Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/mVLFfpsCTZXmz1USSK13lw0lI4E.roa
File: mVLFfpsCTZXmz1USSK13lw0lI4E.roa (raw, json)
Hash identifier: MFOelRyO21tS7ErEnP3ifMi3vY1sgM39x3qUbFKHhSY=
Subject key identifier: 99:52:C5:7E:9B:02:4D:95:E6:CF:55:12:48:AD:77:97:0D:25:23:81
Certificate issuer: /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Certificate serial: 0194228DD199AC319796ED7122229DAAAF2C
Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/mVLFfpsCTZXmz1USSK13lw0lI4E.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13190
IP address blocks: 185.117.164.0/22 maxlen: 22
2001:678:bbc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d1:99:ac:31:97:96:ed:71:22:22:9d:aa:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9952c57e9b024d95e6cf551248ad77970d252381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:e8:44:cf:38:59:0a:4d:6f:5a:fe:6c:f4:
60:b3:fa:b9:37:c2:3d:5f:6b:18:bc:09:a4:fa:86:
48:d7:f7:61:d6:90:42:a5:c7:ea:7f:d6:3c:9e:39:
f2:94:ad:51:c1:34:00:ce:08:78:3f:4a:1d:9f:bf:
35:87:97:8c:90:1e:3e:5c:0d:b6:df:2b:0c:a1:1f:
3f:f4:a0:54:0a:af:f4:67:38:b4:6d:84:5c:06:0b:
24:5a:66:d7:22:a3:18:46:c5:de:8a:b7:50:9d:d1:
c4:35:89:56:50:61:43:de:23:79:34:fc:2a:1b:65:
96:ad:95:fe:e3:3d:bf:e3:24:96:a0:c6:8f:83:1c:
73:0c:70:59:a6:5b:fa:7d:68:a4:e0:38:7f:17:45:
6d:18:da:7e:5f:aa:d9:7b:b0:2b:ac:d0:76:5f:6b:
0c:f5:ef:84:e2:22:48:65:9a:3e:3f:00:2b:96:4a:
cd:ec:83:34:d7:59:14:cf:2a:74:7c:b8:1c:19:ba:
ca:62:07:b5:f5:10:a9:7a:32:7d:5b:69:51:04:23:
5b:1c:cd:1a:c7:f0:87:bc:b8:4b:4e:36:2b:80:46:
54:2b:c9:3e:44:84:ae:80:96:db:a3:8b:4d:82:12:
4b:0a:06:18:4a:cc:df:49:28:c2:95:79:c3:94:52:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:C5:7E:9B:02:4D:95:E6:CF:55:12:48:AD:77:97:0D:25:23:81
X509v3 Authority Key Identifier:
keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/mVLFfpsCTZXmz1USSK13lw0lI4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.164.0/22
IPv6:
2001:678:bbc::/48
Signature Algorithm: sha256WithRSAEncryption
b5:41:eb:83:a6:81:3c:50:c1:4a:b9:50:fc:a8:c2:22:e0:43:
84:d9:d8:e7:09:71:48:ed:66:c6:22:49:6e:20:5b:61:82:7e:
8f:90:c0:f9:8d:11:9d:fa:23:b8:c4:6f:2b:8d:cf:5e:53:51:
0b:df:07:42:19:0b:2c:89:7c:d9:83:07:5b:cb:b6:3d:e0:d3:
8c:bd:ae:68:78:3b:bd:d2:95:3c:a4:c0:00:c4:16:dd:9e:86:
76:d9:1d:b1:06:09:a7:82:46:68:d1:70:79:ab:ae:be:33:cd:
30:f9:cf:30:45:6d:c1:4e:78:ef:f0:2f:8f:bd:12:d8:bb:8a:
1e:3b:c9:92:b1:d7:1a:a0:1b:7b:cc:0b:77:dc:b5:a2:93:98:
91:83:7d:67:a2:37:36:ef:e4:f0:4b:b4:b1:34:d5:28:8a:8a:
8e:fc:bb:2a:9e:ec:b4:cb:b7:c2:c7:b6:f8:f2:71:68:5a:9b:
59:4d:72:8d:95:b0:85:4b:3d:f2:84:7f:6a:e9:67:c2:54:30:
33:56:f7:55:80:f4:47:9f:7d:cf:00:d5:f1:17:34:c6:6a:91:
43:a2:e8:14:a1:1e:96:14:06:85:a7:88:6a:ce:28:01:d8:e8:
c2:e0:67:06:94:4f:63:d4:c6:f0:a9:3f:5f:94:89:88:68:ec:
50:6b:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:16 2025 by rpki-client