Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MlHXOZScXcSH2MiREvUqdwur9_M.roa
File: MlHXOZScXcSH2MiREvUqdwur9_M.roa (raw, json)
Hash identifier: DjI0eii8/483vKZWjUL7lmD+ThJ+UJFeZBafgG7PapU=
Subject key identifier: 32:51:D7:39:94:9C:5D:C4:87:D8:C8:91:12:F5:2A:77:0B:AB:F7:F3
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222030B2C9DEB0BB3AA48E261B19B359
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MlHXOZScXcSH2MiREvUqdwur9_M.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203915
IP address blocks: 2a0e:8f02:f045::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:30:b2:c9:de:b0:bb:3a:a4:8e:26:1b:19:b3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3251d739949c5dc487d8c89112f52a770babf7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:c0:2b:5a:75:7c:7e:47:0a:f4:02:b5:2f:
c9:05:c5:5a:d1:6f:bc:b5:2c:ab:ea:c7:b2:df:35:
ed:39:e6:d8:27:65:16:51:8e:0b:b7:b8:87:8d:d1:
48:56:1d:03:d6:2f:33:35:d3:ad:0c:b4:da:b6:3c:
ff:8d:b6:42:d9:7d:a7:37:26:bc:66:db:d7:e9:5a:
1c:d6:43:5c:41:cc:c0:63:4b:99:ad:e1:06:a0:ac:
a0:36:9e:ff:7b:60:2b:a4:24:57:e9:0d:25:0e:86:
1b:b0:62:bf:ea:90:7e:00:19:a8:ba:c9:48:9c:75:
5e:1b:cb:c8:8a:7c:9b:53:23:a9:44:09:31:99:14:
95:10:76:c0:4b:80:65:6b:d2:26:b5:f4:af:2b:01:
66:31:84:cc:fc:da:67:a5:86:c5:94:29:d7:bb:f9:
0f:b3:58:2a:56:3d:25:d7:7d:90:cc:a1:91:72:cc:
55:12:bd:e5:5d:63:64:19:3b:b5:a9:ea:3c:e8:02:
1d:1c:1c:40:00:9e:3a:09:20:6a:75:b3:35:03:86:
ba:d3:1b:af:27:6e:b8:5a:fa:cc:ec:6e:f3:a5:de:
24:4e:06:ba:f2:aa:f1:4e:16:e3:0c:9b:16:15:69:
56:33:db:53:fe:b4:cb:70:13:62:1e:36:29:6c:01:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:D7:39:94:9C:5D:C4:87:D8:C8:91:12:F5:2A:77:0B:AB:F7:F3
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MlHXOZScXcSH2MiREvUqdwur9_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f045::/48
Signature Algorithm: sha256WithRSAEncryption
66:f8:92:87:5b:27:09:4a:d1:41:1f:d4:44:f3:7a:37:58:41:
92:2e:0d:df:a8:08:18:db:43:6f:67:98:75:fd:ad:58:ce:57:
ec:db:76:a0:10:fe:ad:8c:dd:65:7b:f4:75:01:48:18:92:ba:
fa:8c:03:0f:ee:72:95:98:50:4e:3d:ab:08:9e:3a:92:8b:b2:
d0:17:f8:88:89:eb:c9:47:bb:ee:fa:a7:36:61:1c:9f:44:2e:
a2:82:33:78:52:df:ad:28:b3:cd:e5:17:3c:43:a1:4f:64:ba:
0c:94:c8:09:79:8a:5b:15:60:bf:2a:42:b8:4f:23:b9:70:12:
6a:75:b4:58:a6:51:bd:f8:e4:30:fa:b7:5c:50:db:0b:22:d2:
68:d5:8f:7c:c1:1b:f2:7a:fd:89:6a:ea:c2:49:97:20:d0:0f:
77:2d:4b:5c:86:bb:d0:76:ad:1f:f0:e0:5c:c2:c8:51:9a:51:
e7:56:4f:2d:67:bb:6f:f4:86:11:5e:6a:6e:4f:c1:3c:bd:83:
3f:17:c8:f0:de:07:7d:ca:66:d1:ef:66:70:62:44:c4:e0:7f:
ef:ea:1c:45:7c:02:1e:3a:67:38:74:67:2a:62:db:69:e2:af:
fd:06:02:21:ae:21:d7:8b:38:cb:12:8b:62:1e:d1:60:e8:a5:
49:ef:8d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:35 2025 by rpki-client