Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/bMolsew2aNfnwVEKpwDy2jyM58c.roa
File: bMolsew2aNfnwVEKpwDy2jyM58c.roa (raw, json)
Hash identifier: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=
Subject key identifier: 6C:CA:25:B1:EC:36:68:D7:E7:C1:51:0A:A7:00:F2:DA:3C:8C:E7:C7
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019424454C2F132D7001A3C199F0A1A4B3E4
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/bMolsew2aNfnwVEKpwDy2jyM58c.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 89.35.2.0/23 maxlen: 24
89.35.174.0/23 maxlen: 24
89.191.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4c:2f:13:2d:70:01:a3:c1:99:f0:a1:a4:b3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cca25b1ec3668d7e7c1510aa700f2da3c8ce7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:58:d3:03:75:49:ae:fd:4b:63:0f:56:56:
16:83:b5:db:32:cc:cc:36:b6:7d:6d:dc:d3:f5:61:
39:af:dd:38:77:a0:a9:ec:fd:75:a7:d6:f5:bd:70:
1a:00:af:c7:ff:9c:0b:88:cd:d1:e8:61:1d:c5:79:
77:0b:82:8a:2c:d8:cc:23:3a:e9:2b:a0:91:fc:61:
c6:8c:90:2b:3c:71:6a:9f:94:bf:e0:6e:71:f9:9f:
ab:aa:f6:3c:e3:c9:93:b9:9c:05:df:82:a2:02:5b:
b6:71:73:7c:52:4c:fd:e8:54:6c:63:9c:84:f0:07:
36:ce:02:72:c6:d9:5d:0d:ed:ca:1d:35:46:73:e6:
cc:37:ef:e2:98:3d:7c:ba:2d:ed:39:d3:c1:4b:cb:
7c:90:36:45:60:e9:47:3b:a8:3d:05:26:49:1f:4a:
fa:dc:6a:86:72:4f:de:b8:66:b7:6a:02:7c:04:98:
3e:bc:8c:01:d8:eb:e3:90:68:cf:d9:c0:d5:65:12:
86:1e:94:36:24:cc:1e:fb:3a:e3:ee:d0:52:49:e4:
4a:3e:97:7e:02:44:38:37:e0:5a:07:aa:ad:3d:90:
46:eb:ab:ce:62:63:22:20:2a:2a:1e:2a:83:94:9a:
06:4e:d5:0d:83:fa:5f:4c:00:8e:40:cf:cc:78:ab:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:25:B1:EC:36:68:D7:E7:C1:51:0A:A7:00:F2:DA:3C:8C:E7:C7
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/bMolsew2aNfnwVEKpwDy2jyM58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.2.0/23
89.35.174.0/23
89.191.64.0/19
Signature Algorithm: sha256WithRSAEncryption
af:e5:38:f0:2a:f6:59:61:f8:04:e5:f5:81:92:1c:22:6f:da:
cf:b4:21:ba:f4:8e:43:db:ad:d3:6d:f5:bb:f0:f0:65:dd:74:
9e:46:2e:b8:d9:a1:01:03:86:48:b2:56:54:0f:e0:a3:26:18:
f3:27:9e:fa:41:b0:35:a7:c3:46:7f:57:7c:44:e2:f5:31:07:
47:63:a4:95:aa:ec:79:f9:41:25:57:10:fe:9a:df:82:06:0c:
cd:91:a8:17:0a:01:84:41:f8:b4:26:1d:d4:c8:e5:de:38:16:
7b:bd:25:73:cd:05:a4:9d:6b:18:ce:5b:7d:7c:57:eb:b3:bc:
f0:fe:d0:0f:57:a2:31:7f:31:6b:b8:bd:52:0a:59:33:77:9e:
9d:6e:5f:96:0d:86:40:9a:be:b6:a2:10:57:d8:87:24:6c:75:
d3:da:8d:4a:20:b3:4e:dc:4a:6d:04:40:85:31:d2:01:e0:ee:
c7:e5:9f:34:1f:15:4b:ad:8e:3f:25:c5:f5:da:5b:41:f8:42:
a3:4c:6d:9a:3a:bd:6d:5f:b1:e8:7d:b0:a6:7c:5a:9c:b5:c0:
38:b1:02:06:b1:5f:b5:fc:50:7c:8d:c6:91:3c:9b:9f:c7:6d:
7a:cd:21:24:ad:05:15:ca:d4:1d:1f:de:f2:3a:5c:ba:48:a1:
60:0b:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:41 2025 by rpki-client