Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mMAwso5PyMiUkBDuP91mCU2ukBI.roa
File: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (raw, json)
Hash identifier: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=
Subject key identifier: 98:C0:30:B2:8E:4F:C8:C8:94:90:10:EE:3F:DD:66:09:4D:AE:90:12
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01941F8C61423E68EED24807163088646781
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mMAwso5PyMiUkBDuP91mCU2ukBI.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 89.185.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:61:42:3e:68:ee:d2:48:07:16:30:88:64:67:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98c030b28e4fc8c8949010ee3fdd66094dae9012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:ea:4a:a4:80:40:55:de:da:7f:74:db:44:
5e:b2:ae:41:44:2b:f7:b7:ce:a9:d0:6a:ff:26:c7:
e5:2a:3f:11:05:a5:49:c5:3e:14:25:a7:3b:5d:49:
33:32:ba:53:0a:53:bd:f7:d1:23:2b:33:81:4b:ea:
36:68:7f:87:e7:6b:87:b6:29:42:bf:fb:ea:42:d9:
04:c6:a3:72:4e:8c:b5:7c:b1:70:4f:49:c6:d7:42:
2d:3c:d9:66:25:12:26:1b:ea:cb:b2:30:0d:03:61:
4c:ea:d4:42:2b:a8:fc:8f:07:e4:1a:1a:f5:7d:0e:
9d:08:eb:90:f8:91:57:5c:6f:7c:ef:3a:49:65:0a:
d8:da:e8:d9:d5:6f:4a:04:ce:ba:83:f0:0d:9d:14:
08:78:3e:47:08:9c:81:70:e8:02:a0:31:19:24:2d:
5d:6c:d8:ee:f5:5d:2c:f2:6c:18:62:67:ac:fb:f7:
47:fd:dd:63:87:2e:39:9c:7c:b1:2d:2a:36:26:be:
ae:e1:29:10:56:87:e2:69:8e:bf:17:eb:a6:a7:c3:
f0:0f:a4:03:6a:c4:91:50:1e:e8:45:e8:73:55:89:
5c:e9:fc:d6:38:e3:ef:b2:9d:26:c4:5a:ae:7b:bd:
03:83:6b:f7:cd:74:fc:ba:a6:30:38:9e:96:95:e0:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C0:30:B2:8E:4F:C8:C8:94:90:10:EE:3F:DD:66:09:4D:AE:90:12
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mMAwso5PyMiUkBDuP91mCU2ukBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5e:47:ca:d9:f4:d1:da:e1:ac:96:f2:f5:8a:9b:89:b6:8d:
21:56:4a:b1:90:f3:5d:6f:d0:d6:2d:ed:19:d7:ae:79:7e:df:
4f:af:2f:69:82:77:f7:5d:97:b1:1e:8f:01:22:d9:65:1b:93:
c0:1c:32:bc:7f:8c:8c:16:0a:18:cb:fa:ec:0c:e8:31:54:1c:
8e:30:ef:bb:62:12:2a:24:75:0d:91:b5:62:57:a2:f5:6d:a4:
ff:fb:32:f3:28:13:57:48:b1:7f:92:6b:f4:17:da:e2:cf:94:
64:1c:6b:ab:d5:58:9a:af:64:36:50:77:aa:f8:84:f0:11:75:
8d:08:4c:e4:ab:05:f7:ec:f4:64:f0:8e:70:4a:b9:2c:23:cf:
18:a8:35:c6:1c:ca:2a:95:36:8e:1d:d1:fc:bd:a5:0e:b5:0c:
0b:25:c6:5a:ca:49:de:71:f8:42:3e:d4:94:5e:7d:a6:d8:44:
96:9a:07:84:71:86:94:4b:1d:7d:da:ea:85:f5:be:68:61:e4:
4c:a3:ba:e8:87:6d:8d:f1:30:f9:78:81:a7:a4:53:c1:e7:82:
d9:a7:07:bf:6b:d6:5c:a3:c5:28:35:f8:9c:62:72:43:18:09:
82:d2:0a:8a:c4:f9:86:2b:0e:7b:a7:85:41:8c:41:f8:52:9c:
7b:66:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:42 2025 by rpki-client