Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m_F3utVEpi0titUYAX5OysgZNPw.roa
File: m_F3utVEpi0titUYAX5OysgZNPw.roa (raw, json)
Hash identifier: snp6W47RunI9xMiq/h6qMPo621nhGwDpzrRZhSmdhec=
Subject key identifier: 9B:F1:77:BA:D5:44:A6:2D:2D:8A:D5:18:01:7E:4E:CA:C8:19:34:FC
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01968B98D30AA6C45F7969B5275365E94BF1
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m_F3utVEpi0titUYAX5OysgZNPw.roa
Signing time: Thu 01 May 2025 11:26:10 +0000
ROA not before: Thu 01 May 2025 11:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 45.129.1.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
88.218.72.0/22 maxlen: 22
91.188.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:98:d3:0a:a6:c4:5f:79:69:b5:27:53:65:e9:4b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 1 11:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bf177bad544a62d2d8ad518017e4ecac81934fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:a0:9a:67:df:c5:9b:10:28:08:47:29:cf:
c2:a7:c6:95:5d:d2:fc:dd:4b:b8:31:a0:74:12:1a:
5a:09:e1:e8:0a:ac:21:7a:d2:03:a7:e6:46:8c:38:
c2:4e:1b:6f:b7:13:75:8c:78:c4:dc:d3:0f:d2:7b:
90:f6:91:fa:a5:88:ce:e4:58:29:e3:80:56:4c:2f:
77:75:6b:a9:b9:f2:a8:96:91:e6:61:6c:ab:e5:53:
f2:2b:38:c5:04:5f:ef:14:ec:4a:ab:a0:4c:91:12:
1b:51:10:18:46:ff:6d:45:68:60:4a:7e:1c:be:52:
45:22:fa:ff:17:f1:7e:00:33:97:31:1f:ee:46:ab:
3c:ae:20:72:28:66:ee:5c:69:02:17:5a:87:e7:5a:
fb:4f:5c:64:2a:ee:1f:44:d7:ab:ea:9b:f8:a1:2a:
49:a6:5f:d9:e9:12:e4:ef:5e:65:06:45:a1:10:71:
68:f9:e1:16:69:4a:9c:04:5f:18:23:7d:83:aa:72:
9d:04:16:94:d7:2b:bf:78:b9:91:5e:4a:e1:37:82:
ec:d8:9e:50:d6:67:5c:60:17:fe:c9:55:3b:2c:f3:
1c:8b:7e:c0:76:d0:32:eb:39:ff:4f:e2:80:02:27:
41:f0:fc:58:3f:73:2d:2e:39:34:a3:71:58:ed:3a:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:77:BA:D5:44:A6:2D:2D:8A:D5:18:01:7E:4E:CA:C8:19:34:FC
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m_F3utVEpi0titUYAX5OysgZNPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.1.0/24
45.138.156.0/24
88.218.72.0/22
91.188.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:03:9a:b4:2a:d2:f7:2e:f3:86:c0:30:d7:5a:60:0d:d5:f9:
d5:24:7d:6d:95:1e:a7:27:7a:9e:ac:fc:b0:fe:90:44:9b:4b:
c3:59:7d:54:69:0c:e1:d4:61:b9:53:37:29:27:06:67:18:b6:
03:43:36:db:f1:ae:56:8f:98:7d:d9:4c:af:e3:d2:5f:88:d1:
17:2c:06:dc:29:7e:1f:e0:28:ae:7d:f9:e4:09:38:fc:25:1f:
13:8c:04:c8:0f:d6:d0:75:a7:86:3f:46:5b:87:31:ca:70:0f:
7c:03:92:d8:7c:2f:91:db:c8:bd:65:50:d8:e8:34:ec:5b:84:
5a:3c:17:3b:25:ec:c9:a8:fa:fb:7a:19:c0:03:88:39:90:c7:
c2:36:d6:c2:56:20:8c:52:eb:2e:fe:f4:0c:56:bf:66:05:37:
c1:f1:af:7b:5e:15:3c:09:82:3e:77:79:ef:2a:ab:95:de:11:
bd:d5:50:16:82:1d:cb:c3:67:6b:b6:e0:ba:90:4e:4d:17:ec:
01:1d:26:a8:8e:3b:2e:56:1d:89:34:03:68:88:76:6a:d9:67:
72:6f:b1:1a:7b:e2:90:79:a7:dd:19:00:e2:8d:82:dd:2f:52:
2a:d4:04:e1:21:f0:55:ed:a2:28:e5:e8:07:05:0b:54:7a:14:
6a:4e:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:21:42 2025 by rpki-client