Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/MRwWdWt562qFAJPbbIblGOiEamc.roa
File: MRwWdWt562qFAJPbbIblGOiEamc.roa (raw, json)
Hash identifier: HBxjXaaWOR1gt1kLDIaGluOQUgmhyXoAYpcX/2J2fWA=
Subject key identifier: 31:1C:16:75:6B:79:EB:6A:85:00:93:DB:6C:86:E5:18:E8:84:6A:67
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019736A785D935896A2BB69A77D6E4B835F3
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/MRwWdWt562qFAJPbbIblGOiEamc.roa
Signing time: Tue 03 Jun 2025 16:37:17 +0000
ROA not before: Tue 03 Jun 2025 16:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215185
IP address blocks: 151.218.0.0/18 maxlen: 18
2a0e:c5c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:a7:85:d9:35:89:6a:2b:b6:9a:77:d6:e4:b8:35:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Jun 3 16:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311c16756b79eb6a850093db6c86e518e8846a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:f6:e0:0b:e8:dd:6f:db:34:eb:b5:56:b4:
20:26:77:44:9a:9a:5e:e6:e1:a6:a9:34:02:64:55:
83:a2:0b:88:81:cc:e3:42:2e:46:31:57:0a:36:d4:
64:5a:0d:43:cd:df:b9:1b:d5:e0:3e:62:f8:d3:d6:
97:8e:ed:9c:1b:f6:25:24:25:9c:34:da:36:4c:23:
a1:c7:21:b7:b9:69:23:77:a9:57:de:8a:aa:d3:2e:
f6:f6:0e:d6:b3:10:85:d2:ac:ee:7b:ff:5d:50:3f:
f6:65:3a:ca:48:3b:91:f8:50:04:a1:62:2f:5f:8c:
0d:b4:f7:53:54:d3:7d:2d:ab:2e:63:92:c6:26:7a:
b7:7b:46:13:36:df:cc:a7:06:2e:ce:ca:64:7d:20:
f9:5d:30:75:31:66:e6:9a:6e:9b:ac:1b:04:b2:e0:
0a:2e:15:ca:4e:93:43:ad:ae:0c:37:1a:78:ff:b4:
fb:7c:68:91:2a:cb:da:18:e4:9f:a5:2c:d6:ed:4a:
cf:fb:49:26:0f:fc:8c:be:82:b0:bd:b8:11:c9:bb:
4b:b5:92:f7:85:42:f6:d1:5c:0b:6d:ef:48:f5:f4:
52:8d:34:f8:5e:4f:4f:1c:6d:18:21:9f:37:8a:ac:
5e:02:4c:e4:5b:32:d7:6e:08:69:d1:33:8b:30:50:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1C:16:75:6B:79:EB:6A:85:00:93:DB:6C:86:E5:18:E8:84:6A:67
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/MRwWdWt562qFAJPbbIblGOiEamc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.218.0.0/18
IPv6:
2a0e:c5c1::/48
Signature Algorithm: sha256WithRSAEncryption
36:81:7f:05:37:6d:d4:31:e0:e4:fa:3f:1d:be:01:80:a0:91:
f6:f4:18:62:ed:1e:ec:7a:be:08:22:d8:bd:8e:86:41:a4:47:
a8:26:a7:d8:ab:31:08:ff:47:07:4c:72:84:8b:5d:bf:f8:eb:
3c:6b:9d:d9:5e:37:cd:29:5f:49:42:99:32:f9:2a:da:80:a0:
f2:73:2a:83:64:ac:b1:aa:d7:e8:b7:46:e4:45:08:af:45:11:
54:ca:14:8d:41:29:9d:7b:e9:13:58:4e:0e:8e:de:22:ce:a0:
c3:4c:ff:31:35:7b:af:1d:79:e7:41:54:0f:de:9c:41:2e:df:
f9:83:f3:74:d6:a0:3a:5f:33:02:10:2f:bd:1c:32:a2:2e:e5:
f5:bd:9b:a5:9d:72:15:04:67:b8:71:87:b4:f0:0c:a7:c9:1c:
54:6b:a8:4d:bd:3c:06:fa:d6:f4:e3:16:cc:bc:ac:c4:d2:c9:
0e:91:b7:5c:07:79:32:f7:1c:8c:4e:2d:46:d9:bc:88:42:67:
cd:b1:80:7c:3a:53:f5:7a:44:fa:29:0d:0f:4e:94:da:ad:08:
0b:44:04:d2:1f:f5:07:f4:33:e7:5f:3a:28:94:8a:d7:82:95:
2b:b6:c6:11:8e:af:fb:d2:50:9e:46:8f:05:c1:f7:09:a5:4e:
93:2e:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:47:32 2025 by rpki-client