:33:d4:f7:54:be:34:95:37:9e:69:
6a:1e:08:ef:e5:d3:e9:c0:0b:a7:51:48:ad:ac:f2:f4:5e:21:
89:20:37:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:27 2025 by rpki-client