Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/5MRhSgchnAtf4S3HQR8A2P9G7a4.roa
File: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (raw, json)
Hash identifier: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=
Subject key identifier: E4:C4:61:4A:07:21:9C:0B:5F:E1:2D:C7:41:1F:00:D8:FF:46:ED:AE
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 019421B1AF3E6E222F3B49A401A03B474EE4
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/5MRhSgchnAtf4S3HQR8A2P9G7a4.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 178.213.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:af:3e:6e:22:2f:3b:49:a4:01:a0:3b:47:4e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c4614a07219c0b5fe12dc7411f00d8ff46edae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:f8:b6:3f:9a:9a:13:d5:33:d1:d0:24:1c:
fb:c4:c5:e1:c9:5a:40:5b:16:ce:a7:35:ee:37:43:
91:ac:f0:fc:2c:66:b6:30:a9:b6:bb:4a:87:90:51:
12:ab:52:43:21:4e:8e:fe:f8:f8:06:bd:6e:f1:79:
ea:5d:72:47:db:a1:2e:26:43:e5:cd:1f:2d:9b:ea:
58:3e:e5:e4:19:41:bc:3e:52:42:90:e6:ba:13:4c:
cd:21:c8:a2:c3:84:3f:9a:8a:20:a7:3b:fa:63:9f:
22:11:da:1b:94:4f:1d:2c:86:ed:8c:c4:95:10:cd:
66:11:ab:0f:70:0a:64:7d:5f:60:5b:b8:f2:51:4f:
30:5e:0b:f8:4e:c4:de:f4:f3:05:8c:6a:8c:4b:63:
9c:9d:12:03:2e:26:7f:a4:14:42:ac:aa:78:62:5a:
26:ff:5e:3e:12:4f:aa:69:a9:c5:77:3b:99:9f:4d:
b9:9a:e0:c3:13:0f:4e:a9:ba:09:6e:b8:f6:b4:3f:
c4:0d:65:2e:b8:e9:a0:75:bc:ab:2a:ca:51:20:a6:
c8:aa:b7:26:81:80:f7:78:3e:ac:90:f0:3a:5a:39:
b4:4d:71:09:b8:75:9e:cf:2b:3e:7a:6c:b0:7d:b2:
f2:82:8a:3c:8c:f6:67:fe:d8:02:e0:af:92:4c:9d:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C4:61:4A:07:21:9C:0B:5F:E1:2D:C7:41:1F:00:D8:FF:46:ED:AE
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/5MRhSgchnAtf4S3HQR8A2P9G7a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:90:43:23:9b:98:4b:13:ff:5c:78:a8:e7:ed:64:7c:40:6b:
49:cb:b7:44:f2:6d:49:43:6f:a0:3b:01:cf:fe:4d:a1:f8:49:
14:85:02:a4:d1:52:06:2c:63:68:67:8c:98:85:79:44:bb:1d:
c1:df:26:aa:61:76:b5:29:65:63:b7:ff:d0:8b:bf:11:4c:d6:
ac:54:9d:e6:4a:86:7d:24:c3:cc:22:d0:fb:8e:3d:8d:0f:36:
17:70:dc:f3:75:8b:aa:05:1b:bb:ca:db:8b:79:70:cd:70:26:
5a:9a:cb:31:56:2b:e8:03:8f:b9:47:02:89:db:89:26:64:cb:
23:88:07:0f:ce:ff:48:77:d6:8f:11:78:4b:ea:df:d2:c9:52:
5b:f5:7e:31:40:9b:3f:bf:59:ed:37:ff:43:86:1f:02:e8:62:
df:df:f0:80:7f:6b:1c:a9:e8:6f:8f:88:5c:6f:b6:77:6c:6f:
ac:7d:6b:30:10:5c:50:0d:31:86:63:1f:af:21:14:8f:01:8f:
4a:9e:5f:38:94:3a:c1:ee:ae:1c:93:26:32:cc:d3:d7:c4:57:
6d:57:77:0c:d3:ee:2b:de:4e:77:73:a6:08:c5:a8:50:9c:8a:
f1:18:c9:1c:0c:43:89:d6:61:75:fe:76:4c:a5:d7:7f:c6:88:
e4:ec:30:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:28:41 2025 by rpki-client