Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa
File: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (raw, json)
Hash identifier: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=
Subject key identifier: 99:47:CC:11:A4:18:F2:AD:60:65:28:F3:4B:18:BD:5C:81:A2:B1:E4
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019423D74643EF31D3EA351337F37D59C127
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48024
IP address blocks: 192.169.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:46:43:ef:31:d3:ea:35:13:37:f3:7d:59:c1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9947cc11a418f2ad606528f34b18bd5c81a2b1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:18:79:b1:9a:94:5b:45:49:56:50:c3:93:
5d:c9:42:0a:06:71:49:af:cb:9d:cf:9b:21:f8:ac:
86:83:14:6e:db:3b:5f:9b:49:7f:ac:09:14:6f:96:
75:68:f5:8f:1e:69:70:d4:36:31:1a:8b:1c:e9:9d:
7c:2e:8a:c4:84:37:c7:42:ec:9c:1c:82:d6:7c:e7:
7e:0a:de:87:d7:a4:c5:1f:95:85:02:52:9d:51:83:
43:ef:0f:99:f3:d1:39:dc:3f:7a:6b:da:5a:38:e8:
71:77:48:36:75:bd:50:d0:1c:5b:a5:f2:31:b8:ec:
2b:65:34:23:46:55:cf:d7:e9:74:a0:7c:60:8d:49:
a5:16:25:a0:98:22:53:be:d3:57:e4:6c:ac:e2:71:
b7:d5:b9:78:c3:d8:c1:30:1c:e5:86:44:b7:d0:62:
60:8f:7a:f4:95:db:06:b3:e0:d1:2f:1f:00:03:3a:
61:43:0c:9b:ba:f6:43:b8:69:d2:bb:ba:89:6b:9d:
52:64:ca:fb:2c:83:36:b6:f3:2c:f2:47:b9:90:9d:
6e:f7:c8:a3:04:08:e8:1f:b4:ff:b1:fb:e5:16:c7:
68:05:67:20:e5:bd:32:a6:89:f7:f6:d0:be:1f:f6:
14:35:31:93:b3:b8:fa:d2:1e:d9:06:fa:b3:a5:ba:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:CC:11:A4:18:F2:AD:60:65:28:F3:4B:18:BD:5C:81:A2:B1:E4
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.169.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ce:66:3d:80:33:ee:37:a9:ac:03:6f:d6:b3:12:7b:b3:52:
df:ce:8f:98:da:55:9d:1d:92:7e:72:18:bb:c3:90:37:2d:6d:
d8:e2:4b:47:57:c4:3d:7d:9e:21:fc:2d:38:38:2e:55:8f:b5:
d8:12:e1:07:80:07:fd:be:59:4e:25:eb:c3:b7:e6:ff:56:d2:
5d:e7:f5:7b:1d:e5:f4:74:0d:b2:68:de:0a:da:d1:4e:e7:78:
24:74:b9:d7:86:41:fb:23:62:8c:c5:99:b2:47:1b:ea:82:89:
fa:2f:9a:12:36:3c:5a:b8:6c:b5:ce:9f:99:f1:04:12:c3:a3:
9a:6f:d2:5d:df:55:3f:dc:ce:21:02:0b:de:67:da:97:d0:36:
a5:a6:87:9f:64:6b:6d:55:a4:c8:b7:fa:1d:2c:6b:23:1e:d7:
73:2a:78:bf:4b:ea:ae:24:03:33:f4:ef:8a:31:06:7c:7d:ab:
ed:00:f0:7c:31:c1:79:2f:59:6d:17:54:9d:f2:bd:1d:bd:1b:
8e:ef:0f:93:ee:ec:87:73:af:c5:50:af:43:2d:60:20:a9:03:
9c:ac:65:ea:98:44:12:4a:15:7b:e9:a5:b5:24:0d:ff:2b:a5:
7c:d2:a1:d2:03:f2:ff:e5:0c:54:fd:5c:83:ca:60:3b:dc:93:
7b:04:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:05 2025 by rpki-client