Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/CMHg46_N_Yzu5cDNrodsWcXH1qs.roa
File: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (raw, json)
Hash identifier: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=
Subject key identifier: 08:C1:E0:E3:AF:CD:FD:8C:EE:E5:C0:CD:AE:87:6C:59:C5:C7:D6:AB
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019426D9610C8EDBC8A22CFFE323EF51B8D7
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/CMHg46_N_Yzu5cDNrodsWcXH1qs.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57186
IP address blocks: 185.182.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:61:0c:8e:db:c8:a2:2c:ff:e3:23:ef:51:b8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08c1e0e3afcdfd8ceee5c0cdae876c59c5c7d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:ff:77:55:61:d2:25:37:15:df:c6:6e:b8:
6d:45:45:06:37:da:08:80:d1:d7:6e:bb:cc:a9:47:
16:4d:b0:f8:46:b3:23:71:74:14:5a:54:e3:ec:af:
11:8d:cb:55:73:15:c4:82:8d:d3:d3:f1:a1:c0:61:
fa:5f:5c:45:b6:98:7a:e8:45:0f:38:9b:ae:ea:77:
25:f7:98:47:dc:78:f9:e9:2a:79:8f:83:63:24:4f:
69:c5:d2:58:b2:b6:4d:58:42:e9:b1:c0:d9:19:25:
92:d4:df:8a:d1:68:f8:4d:1f:47:ed:8b:2f:69:3e:
1a:84:f0:3a:76:7e:cb:6d:5b:d4:41:4f:80:e8:b8:
62:8d:bb:06:c2:60:7b:72:52:39:fa:24:e5:eb:c6:
2c:bd:11:2c:f7:fd:be:d7:02:36:8a:33:e6:16:4d:
4a:5c:1d:b8:2c:80:5b:d7:db:04:d6:dc:9b:11:16:
fe:8f:29:81:60:8d:8e:bb:09:11:30:56:8d:23:0b:
62:f4:90:c2:ac:e8:71:dc:e5:8c:39:c6:32:20:4d:
85:06:21:64:a8:a0:37:5f:18:96:ab:4a:57:56:83:
07:81:e1:4d:be:af:86:91:09:ba:7f:ff:c6:44:e8:
41:ef:8c:c4:0e:7b:a9:e6:e5:51:99:ff:45:90:b5:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:E0:E3:AF:CD:FD:8C:EE:E5:C0:CD:AE:87:6C:59:C5:C7:D6:AB
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/CMHg46_N_Yzu5cDNrodsWcXH1qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.108.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cb:33:06:c5:f0:7c:85:da:88:ca:25:5b:ed:32:c9:95:51:
d9:23:2c:11:40:61:cd:7a:d1:74:fa:c8:c3:02:58:bb:b2:bd:
ea:bd:98:9d:bd:4e:1f:14:1a:40:bc:b4:a7:bf:54:12:7f:3d:
c5:9d:11:a9:e3:6c:7f:83:2f:34:32:70:7a:2c:e5:49:5d:e3:
97:7e:c9:59:6d:d7:73:7f:37:db:51:13:06:c9:20:f0:55:9d:
63:b9:e8:72:90:44:fd:53:2e:86:70:fb:21:47:3f:c2:3f:fa:
02:6c:a4:34:75:69:56:26:e8:fa:1b:bb:f2:eb:33:a5:e2:63:
23:9d:1b:b0:95:47:ad:e7:3e:98:d7:f7:6f:fe:73:c4:49:31:
e5:35:5a:14:78:49:e9:a5:7c:9d:d8:a6:94:84:ac:d7:83:78:
18:f6:96:5e:89:a9:bf:0c:61:ef:ab:aa:d5:8c:6b:fc:17:88:
03:e3:8d:60:5c:b6:14:2d:51:26:9b:40:fc:b8:a8:5c:c4:e1:
65:c2:c3:d0:af:52:d6:22:36:b2:5f:8e:15:0f:00:3e:74:2d:
e6:36:25:bf:6c:28:03:61:e1:94:13:16:97:4b:55:24:e3:6b:
6e:dc:7a:3f:ad:d1:f7:3c:b1:aa:3b:d2:3b:ff:56:d4:36:33:
ef:81:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:21:52 2025 by rpki-client