Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/MEk6COdLayDwspMkca7X6AtTbGc.roa
File: MEk6COdLayDwspMkca7X6AtTbGc.roa (raw, json)
Hash identifier: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=
Subject key identifier: 30:49:3A:08:E7:4B:6B:20:F0:B2:93:24:71:AE:D7:E8:0B:53:6C:67
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01954CAFBA7C8EB889FFFC322D5C32052649
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/MEk6COdLayDwspMkca7X6AtTbGc.roa
Signing time: Fri 28 Feb 2025 13:12:19 +0000
ROA not before: Fri 28 Feb 2025 13:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12874
IP address blocks: 185.146.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:af:ba:7c:8e:b8:89:ff:fc:32:2d:5c:32:05:26:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Feb 28 13:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30493a08e74b6b20f0b2932471aed7e80b536c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:d6:d7:a3:77:18:2d:fb:d0:82:42:4f:28:
96:fa:40:2e:8e:10:51:44:66:48:9a:09:f7:cd:50:
84:0d:0b:6c:ed:39:1b:2d:7e:9d:73:98:b7:ed:d3:
49:9d:b2:a2:56:42:1a:c7:aa:9b:df:ed:ec:98:9b:
0e:58:0e:c9:90:bb:e6:7a:1d:f9:e5:42:5f:88:16:
c6:be:23:5b:bf:ab:b5:90:f8:1c:a6:15:69:75:35:
26:76:e0:04:47:37:72:81:df:08:97:f3:fe:b5:a0:
6f:1a:d9:ce:28:6c:df:72:c1:c7:ad:be:4b:12:88:
4f:33:1e:7f:3d:fd:b2:f5:60:2b:ff:90:29:28:00:
8f:e9:bd:9f:43:77:a1:43:ad:5a:c3:d0:ad:f8:dc:
87:f5:2f:e5:d2:f4:a2:5e:3b:0f:11:81:2c:31:39:
ff:61:9d:cf:47:58:24:b2:a4:63:ad:9e:da:7e:7d:
78:d6:97:62:27:d1:c8:2b:e8:49:90:d0:d3:be:ae:
a0:4d:88:dc:1d:c7:2e:96:23:ce:ec:b6:6d:a6:ac:
0f:a7:16:ad:59:1e:72:74:7b:71:3b:6e:02:08:3f:
50:bf:4e:39:20:6f:71:32:cb:a2:9f:a1:43:1f:d3:
2a:9b:f3:bc:06:a5:0c:be:f9:af:93:84:84:a9:fc:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:3A:08:E7:4B:6B:20:F0:B2:93:24:71:AE:D7:E8:0B:53:6C:67
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/MEk6COdLayDwspMkca7X6AtTbGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.134.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e0:ae:8f:83:7f:b7:b6:48:9e:36:20:ae:c7:d8:22:b3:59:
ef:d8:93:3d:a4:a0:a2:8d:14:40:8f:09:f7:f1:b9:58:91:83:
40:fc:53:66:66:dd:74:ac:64:12:ba:e3:92:db:3c:68:a8:b3:
78:d7:17:61:12:b3:da:c7:38:3a:0d:53:9a:50:78:14:b7:e7:
47:20:4d:66:a1:2e:2c:db:ac:66:ad:6e:57:79:40:c3:ce:87:
3e:8c:95:a6:a7:f4:c4:94:bb:a7:f4:da:18:dd:69:e8:16:63:
ff:e9:1d:49:57:bb:0a:4d:36:18:23:87:e5:46:74:13:23:06:
cc:ef:87:c2:ae:e3:e5:f2:01:10:db:a7:e9:fc:4d:5b:83:dd:
0a:11:ce:72:7e:10:64:0d:6b:5d:26:40:b4:6e:29:63:68:94:
87:23:84:49:ed:59:fa:76:21:98:9a:10:2c:0d:68:c2:8b:f4:
75:13:92:db:2f:23:08:41:fa:62:86:e3:af:dd:aa:03:e1:e5:
79:80:d5:00:9f:68:69:4b:4b:eb:9e:4b:98:a8:8b:94:9a:96:
65:48:db:5f:42:cf:bb:e0:be:8a:47:a1:22:bf:6c:2b:b9:b8:
73:8d:d0:a5:4c:d9:1a:a9:0f:1b:09:32:7d:4d:10:ef:8f:8f:
c0:eb:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:59:49 2025 by rpki-client