Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa
File: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (raw, json)
Hash identifier: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=
Subject key identifier: 31:BE:23:EE:94:F0:9C:77:45:8A:CE:58:84:2D:1C:5B:08:46:7E:FB
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019427B576EA994E1A31D3489C9DEB923014
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 91.209.254.0/24 maxlen: 24
91.221.58.0/24 maxlen: 24
91.221.59.0/24 maxlen: 24
185.156.84.0/24 maxlen: 24
185.156.85.0/24 maxlen: 24
185.156.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:76:ea:99:4e:1a:31:d3:48:9c:9d:eb:92:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31be23ee94f09c77458ace58842d1c5b08467efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:bf:c2:0d:d7:65:50:7d:22:33:dd:b6:7a:
4e:48:ee:50:e0:5c:75:d1:48:36:96:d8:80:b8:3e:
0a:c0:d1:38:de:84:20:20:8c:24:fc:5b:c4:f2:8e:
df:1c:cf:35:64:47:fb:24:f7:10:df:09:5b:38:96:
71:d9:30:bc:79:ac:22:4f:ab:a5:ae:35:66:a4:31:
70:ba:f1:b0:4e:4c:60:3a:23:f4:32:27:0f:36:ec:
51:9e:af:09:3c:3e:eb:00:7f:3c:8b:57:1c:e8:9d:
ed:80:e6:e0:24:95:c8:d6:1f:66:6c:60:0c:00:8a:
d8:02:22:f7:0b:86:39:5d:16:65:d7:60:3d:cd:e0:
44:f3:70:7c:a5:ef:30:36:38:25:73:fa:32:0b:ae:
09:1e:81:5e:57:16:db:a9:a8:68:ee:91:65:70:f6:
16:43:78:1a:2c:a4:b7:dd:89:09:4b:d8:a8:80:25:
db:be:1b:9a:ea:ec:36:d6:5e:70:86:20:99:2c:2e:
1b:a6:88:e3:dd:c5:d7:27:87:38:67:f4:37:e4:81:
96:cc:1a:42:b7:8b:cc:2d:bd:b2:36:82:29:70:cf:
d2:dc:64:ff:ff:1b:27:df:75:45:54:e0:97:fe:f9:
f8:5a:87:31:3a:7b:1d:bf:ce:4d:ae:f8:e1:1e:e5:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:23:EE:94:F0:9C:77:45:8A:CE:58:84:2D:1C:5B:08:46:7E:FB
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.254.0/24
91.221.58.0/23
185.156.84.0-185.156.86.255
Signature Algorithm: sha256WithRSAEncryption
0d:e2:f2:a9:eb:86:fb:ea:ff:20:37:be:4d:9a:16:fd:b4:ce:
fd:39:29:2c:2d:6e:84:03:16:13:af:cb:d0:38:b5:04:ad:ac:
d9:c9:02:b0:3f:77:97:e2:10:22:cc:cd:cb:dd:21:e2:39:ff:
4c:86:30:ba:d4:ab:e5:41:27:86:55:7d:b8:ef:e7:14:5b:20:
4a:3c:f4:3e:87:90:a0:9c:57:22:6a:4a:7e:65:4d:87:46:2f:
1b:85:ca:eb:95:f7:17:8c:60:20:80:f9:ca:ca:43:05:56:2a:
9d:b2:be:4c:88:dc:d1:64:ad:7a:8b:1f:d3:3a:59:7d:38:a0:
70:cd:c5:3a:0a:1e:2e:3a:f2:05:42:8b:56:b7:cf:9a:87:61:
12:83:17:fd:62:3d:f8:98:cc:46:8d:c1:dd:1e:bc:c1:fc:af:
87:f0:72:f5:fa:7b:f4:09:df:35:2e:db:b6:eb:74:9f:33:cd:
c6:15:64:63:1d:68:a6:18:23:d4:0d:56:1b:0f:65:58:d9:1b:
6b:43:58:dc:48:5d:bf:b4:d3:c4:12:18:a2:d0:6e:c1:48:85:
b2:f9:87:b4:48:d2:6c:fb:7d:17:fe:36:1d:17:79:b3:1a:2f:
62:66:49:f2:f6:56:54:b0:26:0c:d1:6d:3b:62:31:d2:d8:9f:
73:eb:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:46 2025 by rpki-client