Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/sML__Fo9oC0CJq9DVvM3qYNEEFk.roa
File: sML__Fo9oC0CJq9DVvM3qYNEEFk.roa (raw, json)
Hash identifier: wiTYcMvZWhUBrdIa0E5SXixwTb4p3XeI6Z0qWmGIxAA=
Subject key identifier: B0:C2:FF:FC:5A:3D:A0:2D:02:26:AF:43:56:F3:37:A9:83:44:10:59
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 019425FDA5AAB960FB0B8BCBD2DB5A837ABE
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/sML__Fo9oC0CJq9DVvM3qYNEEFk.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 91.217.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a5:aa:b9:60:fb:0b:8b:cb:d2:db:5a:83:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0c2fffc5a3da02d0226af4356f337a983441059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:1f:97:66:a7:8e:8f:a7:9d:c3:42:c5:94:
cf:e2:82:a2:8b:6f:da:2c:79:2a:12:5e:e8:30:5d:
5a:b9:85:3e:ef:12:e7:fa:82:57:b1:e7:37:e6:78:
d7:60:ea:78:57:38:d4:88:51:dd:3e:95:e5:cd:fa:
e8:fc:c9:97:d9:11:af:88:eb:85:e9:ac:d6:85:3e:
fa:d6:77:95:b9:d5:28:63:d8:df:1b:da:25:df:f7:
a8:01:af:12:a8:81:e6:e8:40:a5:f6:7a:7e:a7:46:
41:d8:14:b2:cc:99:5f:d2:48:32:03:e6:a0:e4:fa:
86:81:77:aa:0a:97:20:34:fa:7d:77:06:c5:8d:48:
73:58:db:a2:bc:00:d9:64:a2:df:e6:40:2c:77:cc:
03:62:96:b5:db:fc:7a:f1:59:3b:2a:f5:ee:be:18:
39:32:db:91:a8:13:89:31:c2:fa:20:c7:43:00:1d:
35:95:19:6a:41:d5:dc:eb:ad:e4:41:d5:4b:4e:24:
9c:24:f7:68:0b:f4:82:71:e6:ec:99:a7:73:78:7c:
49:ba:ea:68:da:13:ff:1d:33:96:fa:9f:da:23:97:
ba:81:7f:55:ea:14:04:1f:f5:1d:b9:4e:ab:e7:d0:
89:6e:19:37:a2:35:7f:42:10:1c:55:68:fa:90:1e:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C2:FF:FC:5A:3D:A0:2D:02:26:AF:43:56:F3:37:A9:83:44:10:59
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/sML__Fo9oC0CJq9DVvM3qYNEEFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.149.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fe:37:e1:16:e2:9f:8c:e5:a2:42:ed:02:f2:78:0e:81:81:
f8:e0:4d:90:f3:06:3f:38:76:15:34:83:05:b4:49:b5:ce:21:
7b:f0:b2:3f:db:91:87:32:85:b6:98:7b:63:ea:9e:9c:48:ab:
23:7a:3c:8b:5d:38:cc:0c:0e:1a:f6:58:90:26:7b:f9:7c:20:
01:a2:91:05:4c:5a:2b:17:14:a8:37:0c:cc:11:0b:ed:62:5e:
ed:a8:39:86:77:0c:90:f0:2b:e5:ec:82:10:89:45:e6:ba:4c:
3b:9d:c4:f3:56:b8:95:bb:1e:4f:8c:02:1e:2e:e1:e4:7e:54:
24:4a:3f:86:40:c7:72:04:c3:6c:42:2b:19:6e:2a:28:33:85:
53:ae:6b:ed:de:14:d4:bf:7f:20:ad:5e:f1:9d:95:1c:7c:ed:
a0:4a:83:07:45:98:d0:8e:f4:ea:c8:a8:03:65:7b:a2:83:bc:
84:f2:97:9f:3d:15:bc:b2:36:ba:8c:78:7a:d4:46:29:12:d3:
f3:87:70:ac:5c:f0:72:04:46:48:92:78:71:88:2f:78:7e:a0:
44:43:6b:b2:1d:37:dd:2f:12:9e:2a:45:6e:35:c6:e4:d3:25:
3f:db:23:de:3b:48:b1:7d:55:79:df:e6:cb:e1:04:73:ee:52:
ba:74:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:46:32 2025 by rpki-client