Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/rMy8dPPnYigzc4tv_MpgYXZWjBU.roa
File: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (raw, json)
Hash identifier: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=
Subject key identifier: AC:CC:BC:74:F3:E7:62:28:33:73:8B:6F:FC:CA:60:61:76:56:8C:15
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 01942068175EF8A3DBFFD5D40A6F1C8DC3D1
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/rMy8dPPnYigzc4tv_MpgYXZWjBU.roa
Signing time: Wed 01 Jan 2025 05:48:00 +0000
ROA not before: Wed 01 Jan 2025 05:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202220
IP address blocks: 188.123.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:17:5e:f8:a3:db:ff:d5:d4:0a:6f:1c:8d:c3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acccbc74f3e7622833738b6ffcca606176568c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:92:7c:b2:88:bc:26:f9:56:ce:76:0d:d0:
03:db:5a:39:10:08:84:f2:ab:e7:5a:63:60:42:d9:
85:8c:64:69:c2:b2:a0:48:51:f3:cc:8c:a1:08:4d:
5f:22:9a:a7:ce:5b:9f:ef:05:27:f4:b7:35:ae:01:
8b:cb:6d:80:7f:57:7c:d8:16:7d:5b:09:87:1a:cb:
04:a5:3a:d0:c5:2d:70:be:af:0d:be:58:a4:11:07:
82:e5:42:c6:d3:56:e1:21:f8:a4:57:21:00:cc:c4:
3c:20:7b:a9:7d:10:da:9c:65:17:e2:a1:63:76:6b:
8f:22:72:c8:e5:40:61:ab:48:78:11:d2:06:73:86:
08:99:95:49:3d:b7:fb:9b:6e:34:04:c1:1f:96:63:
e5:42:8e:4c:9c:c5:6e:ea:cb:7e:4a:fe:29:ce:ef:
b4:db:2f:78:c5:59:ed:d4:16:c2:4b:62:67:0e:11:
e9:de:54:e5:62:ee:e3:02:24:2c:92:52:62:3c:63:
b1:f3:8e:dd:b7:2f:0a:b9:d5:4b:b5:ee:64:97:94:
09:f5:a5:d9:0a:89:e4:bd:96:37:24:5a:35:65:d5:
53:15:4f:5a:65:2c:3b:40:35:d9:38:61:be:3c:f6:
4f:53:e3:fb:d6:dc:6b:3d:c9:b1:b2:a1:6e:f1:86:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:BC:74:F3:E7:62:28:33:73:8B:6F:FC:CA:60:61:76:56:8C:15
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/rMy8dPPnYigzc4tv_MpgYXZWjBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.215.0/24
Signature Algorithm: sha256WithRSAEncryption
77:93:14:4e:61:52:8d:fe:e1:32:6b:7a:b4:ea:36:ba:79:64:
7c:54:c5:e4:bb:34:89:2e:ca:7c:6b:f9:a9:19:8a:df:4b:76:
bb:af:c1:8b:ae:d1:00:fa:7b:b1:25:18:33:29:d5:c6:c4:ef:
14:b8:82:b6:e7:8b:00:f3:1f:d7:45:8b:ad:18:3c:fa:d7:6d:
57:a0:8b:24:8b:0e:2a:7d:9a:3f:4a:44:94:2d:fa:3d:fe:13:
0b:29:10:b4:be:2a:f1:f8:5c:6f:5c:d0:0f:2c:c7:1b:d4:59:
04:0f:ec:44:f2:2e:86:83:75:5e:bc:5f:eb:1e:28:08:d5:cf:
b3:a3:35:17:86:11:11:12:b9:7a:83:50:d5:9e:53:d7:fd:00:
f0:98:94:95:b7:c6:79:d6:70:c8:28:84:2c:95:f0:97:68:02:
00:9f:55:e6:99:1b:10:a0:67:64:41:ad:7e:bd:4f:07:40:ef:
2b:f6:7a:18:1a:c3:d0:e6:39:eb:08:f0:60:d3:78:2f:d2:39:
bc:77:7d:55:af:6f:88:73:24:ee:3c:07:d5:a8:3b:12:aa:3b:
0f:ef:8f:b4:1b:d8:4d:b3:c7:8b:df:9e:9e:19:1e:3e:2e:77:
56:98:1c:74:9a:1e:bd:3a:f1:6a:fb:88:e4:2c:d1:69:4d:95:
16:cb:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:53 2025 by rpki-client