Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/1-mkP1gFOG4Ani1tYFin3RKicalI.roa
File: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (raw, json)
Hash identifier: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=
Subject key identifier: FA:69:0F:D6:01:4E:1B:80:27:8B:5B:58:16:29:F7:44:A8:9C:6A:52
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019483CE8E711C987851F5435A90CEAFCFE3
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/1-mkP1gFOG4Ani1tYFin3RKicalI.roa
Signing time: Mon 20 Jan 2025 13:02:19 +0000
ROA not before: Mon 20 Jan 2025 13:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198102
IP address blocks: 185.43.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:ce:8e:71:1c:98:78:51:f5:43:5a:90:ce:af:cf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Jan 20 13:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa690fd6014e1b80278b5b581629f744a89c6a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:d9:00:b3:b9:db:cf:ef:5a:16:e0:e7:ad:
39:ac:43:82:88:e1:f0:25:5a:a6:1e:bf:2c:e2:98:
77:53:78:38:a8:f3:72:1a:d2:e1:16:8a:72:b9:2c:
56:7c:f3:2e:72:71:a7:b8:32:91:f8:ce:1a:61:68:
d3:d4:da:30:67:8e:37:93:31:4f:26:b8:89:f5:28:
47:13:7e:f4:77:4c:2e:f3:59:36:71:76:15:2d:44:
12:dc:6a:e3:7e:e0:cd:ac:e3:57:ff:56:16:ea:a5:
12:a0:fa:37:fc:70:06:e9:99:88:75:df:30:cc:b7:
f7:39:db:c7:ea:36:d2:c9:ef:31:62:58:d7:64:5f:
97:5b:5a:ad:cb:f7:72:ad:2d:13:ad:88:ef:86:b4:
74:4d:94:85:36:b8:3b:43:37:71:81:8d:e5:a1:b5:
83:15:48:b0:4a:8f:12:45:58:c0:0f:1f:45:3a:b2:
2a:b5:cd:1d:29:0b:b5:eb:c2:30:96:12:3d:b8:b8:
86:fb:17:4b:d6:6d:84:97:c5:81:e7:9b:43:84:2b:
f9:a6:a6:eb:d6:cb:2a:fa:a0:cd:3e:75:4c:30:f8:
1e:90:f5:62:93:6e:8d:4d:8f:51:ea:07:1c:b9:c8:
24:5c:01:38:89:3a:0c:91:20:80:7c:12:73:2e:3d:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:69:0F:D6:01:4E:1B:80:27:8B:5B:58:16:29:F7:44:A8:9C:6A:52
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/1-mkP1gFOG4Ani1tYFin3RKicalI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:92:48:53:4c:ef:33:42:b6:f8:98:bc:d8:27:d1:08:87:68:
35:7e:e5:9a:37:5e:bc:ad:83:49:09:f0:fc:72:8d:d4:76:1c:
0c:07:dd:03:f2:5c:95:24:58:c2:c0:58:e0:95:aa:3c:45:8b:
f0:ae:32:4b:8e:53:34:b3:e1:e6:00:b0:be:c3:34:b6:be:ff:
39:48:4f:a7:3a:d2:8a:80:54:a2:46:26:88:de:b1:aa:07:c3:
fe:d6:52:bb:4f:0d:18:d7:3e:16:4d:c4:32:6c:09:94:c5:31:
be:10:c6:db:a0:1f:a7:d8:71:15:6e:c2:96:13:88:d0:f7:c4:
b4:80:26:d3:93:15:05:06:3f:0c:15:2e:10:39:7a:c0:10:1e:
6c:29:d2:01:36:6f:b7:09:8d:1d:05:b1:d6:00:73:51:02:fa:
0a:da:1f:80:1f:71:32:27:4c:72:d6:55:75:e0:e8:cf:68:a5:
8e:60:f1:a4:eb:59:eb:2b:b0:35:c7:a3:8d:36:4b:de:04:05:
42:89:6e:47:99:b2:6f:f6:5c:1e:e4:ad:f2:37:b0:41:8e:fb:
62:84:bf:79:64:ff:7a:a9:dc:11:86:76:8e:4d:73:f6:ce:82:
e1:0f:b5:37:b1:8d:17:c5:13:54:fb:64:ad:57:81:ea:39:e2:
cf:40:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:49:10 2025 by rpki-client