Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/m7lMiWju66nWi4ie7Vt74icILpg.roa
File: m7lMiWju66nWi4ie7Vt74icILpg.roa (raw, json)
Hash identifier: x3s/oVaZakSkOMeloqbQaRy3FaKUq2eo4wHClY5zjYc=
Subject key identifier: 9B:B9:4C:89:68:EE:EB:A9:D6:8B:88:9E:ED:5B:7B:E2:27:08:2E:98
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019639DA9CC9CE6F3EF73A147DE06A65D827
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/m7lMiWju66nWi4ie7Vt74icILpg.roa
Signing time: Tue 15 Apr 2025 14:29:10 +0000
ROA not before: Tue 15 Apr 2025 14:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212338
IP address blocks: 194.39.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:da:9c:c9:ce:6f:3e:f7:3a:14:7d:e0:6a:65:d8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 15 14:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb94c8968eeeba9d68b889eed5b7be227082e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:4e:01:7f:0a:5e:8e:9d:04:f4:ff:75:0f:
c8:e1:35:e3:f6:08:7a:49:b7:00:b1:c2:f6:b7:e2:
23:46:73:db:2b:7c:91:7b:6e:8e:fa:55:92:18:19:
67:a3:93:78:2f:11:a5:c1:0a:b0:78:0a:cf:c9:a4:
83:54:07:c8:3c:eb:55:20:3a:66:b2:06:8d:bf:58:
4d:2c:e5:0c:81:1d:17:f1:7e:d3:f4:3a:bb:74:b6:
ee:1d:70:00:0b:74:f8:6a:75:5a:13:88:ac:b9:dd:
43:5b:46:d0:68:fd:fa:27:b6:6e:ab:70:98:b7:1c:
dc:eb:e7:bd:20:66:16:db:c3:88:a8:68:26:8c:1a:
19:62:64:6a:75:87:0c:fd:67:96:b9:3c:04:04:90:
9b:dc:82:27:c6:64:dd:ed:68:34:8f:44:7f:04:4b:
d5:71:13:9d:0f:b9:f3:81:0e:67:20:cb:a5:7d:6e:
a2:d7:c4:be:47:5f:6a:3a:13:4a:e9:19:79:7d:5a:
c7:b0:e5:d3:3c:70:b9:c2:9f:2c:a4:52:a1:dc:78:
06:cc:22:2a:f0:07:84:99:e6:75:47:ee:26:58:63:
9e:cc:ab:db:3f:3d:d1:aa:a5:d3:75:57:d1:b7:07:
6a:14:4c:da:04:89:fb:ff:f2:d4:ea:b7:c7:e5:50:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:4C:89:68:EE:EB:A9:D6:8B:88:9E:ED:5B:7B:E2:27:08:2E:98
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/m7lMiWju66nWi4ie7Vt74icILpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:76:96:30:84:6e:30:59:29:5f:2b:6d:a0:e6:5f:09:a7:9a:
2e:26:31:1e:a2:00:e1:6c:07:08:cb:47:ef:11:d0:e6:88:c1:
0f:95:60:ca:42:4f:77:e0:44:74:4c:57:17:88:42:9b:a4:ac:
17:6e:80:b1:fe:ab:e1:ed:17:29:ea:c2:4c:ed:8b:43:80:c0:
af:7e:b9:f6:d6:a9:fe:1c:2d:0a:e2:12:ba:1b:33:e9:64:0e:
95:03:e4:48:d3:83:16:6a:a0:87:b5:51:c2:5f:90:98:99:89:
34:be:5c:f0:c0:e5:9a:89:c2:a5:41:13:2f:81:15:9a:6e:fa:
e4:fd:e0:14:28:f8:b6:07:cf:fa:d1:63:f9:49:de:1f:8f:20:
be:d3:b4:9d:64:ec:40:21:84:1d:f7:4d:0f:77:0e:91:b0:39:
95:da:13:ec:52:ef:35:06:3e:de:08:f4:91:d1:c4:c7:43:a5:
8e:3d:3a:4e:25:89:0b:f3:14:11:3b:cd:88:65:9b:23:03:4a:
db:cc:5b:bf:2e:ef:79:a2:a5:e3:ed:43:aa:67:ee:df:16:2d:
a0:77:a5:61:8a:18:84:c9:1f:3d:2c:11:54:0d:aa:02:96:c4:
56:cf:47:f3:ea:18:8e:0e:76:eb:f3:ba:19:85:39:95:59:dd:
71:53:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:39 2025 by rpki-client