Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/ml8HfpgZooz4Fs5VNgkwYze5t_M.roa
File: ml8HfpgZooz4Fs5VNgkwYze5t_M.roa (raw, json)
Hash identifier: KgRvypNeE4qoLntupCEeIzNpWhk2E20WSo1RiDNCO2U=
Subject key identifier: 9A:5F:07:7E:98:19:A2:8C:F8:16:CE:55:36:09:30:63:37:B9:B7:F3
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 019422FB342124643419F91E9B6AB5D46D14
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/ml8HfpgZooz4Fs5VNgkwYze5t_M.roa
Signing time: Wed 01 Jan 2025 17:47:55 +0000
ROA not before: Wed 01 Jan 2025 17:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 192.109.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:34:21:24:64:34:19:f9:1e:9b:6a:b5:d4:6d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 1 17:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a5f077e9819a28cf816ce553609306337b9b7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:3f:ff:1a:39:69:26:9a:5e:8d:27:52:ac:
cd:29:8a:97:69:b6:af:bc:ed:fe:6d:c4:3d:4c:2b:
50:9b:35:75:37:68:05:2d:e3:fa:02:d0:fa:1a:00:
a6:9e:64:91:76:34:f0:e4:5d:e9:32:5a:7b:ff:69:
c3:1e:b2:8d:45:69:37:7f:56:0d:f1:02:f5:f7:b9:
24:17:8b:3b:08:f6:e8:f4:46:6d:4a:46:40:b8:09:
33:49:b8:40:69:01:10:63:75:36:de:ce:78:c3:2c:
ec:a4:04:64:da:69:d7:fe:6d:64:29:cf:d0:75:e2:
5b:2f:4d:da:8e:29:44:1c:eb:f0:84:e6:a3:fd:06:
a8:4c:58:8f:5b:86:5b:0d:ab:8f:8c:49:3f:03:85:
9a:74:ce:d7:b4:09:cc:b6:b0:02:8f:02:7f:9d:5f:
d0:85:e3:08:75:df:e7:8c:35:d1:bd:7c:61:c2:96:
6c:30:25:10:1d:2f:b3:77:28:5a:b3:d9:6a:6c:81:
ae:d0:a1:73:9e:5e:7d:f2:b2:c5:db:c8:e6:f4:ea:
55:4f:c2:b9:5d:f4:c0:78:f1:c2:b9:30:6d:c6:9d:
ef:6c:1e:98:e3:f3:6e:76:43:19:ae:94:8a:58:26:
4b:22:e6:46:d0:93:2e:d0:7d:4c:20:80:40:ce:39:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:07:7E:98:19:A2:8C:F8:16:CE:55:36:09:30:63:37:B9:B7:F3
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/ml8HfpgZooz4Fs5VNgkwYze5t_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c7:c3:a0:81:1a:a2:2a:6e:57:1c:4c:77:19:de:c4:9e:70:
a0:82:c9:eb:34:0d:33:5e:76:6b:b0:3d:36:8d:88:48:3f:e9:
a1:f4:ca:40:44:1e:7a:62:70:c3:6a:f8:38:78:de:72:23:d3:
ec:35:ec:47:cd:f5:a4:16:f4:97:05:5e:01:06:f7:ee:8f:d3:
1d:92:8e:2c:a1:77:a0:48:9c:be:74:8a:7e:92:d8:5c:34:e3:
dc:57:29:0e:fc:25:71:6e:2b:28:09:00:44:b9:25:62:8b:68:
dd:85:80:c1:26:d6:e7:15:e4:a5:db:e9:51:0b:4b:51:a8:d2:
3f:60:cf:2e:27:27:3a:66:b9:26:d0:1c:50:b9:72:52:57:75:
70:50:d0:74:a5:22:c7:70:9c:50:e1:94:5d:7d:cf:a5:a4:c1:
4d:cb:75:01:f7:2d:c1:6e:00:7e:9d:d0:b5:71:2c:04:2e:32:
33:72:fe:ff:0c:65:34:58:94:51:6f:77:3d:dc:f9:86:03:06:
89:cb:20:98:aa:1e:bf:6f:65:46:27:d8:76:0a:3b:fa:41:b5:
1f:7e:5c:74:65:4b:08:ff:ce:7b:ca:fc:b3:e8:3e:fa:c5:ce:
ca:38:ca:5d:a6:a7:29:5b:66:11:a8:78:db:a7:55:05:59:70:
86:5c:73:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:19 2025 by rpki-client