Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/neX2MoGsrH8B_YW8P6u0bRQHpTA.roa
File: neX2MoGsrH8B_YW8P6u0bRQHpTA.roa (raw, json)
Hash identifier: R0pBtoL7OVYDCk4RiVwa4ZDNGgYBxm8WfoJ2QgcKQh0=
Subject key identifier: 9D:E5:F6:32:81:AC:AC:7F:01:FD:85:BC:3F:AB:B4:6D:14:07:A5:30
Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial: 019427488A7F19DC54BF6F979D3EA983AF6E
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/neX2MoGsrH8B_YW8P6u0bRQHpTA.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206381
IP address blocks: 45.88.227.0/24 maxlen: 24
91.237.151.0/24 maxlen: 24
185.186.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8a:7f:19:dc:54:bf:6f:97:9d:3e:a9:83:af:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9de5f63281acac7f01fd85bc3fabb46d1407a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:34:81:6b:1d:48:7b:6f:8c:8b:6c:01:ec:
b4:ed:48:c4:42:4f:94:0a:6d:e3:2e:54:b6:8a:37:
d3:e7:f1:64:4d:10:1e:53:34:47:57:56:d3:ff:82:
13:80:2f:63:cc:e8:b6:59:41:b8:0c:9f:24:d2:9f:
be:cf:e4:94:80:f1:27:2f:d5:b1:02:8d:bd:d7:6e:
95:8a:03:64:d7:13:ba:9e:ce:d0:fc:2b:40:56:4c:
57:b8:7c:6b:99:cd:30:b0:57:75:7d:7f:b1:1f:fc:
b1:67:15:c6:c2:86:15:d3:43:a8:cd:97:c4:4a:83:
5c:4e:16:c8:5b:f3:91:cd:7f:30:45:e4:30:a6:e6:
b7:c2:b3:b5:da:db:8f:da:03:9a:a6:d6:9b:df:f7:
f1:c1:d9:03:96:d4:17:77:c8:e2:37:c2:62:76:08:
51:42:dd:af:0b:6c:6f:90:81:d0:f2:bc:03:4e:7c:
10:89:ea:66:a8:68:64:06:ea:7b:27:e6:4e:5f:a1:
ec:dd:39:b1:4a:61:18:81:80:c6:66:5d:d4:f4:9d:
52:d0:c7:f9:a0:c2:8d:c8:9e:af:52:3f:b0:bb:e8:
d9:4e:6c:75:1d:bc:0b:f8:af:cd:9d:40:10:56:92:
0b:d4:75:01:c2:10:bc:23:6e:17:ea:ce:48:18:68:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E5:F6:32:81:AC:AC:7F:01:FD:85:BC:3F:AB:B4:6D:14:07:A5:30
X509v3 Authority Key Identifier:
keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/neX2MoGsrH8B_YW8P6u0bRQHpTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.227.0/24
91.237.151.0/24
185.186.40.0/22
Signature Algorithm: sha256WithRSAEncryption
13:a9:4c:94:cb:bf:a9:de:8a:7e:2e:16:38:b1:97:5f:7c:81:
f1:a3:48:40:e6:df:05:8c:30:3d:67:cc:72:db:25:35:7a:b4:
ad:b4:3c:53:02:e9:52:35:f3:af:07:b1:4c:60:a9:b8:73:ea:
7a:bd:0d:9d:8b:fd:9b:0f:2c:b8:64:c2:5e:33:83:82:8d:72:
ad:64:76:e4:60:f3:fe:3e:02:f0:57:3a:03:f6:ef:4c:d6:12:
58:1b:f8:39:81:70:1c:17:e1:da:46:c1:8a:fe:84:c4:fa:46:
4e:4a:65:51:83:b3:b6:c0:a8:1f:87:ac:fd:36:61:d7:39:0a:
78:18:30:0d:62:5f:7d:a0:bc:cc:69:84:16:e6:1a:5b:0d:0b:
af:fa:fb:b2:a5:d5:64:fd:7d:68:fa:7f:42:ce:aa:52:c2:28:
2a:17:0d:20:a5:0f:33:ec:83:73:61:a6:7a:e2:3d:52:6c:75:
d1:11:bf:68:d6:5b:72:f8:a6:4d:e2:4e:10:d9:e2:cd:0f:df:
14:db:8f:55:9e:aa:06:84:02:e6:bf:79:ce:e5:3f:2c:d9:04:
f9:a1:3f:00:52:5a:f3:10:2b:6c:50:2d:d6:27:1c:31:0c:b6:
fa:ad:bb:29:32:c4:ac:c9:39:e1:c5:47:ad:8e:08:66:44:c2:
23:35:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:17 2025 by rpki-client