Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/MeH4-k2OFjGN557s0Yu0tYWPxmg.roa
File: MeH4-k2OFjGN557s0Yu0tYWPxmg.roa (raw, json)
Hash identifier: MOhIHpA/NwdkOdOgWKuaCMarKZ7JqUMahtGZ4rfniHg=
Subject key identifier: 31:E1:F8:FA:4D:8E:16:31:8D:E7:9E:EC:D1:8B:B4:B5:85:8F:C6:68
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 01941FFA5C712CAE8231C0808CF8FE3892C3
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/MeH4-k2OFjGN557s0Yu0tYWPxmg.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200471
IP address blocks: 160.62.9.0/24 maxlen: 24
160.62.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5c:71:2c:ae:82:31:c0:80:8c:f8:fe:38:92:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31e1f8fa4d8e16318de79eecd18bb4b5858fc668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:ec:88:b3:43:10:01:56:59:b3:ae:fb:9d:
2a:19:aa:0e:0d:c3:2d:a1:c3:5a:fb:c6:5e:ec:62:
f4:46:dc:dd:97:98:58:e9:24:ef:fb:20:f6:f5:9b:
6a:f3:d8:89:d4:b1:ec:05:2b:b8:9e:11:5b:26:c6:
1e:00:a1:89:7b:18:d4:f3:9f:5c:40:85:16:9d:5c:
46:f0:07:58:9d:97:2d:8b:68:9f:74:ea:21:bd:6e:
f3:4b:eb:9c:ff:7b:09:13:c8:28:aa:a9:6f:5e:65:
a3:a1:2b:c8:17:4d:8e:80:ed:bf:80:a9:c9:31:94:
91:23:9e:8a:60:40:5d:84:36:1e:32:45:61:a3:24:
a9:5a:69:01:b7:d5:3b:ed:36:ba:4b:cc:25:1b:4c:
e4:74:8b:56:21:a8:c1:ea:26:fc:26:a1:0c:e8:eb:
ba:84:79:0f:79:1e:5c:34:3d:be:00:c5:78:dd:55:
6b:99:c4:7f:a6:0f:c2:c4:9c:c9:95:32:59:e0:18:
cd:bf:eb:3c:b3:20:4a:bd:76:63:b4:fb:81:c8:0a:
12:4f:c7:5a:a8:d6:e2:11:cf:31:c0:cd:b2:f7:6d:
89:8e:1c:1d:1c:f7:71:5d:e7:25:f3:92:a3:1c:9c:
97:a0:f8:54:bf:57:19:e9:d5:ad:32:ee:e8:36:66:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E1:F8:FA:4D:8E:16:31:8D:E7:9E:EC:D1:8B:B4:B5:85:8F:C6:68
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/MeH4-k2OFjGN557s0Yu0tYWPxmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.62.9.0/24
160.62.21.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ee:cc:43:ea:18:2b:f9:35:bc:52:63:03:f8:d0:2a:3b:e3:
5a:23:0e:a6:de:3a:de:4f:64:be:31:0e:9d:fb:a6:1d:dc:7e:
12:f2:d8:4d:dc:86:6e:c5:d3:2a:3d:01:3a:d8:4b:ed:b2:e1:
05:f5:cd:40:0d:34:fe:14:32:9b:67:f3:4a:d0:b7:c2:48:ec:
0e:5b:3a:58:7d:51:ce:b4:48:6e:f4:cb:6e:d9:d8:f1:a2:b1:
2d:0d:f2:78:1c:d4:e5:bd:e2:b1:d2:8e:31:db:50:c4:8f:4b:
a1:8e:5c:f2:a9:9e:91:03:43:33:26:0e:e4:82:fe:15:81:c3:
e1:39:a0:25:f9:49:16:4e:20:f5:c0:a8:86:a0:2b:7b:67:dd:
c3:99:c2:30:b2:3b:a1:82:f7:40:74:2c:dd:69:b7:7a:95:6d:
b5:4f:28:b4:84:bb:a1:62:34:50:72:ed:9c:15:ed:fa:f6:e6:
16:62:14:63:85:d1:d6:92:79:ab:3f:d3:a1:a9:bd:96:3a:97:
a7:c0:8c:f6:e3:9a:a7:8a:f7:2b:53:f5:d4:7c:3c:46:38:8f:
7c:85:16:e6:d7:15:a8:d8:51:84:0d:07:62:70:c2:a6:79:02:
30:04:52:33:f9:e9:7a:80:13:24:3a:51:1a:5d:64:e8:fc:77:
3a:a7:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:36:28 2025 by rpki-client