Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/mddXkjH3p_vL4vOQ0h8JV4B1WxA.roa
File: mddXkjH3p_vL4vOQ0h8JV4B1WxA.roa (raw, json)
Hash identifier: 9qLzR+8C4wkJn5IoUy5FHXOEqts6JcExi312TdCvl90=
Subject key identifier: 99:D7:57:92:31:F7:A7:FB:CB:E2:F3:90:D2:1F:09:57:80:75:5B:10
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 0196A521B072DA2D0B3CDEBC87AAC5FCF9B5
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/mddXkjH3p_vL4vOQ0h8JV4B1WxA.roa
Signing time: Tue 06 May 2025 10:26:10 +0000
ROA not before: Tue 06 May 2025 10:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207489
IP address blocks: 80.244.4.0/24 maxlen: 24
194.76.145.0/24 maxlen: 24
194.76.149.0/24 maxlen: 24
194.76.150.0/24 maxlen: 24
2a0f:ae40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:21:b0:72:da:2d:0b:3c:de:bc:87:aa:c5:fc:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: May 6 10:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99d7579231f7a7fbcbe2f390d21f095780755b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:81:8f:25:6b:03:c4:58:61:ec:95:ca:b7:
1a:16:1d:9c:02:bb:ed:96:be:90:b1:15:58:96:d0:
b2:b2:5a:59:cb:0b:3d:e7:ac:ae:19:6f:cb:90:ec:
db:a0:a2:09:ab:2c:b3:1c:08:00:13:7a:95:84:0a:
2b:d8:aa:c7:8a:a8:6f:23:d9:f5:58:7c:e9:02:fc:
11:f1:9b:b8:55:96:77:97:85:c9:2e:5b:f1:9e:2d:
90:9b:32:dd:e5:e4:bc:04:ae:00:16:cb:3f:4e:3f:
38:1b:bd:f8:d7:12:bd:aa:80:5f:7d:ff:cb:c6:e4:
7c:1a:3e:d9:e5:01:9d:48:98:69:5d:71:b2:36:1b:
1d:68:89:60:37:b0:2d:69:f9:36:62:9f:fa:dc:5a:
0b:b7:2d:6b:50:b5:b2:82:33:be:03:60:0b:91:c0:
67:1e:b9:d2:ad:51:76:33:f8:9e:ae:fa:61:90:9d:
ba:de:21:3e:42:12:ca:75:6b:e6:e4:d4:3c:8b:ab:
93:69:50:e5:b0:e4:1e:86:48:bd:10:a4:4d:b6:6b:
27:bb:85:af:b8:29:fe:7c:54:bf:88:da:66:95:1d:
81:28:09:c7:8d:90:fb:c4:21:9b:8c:ca:2a:d3:48:
71:95:a2:f4:ae:9e:5b:5c:bd:21:17:3b:8a:a5:42:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:57:92:31:F7:A7:FB:CB:E2:F3:90:D2:1F:09:57:80:75:5B:10
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/mddXkjH3p_vL4vOQ0h8JV4B1WxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.4.0/24
194.76.145.0/24
194.76.149.0-194.76.150.255
IPv6:
2a0f:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
4a:94:f5:c5:b7:d6:d4:56:5c:6d:4a:a7:5c:37:85:de:f2:a2:
41:89:fe:f0:73:b2:41:fe:bb:e1:fc:e7:77:18:e9:f4:5f:94:
c4:24:4c:8f:79:c4:0c:a7:08:e5:69:f1:30:4c:81:e2:c3:79:
31:f1:a1:ca:ce:5d:bc:21:07:a4:62:b8:b0:5b:6b:ef:03:e6:
c4:23:5c:4b:ea:de:a6:1d:2c:09:60:ea:ea:0d:4b:54:68:37:
45:ea:68:7f:77:e9:f3:f9:cf:2e:f3:7e:77:69:2f:e4:ef:db:
26:dd:24:7d:bc:fc:a2:d0:01:4e:67:10:65:ed:75:f0:c8:95:
9a:78:40:a1:4b:fa:ca:8c:0d:cc:77:b2:fe:36:06:e7:14:b1:
c8:51:61:b9:e0:4e:b8:e8:36:dd:76:21:8f:ea:3c:39:45:eb:
11:13:16:1e:51:bc:05:fc:a1:c6:bd:d2:fd:ce:f4:16:6d:e2:
a1:d1:ee:6e:12:8c:eb:f8:4d:4a:a6:f2:7f:94:eb:8e:04:17:
61:75:90:9e:ed:1e:ce:0b:28:dc:6b:0b:c9:1d:f0:c5:1b:68:
2f:13:f0:cb:f5:6d:4c:55:75:00:1d:90:99:a8:ca:23:58:87:
22:bb:af:2a:23:73:50:8e:e4:b2:e8:6a:1b:c5:64:7a:a5:74:
1d:b1:37:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:32:26 2025 by rpki-client