Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/MRhTTHAkH95ULYTfOcPsfcxXr14.roa
File: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (raw, json)
Hash identifier: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=
Subject key identifier: 31:18:53:4C:70:24:1F:DE:54:2D:84:DF:39:C3:EC:7D:CC:57:AF:5E
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019424B3A1E3B52E03092BF2DA99DF2437DB
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/MRhTTHAkH95ULYTfOcPsfcxXr14.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15946
IP address blocks: 193.41.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a1:e3:b5:2e:03:09:2b:f2:da:99:df:24:37:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3118534c70241fde542d84df39c3ec7dcc57af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:62:fb:57:16:fc:5d:f4:bd:bf:4b:df:14:
f6:57:3c:24:b8:1b:ac:b0:44:b4:45:dd:3a:78:05:
56:14:a6:4b:5f:e1:86:99:c2:2b:45:83:02:48:d8:
fb:57:74:65:ff:ee:37:5d:aa:ea:72:6a:6d:57:0e:
c3:61:9f:9e:4c:f1:ea:f6:07:e4:d6:b2:05:58:31:
70:77:b9:2e:29:bd:c3:1a:21:fd:c6:2d:46:10:46:
ad:ef:11:49:27:5f:a6:13:68:a6:45:7b:2d:c1:e4:
4d:9b:b2:3e:d0:c8:29:cf:f9:cc:ac:96:a4:3b:4f:
ac:97:2d:47:64:5a:7b:8d:63:76:d9:b4:7b:9b:82:
e1:bd:6a:fd:98:07:9e:d5:15:4d:e8:94:0f:c1:b0:
d5:70:8f:68:55:be:90:37:84:de:7f:d6:9a:15:f3:
8a:17:1a:48:cb:67:98:75:18:8d:54:28:52:d7:f7:
94:17:76:1a:cb:c7:76:ea:c9:02:7a:98:b6:e1:7e:
55:91:9e:55:96:f4:f1:dd:5a:16:3e:38:f2:2b:e2:
77:ed:0a:d8:e8:92:85:30:e6:dd:f9:3a:f1:b6:a3:
99:36:37:2f:a3:d1:00:79:98:ce:97:9d:91:34:6c:
92:ef:99:f2:44:76:e4:00:0f:92:21:74:80:53:54:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:53:4C:70:24:1F:DE:54:2D:84:DF:39:C3:EC:7D:CC:57:AF:5E
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/MRhTTHAkH95ULYTfOcPsfcxXr14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ef:1f:d8:9b:96:73:09:fe:2f:ac:c2:b6:01:a9:eb:41:3c:
37:b9:c1:05:ec:66:8f:17:3b:b6:35:bf:46:a6:65:dd:0a:65:
09:fe:7d:cd:a2:89:c8:54:b9:fd:9d:de:ac:25:3f:5e:d3:d7:
91:5f:b2:83:9f:10:2e:d9:35:5e:5f:4a:9e:6c:56:72:1a:9d:
84:31:b4:c4:f3:86:e7:57:2a:cd:c1:12:f0:e4:26:d5:b9:57:
00:4e:3b:00:f3:d6:9b:37:e9:8d:a4:03:22:40:60:0e:f1:9b:
72:32:72:11:8e:a0:d3:c0:f8:16:a9:8e:fa:0f:dd:48:50:d8:
23:7a:b3:7e:31:ef:94:d9:c8:28:3a:c5:c3:b9:5d:5c:9d:59:
74:e7:bc:59:cc:cc:79:dc:52:41:d6:71:7e:5c:bf:7d:c1:10:
08:31:4c:ad:bb:da:0e:5c:6f:44:63:ea:0e:9c:78:40:5c:cb:
9e:f0:c2:4d:2a:69:f5:65:e4:e5:c9:17:0e:65:9e:f8:56:68:
13:42:25:b9:25:d9:6c:00:9b:75:08:7f:37:6c:21:56:b3:33:
d8:7e:18:c0:04:b0:52:0f:fa:9f:17:d5:cc:ab:c8:3f:03:9b:
8f:95:67:70:21:82:c8:24:fe:e8:57:68:9c:c3:e3:32:ce:10:
6f:aa:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:51:09 2025 by rpki-client