Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/MYNb4kXenjrBnIvjPCoM8j_fi5o.roa
File: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (raw, json)
Hash identifier: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=
Subject key identifier: 31:83:5B:E2:45:DE:9E:3A:C1:9C:8B:E3:3C:2A:0C:F2:3F:DF:8B:9A
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019427B610C07D928A6349B955C77E7CBB8E
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/MYNb4kXenjrBnIvjPCoM8j_fi5o.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45102
IP address blocks: 5.181.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:10:c0:7d:92:8a:63:49:b9:55:c7:7e:7c:bb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31835be245de9e3ac19c8be33c2a0cf23fdf8b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:c7:94:5e:d0:1b:13:92:ff:3b:2c:96:a9:
67:da:76:72:b8:db:35:20:0c:6d:b5:21:d8:21:79:
53:55:67:1c:11:ab:f9:8a:64:f5:65:79:71:40:3d:
bc:1c:0a:80:b0:90:f3:45:17:f3:ff:b7:7e:ec:37:
ed:5c:dc:e9:53:af:01:74:d5:22:af:f6:65:27:85:
7f:87:97:59:6a:6f:68:21:a0:e7:22:d0:f5:16:6e:
c4:2c:25:32:bb:0f:47:6e:83:c8:3a:c0:e2:fc:a1:
c5:21:a2:d8:e6:25:a5:e6:f4:8c:f5:a6:98:3b:62:
61:56:42:71:be:25:2d:04:c0:91:83:0c:ee:dc:df:
0a:1d:91:52:c9:c6:6c:c5:82:86:74:5f:e8:96:63:
54:be:3b:8b:ff:17:8f:5d:c5:54:60:de:79:b4:ba:
38:58:02:62:06:dd:84:50:5f:d7:a6:59:fe:17:53:
91:75:38:9a:6f:d6:97:41:49:c9:9e:61:87:23:3b:
f2:4f:be:c4:05:ca:65:2b:72:1a:dd:9c:38:63:e1:
a0:31:12:62:62:4f:d4:35:e8:2c:77:96:9a:82:d7:
88:7a:c9:47:13:8f:4e:bd:87:35:58:38:88:71:ea:
0f:67:01:ff:66:5a:04:77:29:ae:58:80:7d:44:14:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:83:5B:E2:45:DE:9E:3A:C1:9C:8B:E3:3C:2A:0C:F2:3F:DF:8B:9A
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/MYNb4kXenjrBnIvjPCoM8j_fi5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.224.0/23
Signature Algorithm: sha256WithRSAEncryption
43:bd:a6:4d:e0:43:44:1f:8b:f3:51:be:7a:6e:c3:9b:ce:4c:
7d:db:07:77:bc:d4:c7:86:89:87:63:6d:0e:0f:7f:84:66:6b:
9c:41:97:b7:f6:3c:64:ef:94:8a:8f:33:13:ef:59:e9:f5:7f:
da:7d:05:24:ea:4e:af:58:9d:82:73:39:0f:08:b8:3e:bc:db:
01:68:46:c6:1a:f1:ef:af:3e:ea:ac:42:78:1c:d7:45:ac:31:
b8:e8:fc:bf:18:47:68:83:d9:12:81:c0:4d:26:0f:2a:3c:29:
9f:2a:c5:c0:17:00:ff:0c:15:e2:41:e8:4d:06:c4:da:b5:86:
5a:be:6b:77:f1:c3:0e:6c:78:17:fe:48:c0:6a:89:ec:d0:71:
e6:99:07:5d:99:10:2d:85:d2:af:d0:a5:df:96:10:2d:a8:13:
bf:c9:32:c1:b2:c4:b5:b2:cf:49:c1:41:0b:df:ae:ad:83:ca:
e8:43:80:6c:ce:a4:08:c6:10:25:ac:42:4e:45:08:aa:36:88:
20:4d:22:34:e4:e4:bb:63:4a:fb:c8:91:27:a8:56:ea:f6:a7:
2d:dc:7f:f9:40:5f:db:7c:01:04:cc:35:c3:ae:d7:c9:eb:bb:
a3:8e:e0:3d:52:d2:f8:d2:79:e4:fc:f9:07:ee:c8:9a:bc:b7:
27:65:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:13:36 2025 by rpki-client