Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/MOp992QACjCU4CSR_4wEvEmDi9g.roa
File: MOp992QACjCU4CSR_4wEvEmDi9g.roa (raw, json)
Hash identifier: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=
Subject key identifier: 30:EA:7D:F7:64:00:0A:30:94:E0:24:91:FF:8C:04:BC:49:83:8B:D8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 019473B85089A68582326DB33AE4C6B1B1A7
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/MOp992QACjCU4CSR_4wEvEmDi9g.roa
Signing time: Fri 17 Jan 2025 10:04:06 +0000
ROA not before: Fri 17 Jan 2025 10:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 194.26.8.0/22 maxlen: 24
194.26.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:b8:50:89:a6:85:82:32:6d:b3:3a:e4:c6:b1:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Jan 17 10:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30ea7df764000a3094e02491ff8c04bc49838bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:99:0b:c5:2d:fb:75:9f:28:00:7f:4a:b8:
eb:df:f2:d9:b9:82:17:76:8a:a8:44:64:76:ca:28:
47:fc:65:15:25:90:2e:4b:bd:01:bb:8b:58:c6:d0:
f4:08:3c:c9:88:b9:67:1b:b7:20:65:9c:79:ec:72:
ec:a4:ec:45:ed:6b:97:7a:ff:71:5a:46:17:68:f7:
e7:18:fd:81:a7:39:9a:11:3e:bc:df:60:1f:db:79:
35:20:12:54:41:e8:97:72:9d:ab:31:2d:f0:cc:63:
13:05:82:19:89:56:fb:3f:ad:ed:a4:cd:f0:f8:0b:
2c:c3:b0:b8:a0:b7:30:5a:76:bb:d3:be:6f:fe:3f:
6c:f4:0e:01:b5:51:41:cf:2f:dd:af:fa:30:75:72:
f2:34:66:01:cb:ba:bb:93:b6:04:f3:48:53:c5:f4:
49:fc:66:8a:6d:40:0b:7d:40:8b:20:e5:41:f6:5c:
6f:83:af:9f:df:00:eb:a4:a6:3b:d1:63:aa:fc:bb:
14:f3:52:98:52:c5:1e:08:0a:3e:f0:d5:4b:9f:79:
78:29:64:4c:e5:55:e1:ac:d4:45:77:60:90:9d:65:
75:a0:5a:16:70:11:a0:8b:4c:27:60:4e:41:52:8a:
94:2e:e8:be:92:5f:1e:17:0f:56:79:02:b1:d2:59:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:7D:F7:64:00:0A:30:94:E0:24:91:FF:8C:04:BC:49:83:8B:D8
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/MOp992QACjCU4CSR_4wEvEmDi9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.8.0/21
Signature Algorithm: sha256WithRSAEncryption
cc:75:3d:ad:88:15:ce:51:03:c4:fc:e7:df:96:dc:02:79:8a:
92:73:4f:7c:8b:93:3d:59:2d:bd:a8:41:36:e1:2e:44:5f:b6:
ff:b2:2e:40:c8:17:e1:49:6b:29:1d:10:c7:46:6e:06:84:b1:
b1:ff:ac:50:f3:6f:42:24:82:84:bb:3c:9c:f6:c3:c3:b8:02:
cb:dd:f8:d3:eb:59:5d:39:f7:78:69:14:29:a1:c5:8b:34:82:
14:6e:34:03:a3:1a:2f:53:34:57:2f:54:93:d1:be:9a:92:67:
94:44:9d:a2:a7:77:13:6c:79:04:dc:7d:87:87:00:81:88:c7:
79:81:81:a2:82:4c:ee:8e:79:71:8a:01:11:79:81:52:12:0e:
1c:a2:bd:56:fd:3d:c6:ae:03:81:69:92:3a:17:99:4b:26:3f:
70:68:12:3c:84:3e:f7:24:4a:d4:40:7e:4b:7a:bb:ed:35:1b:
24:e1:57:48:0f:6e:71:4c:79:f9:54:02:fa:83:98:41:6b:c9:
9c:11:00:80:9d:47:de:db:68:68:63:a0:cf:00:9b:41:42:2b:
4b:d8:7b:21:c3:82:c9:29:6a:cb:88:85:43:e1:19:50:30:ea:
ca:e3:c8:20:c0:10:ef:14:4d:95:d7:42:26:ae:16:a4:fb:0c:
37:5b:7b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:30:34 2025 by rpki-client