Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/mFp3zFR1T75g9VSJshunQuImDjc.roa
File: mFp3zFR1T75g9VSJshunQuImDjc.roa (raw, json)
Hash identifier: BipTnfO1xsn174nFqReyWGJxlVEfgezqCBk9woA8CoY=
Subject key identifier: 98:5A:77:CC:54:75:4F:BE:60:F5:54:89:B2:1B:A7:42:E2:26:0E:37
Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial: 0195B314A5FDBE065F7A7E7A26E4C917EB93
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/mFp3zFR1T75g9VSJshunQuImDjc.roa
Signing time: Thu 20 Mar 2025 10:23:49 +0000
ROA not before: Thu 20 Mar 2025 10:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213847
IP address blocks: 185.182.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:14:a5:fd:be:06:5f:7a:7e:7a:26:e4:c9:17:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Validity
Not Before: Mar 20 10:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=985a77cc54754fbe60f55489b21ba742e2260e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:6c:c6:f3:e4:d6:b4:c1:0c:84:37:99:42:
4a:41:f9:8c:72:04:e9:9c:ac:fc:6f:ca:83:b2:a4:
d2:d9:9c:d2:90:39:8e:93:2d:d0:11:57:33:15:1c:
58:26:10:d0:b4:65:aa:cd:87:b6:2a:f3:90:a6:1c:
1e:0e:c6:97:c4:36:8d:0b:f1:61:d1:72:87:8a:7a:
69:01:2c:14:0a:94:b1:e1:f9:45:75:f5:1f:e0:c1:
32:67:e8:19:4f:bf:f3:cf:32:8e:b2:1a:15:ea:da:
0a:56:5a:38:b0:b0:58:d5:4a:00:d6:0c:b0:dc:e2:
b4:ed:0c:1f:e4:06:41:15:90:c1:4a:22:f5:23:a1:
57:b3:7a:36:24:f8:59:2e:ac:56:57:b0:d2:be:6d:
40:e4:52:cc:57:80:54:f2:21:2d:e6:67:f0:02:60:
f1:3b:b9:aa:31:30:be:bf:48:4d:c1:2f:38:70:c6:
37:db:5f:e0:2d:f6:6e:27:4a:e3:f3:f6:e4:4d:3a:
aa:31:ce:32:86:9b:08:77:5a:63:b6:31:ef:ea:43:
20:08:d9:72:51:36:81:59:49:dd:f9:31:72:9f:b6:
0c:6b:95:37:37:a4:00:d1:9c:55:a2:2e:fc:2c:4b:
b0:df:b3:94:a2:c4:8f:a0:18:88:7e:f1:6c:a6:3f:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:77:CC:54:75:4F:BE:60:F5:54:89:B2:1B:A7:42:E2:26:0E:37
X509v3 Authority Key Identifier:
keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/mFp3zFR1T75g9VSJshunQuImDjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.116.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:6b:ad:65:a3:dc:07:e6:2a:08:80:3b:7c:cf:5e:ba:5c:bd:
9d:d6:dd:6f:d7:32:13:a7:c1:21:ae:db:ec:c9:d4:79:61:0e:
f6:b7:53:0d:39:f2:40:bb:99:03:97:3c:19:a6:88:8d:a1:21:
24:24:ab:b5:d0:31:60:d6:e4:18:0e:07:d9:b6:40:e6:f1:b2:
6b:e1:41:b5:5b:b2:8c:38:d3:f0:ce:d0:0a:f5:f1:74:04:86:
7c:5b:b0:07:d0:c2:40:d5:a9:d0:fc:49:06:87:5c:c0:f0:43:
60:6a:ff:88:09:7c:d6:71:28:5e:1a:aa:d4:57:32:f9:ca:02:
48:d2:ce:db:51:04:50:5f:a7:0a:89:ec:90:e2:7f:73:b6:ff:
21:3f:06:8d:ff:56:0e:77:6e:07:7d:c6:cf:77:15:c3:3d:c0:
42:37:07:fc:f4:44:aa:f7:d2:7a:87:5e:97:ed:e3:ef:27:c3:
58:0d:54:db:27:67:c0:68:3f:9c:b6:1f:13:8b:15:38:22:51:
c9:21:20:41:3f:fd:41:ce:3a:e9:59:71:84:7e:a2:bc:30:6f:
b3:dd:02:a8:be:e0:7e:8d:2b:1b:9b:1e:be:b6:e2:ed:bc:78:
cb:83:03:5b:00:ef:ed:c1:b2:25:21:cf:39:4d:6a:41:e7:b2:
53:0b:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:46 2025 by rpki-client