Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rv-xKgzUjzHvApUE6lXoQ1VqJf8.roa
File: rv-xKgzUjzHvApUE6lXoQ1VqJf8.roa (raw, json)
Hash identifier: 5nllHGpBwDyosJH+rveT3A2oF5IK/MDKTLLlDGGbzxg=
Subject key identifier: AE:FF:B1:2A:0C:D4:8F:31:EF:02:95:04:EA:55:E8:43:55:6A:25:FF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C45A425B7D0267D58706ED593962A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rv-xKgzUjzHvApUE6lXoQ1VqJf8.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215230
IP address blocks: 81.181.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:45:a4:25:b7:d0:26:7d:58:70:6e:d5:93:96:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeffb12a0cd48f31ef029504ea55e843556a25ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:7f:94:84:38:0e:50:75:26:c3:b6:4d:3e:
2f:19:34:86:c2:d6:2b:76:7f:e2:3e:08:cd:2b:2b:
8c:d9:7b:f8:e7:c4:b7:e9:eb:d0:54:3b:66:dc:f3:
89:c1:8c:55:95:4f:f9:ef:59:f7:9b:e9:a6:0e:78:
63:13:e5:79:72:ff:b8:c0:17:c5:e2:aa:6e:e5:fd:
c9:60:57:af:50:c4:a0:77:11:fe:ab:4b:c1:f7:48:
a2:07:a0:9f:0d:44:8d:19:41:58:79:d8:de:3a:85:
b1:54:e7:01:9f:d6:02:df:e6:25:11:da:8f:0d:45:
05:89:78:f8:94:d7:63:36:15:00:e6:7d:e4:9b:7c:
8a:0e:2b:9c:07:fc:5a:4e:2e:c0:b6:ec:5d:79:1b:
cb:3d:a8:8b:c6:7d:92:62:90:b3:35:ad:07:0b:b4:
b3:18:9c:63:57:45:12:08:b3:df:e3:3a:14:a1:e6:
77:5a:f5:d3:37:c8:c6:01:fc:5c:14:bf:cc:bc:66:
33:93:3e:9b:24:6c:7d:aa:0f:02:27:5c:24:ff:ad:
58:5e:cb:96:15:f7:bf:72:57:8b:59:ce:6d:21:a7:
61:f5:39:fc:6e:a0:1c:d1:13:34:4f:36:e3:05:fd:
78:f5:73:f0:bc:e8:f5:5b:98:11:82:c8:cb:9b:0f:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FF:B1:2A:0C:D4:8F:31:EF:02:95:04:EA:55:E8:43:55:6A:25:FF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rv-xKgzUjzHvApUE6lXoQ1VqJf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.64.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:7e:6a:e4:91:56:33:1f:f1:79:4c:87:b6:ff:29:7a:8a:ed:
f0:9a:ec:84:15:44:45:9a:57:31:0f:64:e1:b0:7e:f8:cf:b8:
1f:3b:ca:ac:64:16:cc:8d:7b:13:e7:c6:5f:b1:ce:cb:8b:3f:
a7:20:3e:e6:11:44:b7:cb:a0:db:74:a4:2d:f2:e1:2c:48:10:
33:09:cd:9c:e2:b2:27:33:34:a2:cc:5d:c5:61:48:dd:2d:a7:
1a:8c:eb:86:c2:14:2f:f3:42:59:ed:ca:b6:4b:13:70:fb:26:
de:a9:ea:c9:d1:02:f1:44:f3:3f:b6:8b:fc:80:ec:57:d2:24:
cd:81:f1:18:99:f7:5b:e5:4e:f2:a6:af:81:52:54:38:0c:67:
e4:46:7c:b7:26:c6:b5:9b:2f:1f:6c:25:84:d5:12:b4:54:ef:
2e:49:6a:24:a0:ec:d5:b3:92:d0:09:23:0e:6d:0f:ff:fd:63:
20:fd:55:6e:7a:f1:9d:83:85:37:21:08:6c:68:0d:e8:42:b2:
8d:f9:21:f2:b4:75:dd:f1:f0:f5:66:e3:38:6f:69:ae:df:23:
d1:d0:53:e1:b0:bc:3b:ec:eb:7d:13:39:c1:25:9d:c7:a4:c5:
20:34:64:c5:03:5b:84:95:eb:cb:d0:0c:df:2f:57:fc:25:fe:
a9:c5:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:17 2025 by rpki-client