Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/MFMIui6m_VAgNwJXoFmjzhgjkd4.roa
File: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (raw, json)
Hash identifier: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=
Subject key identifier: 30:53:08:BA:2E:A6:FD:50:20:37:02:57:A0:59:A3:CE:18:23:91:DE
Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial: 019423699FD51E7870C393F497275E6AC033
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/MFMIui6m_VAgNwJXoFmjzhgjkd4.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212905
IP address blocks: 5.182.247.0/24 maxlen: 24
178.159.35.0/24 maxlen: 24
2a0c:d200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9f:d5:1e:78:70:c3:93:f4:97:27:5e:6a:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=305308ba2ea6fd5020370257a059a3ce182391de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:59:e9:06:7c:67:ba:f9:87:f7:b7:7c:38:
18:85:6a:dc:ec:25:33:05:aa:42:9a:57:c5:fc:71:
13:72:b7:e8:98:a0:8b:2e:6d:a9:48:4c:e4:9f:c6:
b4:48:f0:c2:18:35:4b:7a:ef:0c:88:32:d6:ce:de:
6d:ff:70:ff:2b:91:d3:fc:ea:21:52:42:77:af:e2:
e8:66:fc:55:8b:27:e1:95:a7:ea:8b:94:90:6c:51:
45:0d:05:23:02:86:62:89:16:80:db:2c:53:c8:3e:
2e:46:21:02:3e:e6:43:10:eb:21:90:3f:3a:db:94:
bd:40:52:34:dc:32:a2:5a:a6:d9:8d:99:65:fb:c7:
14:ee:0d:50:bb:e2:d5:b8:9e:18:42:42:ed:df:1f:
a8:fc:be:39:0c:ba:a2:40:19:8d:94:d3:d0:b4:99:
1f:bf:64:7d:de:32:01:a4:c1:5c:17:43:8b:91:25:
41:3b:c2:b9:39:dc:b8:ed:07:a3:da:bc:54:c4:bf:
d7:69:92:7b:19:9f:4f:1e:ca:c2:ac:bd:ef:17:21:
06:63:c0:97:f6:ae:9a:ac:af:60:f1:32:f6:49:5e:
cd:7a:45:97:6c:69:9a:2b:6e:fb:fa:2a:e8:f9:d6:
e6:17:71:3e:c3:89:97:5d:ab:8e:cb:ce:cf:90:55:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:08:BA:2E:A6:FD:50:20:37:02:57:A0:59:A3:CE:18:23:91:DE
X509v3 Authority Key Identifier:
keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/MFMIui6m_VAgNwJXoFmjzhgjkd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.247.0/24
178.159.35.0/24
IPv6:
2a0c:d200::/48
Signature Algorithm: sha256WithRSAEncryption
72:41:7f:9a:27:fd:d1:66:2f:c3:50:ba:fc:9b:02:ba:d7:4e:
68:c8:a5:3f:51:25:52:37:18:e8:15:be:3c:7a:a2:14:00:c4:
f4:c6:3f:03:0d:75:d0:30:ab:e9:be:7b:c5:a9:67:5b:11:bb:
38:52:fd:26:fc:e5:36:d7:4f:26:c5:dd:21:80:36:be:e6:b0:
a0:c3:2f:04:04:e7:14:7e:26:c2:e0:9f:79:aa:7f:92:ee:2c:
92:b7:1d:35:47:20:98:c5:62:74:22:f8:fb:4e:01:36:31:7c:
2e:55:e1:f8:ab:af:ac:de:b0:13:a0:94:e7:10:51:fe:de:4b:
26:80:09:fc:ac:5f:5f:f8:1c:7b:47:b8:d0:5b:8a:05:f4:31:
b2:1d:c8:83:5f:9c:2d:96:e9:2b:76:a7:bc:7a:bb:8a:1c:59:
69:5a:6e:76:41:7a:0e:02:34:74:23:fa:10:9c:98:85:8e:9d:
1e:4c:82:25:8a:c1:e1:d7:3c:80:33:8f:d6:a3:9e:6f:f3:ef:
57:3e:21:00:98:e1:d3:68:ff:e5:91:3a:2e:3f:df:73:e2:9b:
2e:62:4a:09:8e:cc:1d:61:fe:29:78:bc:39:2e:35:e9:49:fb:
75:67:61:af:08:eb:51:95:c4:c3:cf:ea:f1:37:24:6d:fc:fd:
9c:19:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:20 2025 by rpki-client