Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/m2VUPycW3p7r44HBBcUdcacohGQ.roa
File: m2VUPycW3p7r44HBBcUdcacohGQ.roa (raw, json)
Hash identifier: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=
Subject key identifier: 9B:65:54:3F:27:16:DE:9E:EB:E3:81:C1:05:C5:1D:71:A7:28:84:64
Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial: 0194214414664CF5F1A47F5107F70AFBF642
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/m2VUPycW3p7r44HBBcUdcacohGQ.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29682
IP address blocks: 193.22.0.0/24 maxlen: 24
2001:67c:21b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:14:66:4c:f5:f1:a4:7f:51:07:f7:0a:fb:f6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b65543f2716de9eebe381c105c51d71a7288464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:9b:b4:05:10:7c:de:b2:a1:c5:c4:88:fe:
ac:53:87:38:1e:ef:3c:95:62:ac:84:40:d8:a6:21:
03:34:b7:67:4e:b1:bb:5d:09:7a:79:78:df:5b:99:
8b:95:c0:09:f7:25:27:2a:8c:52:77:55:dc:51:ef:
73:05:e8:9d:7b:cc:3e:2e:83:f2:cb:20:54:ce:b8:
fb:f5:f2:4e:1d:dd:ad:8a:77:7f:2e:30:a3:e6:79:
8a:9b:5c:91:9f:70:fc:d3:b7:e6:4c:da:fb:fc:6f:
c3:d1:a8:be:bd:ec:0f:90:12:8a:39:d5:5a:c8:e4:
ff:2f:86:fe:00:cc:db:68:52:28:6d:04:52:9e:37:
8c:30:41:45:18:e7:d6:49:f5:a1:aa:c5:65:79:38:
6e:4a:07:de:8b:ed:c2:22:78:24:d2:e5:d8:60:6a:
70:d3:4f:2f:65:bb:24:9c:21:b6:74:75:85:71:40:
8f:d9:0c:20:fc:8b:de:7c:52:55:5b:a0:f7:a0:e8:
87:29:d0:f1:a2:ce:8d:5a:e1:58:a7:24:1a:d0:d3:
7f:70:e1:e4:d6:e7:85:f1:4d:64:a9:e4:6e:a1:b9:
2d:7b:68:5d:87:14:eb:19:89:39:dc:96:3f:9d:03:
f5:da:be:ed:db:94:84:62:d9:40:44:e3:8d:73:3b:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:54:3F:27:16:DE:9E:EB:E3:81:C1:05:C5:1D:71:A7:28:84:64
X509v3 Authority Key Identifier:
keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/m2VUPycW3p7r44HBBcUdcacohGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.0.0/24
IPv6:
2001:67c:21b8::/48
Signature Algorithm: sha256WithRSAEncryption
83:28:fa:e7:21:e5:52:c5:6f:5d:52:1c:da:9e:6b:30:4c:67:
cb:8f:a1:3d:6a:01:ee:29:b1:d8:4e:2f:25:ff:63:d5:0b:8e:
47:e6:e2:fc:f7:7e:db:b3:50:b7:5d:5d:7d:4f:dc:39:54:6b:
1f:0f:6b:25:ce:53:1e:d0:c0:c7:95:68:bf:67:93:db:80:05:
96:da:10:12:2c:ee:dc:25:c5:b9:f9:fc:3c:11:ca:18:16:c9:
03:3a:33:fa:09:94:d8:c7:39:d6:8c:c0:51:e8:92:a3:8e:b5:
90:2b:9c:92:bf:45:51:96:47:13:13:ce:4f:90:89:c1:bc:0a:
73:fa:84:85:80:ee:c8:54:49:9f:d9:ef:d8:53:f9:75:3a:0d:
9e:a6:75:76:b1:99:ad:5d:f8:58:71:0f:5d:04:87:33:bc:fb:
dd:97:f4:76:cd:1c:e5:bf:9d:2a:29:01:d6:b7:6f:31:6e:14:
02:2c:9a:6c:b8:72:94:61:6f:2e:90:98:8c:3b:9f:20:6c:66:
77:d5:59:d8:d4:af:f0:69:b2:a3:bb:04:c0:ea:99:a0:8e:3a:
bf:69:10:5b:e4:d3:09:59:a5:20:45:d0:c8:b6:32:42:3c:23:
e3:e7:4d:38:c8:03:d8:1f:b3:ba:6b:63:bd:70:bb:60:30:0e:
ed:9b:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:24 2025 by rpki-client