Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/phMHUXGvPxn2DLT5p1ejhNrhbjU.roa
File: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (raw, json)
Hash identifier: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=
Subject key identifier: A6:13:07:51:71:AF:3F:19:F6:0C:B4:F9:A7:57:A3:84:DA:E1:6E:35
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0196E7724EC0DA9EC79024115EB6497A0048
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/phMHUXGvPxn2DLT5p1ejhNrhbjU.roa
Signing time: Mon 19 May 2025 07:29:10 +0000
ROA not before: Mon 19 May 2025 07:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 185.36.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:72:4e:c0:da:9e:c7:90:24:11:5e:b6:49:7a:00:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: May 19 07:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a613075171af3f19f60cb4f9a757a384dae16e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:34:f9:c3:fa:12:0a:1d:4c:44:c0:71:24:
42:ff:48:4e:bb:8b:e1:56:99:c7:00:4c:a4:f7:76:
72:e2:26:43:13:97:fb:4f:9c:97:34:5f:e7:9f:01:
d2:f9:59:42:a5:e0:53:e5:e6:2b:d2:a8:92:6a:47:
41:84:c5:d2:0c:bb:1c:f5:9f:ed:72:79:6b:aa:d7:
8d:12:0b:55:f6:c9:8a:93:1d:d3:a5:c5:f0:c1:36:
82:d6:bf:d1:88:b4:d7:e3:67:84:b4:b6:28:04:ae:
b9:70:97:08:dd:18:45:bb:8b:bb:f0:67:de:ac:09:
c8:98:79:8a:07:e4:9a:56:e2:28:ae:8f:77:56:f5:
33:6f:ec:3e:fb:12:e9:08:b4:57:29:0a:57:27:37:
c1:03:11:b3:7b:2d:25:9d:40:cf:e2:cd:e6:14:b1:
ba:ea:6c:04:99:4d:46:32:1d:59:89:05:8f:a0:0c:
b5:da:18:a7:ec:c4:6e:0d:66:03:52:3a:95:c8:1c:
bc:af:f9:19:73:24:ff:11:fd:98:05:74:95:c6:e6:
e9:23:e8:76:72:eb:af:7b:05:e9:14:4e:77:b6:d9:
e8:69:1b:90:83:e6:3a:ca:cc:e6:d5:50:04:09:40:
88:29:56:a4:f0:ad:52:0c:7d:72:55:3f:42:45:56:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:07:51:71:AF:3F:19:F6:0C:B4:F9:A7:57:A3:84:DA:E1:6E:35
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/phMHUXGvPxn2DLT5p1ejhNrhbjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.124.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:05:10:13:51:68:3b:89:25:82:66:eb:4a:6b:c6:af:7e:b2:
ea:ca:d1:37:c1:76:80:19:16:c9:17:bd:28:8d:66:bb:9d:33:
06:49:06:3a:24:80:4b:a3:e9:46:e6:35:bb:f3:4e:7a:4f:5e:
bf:0a:4e:cf:52:7b:30:32:15:e3:43:d4:83:a2:34:52:ea:fd:
f4:0e:63:ff:64:f0:cd:79:03:6e:f2:b0:b0:48:af:38:bf:a5:
d4:1c:b3:30:5b:e2:65:0a:6d:8e:f7:44:19:8f:dc:6c:59:0a:
17:f9:a1:be:24:53:a6:0e:6c:96:c1:2b:50:bd:27:d4:15:2d:
c0:03:3b:d0:bb:e2:fe:78:6a:b5:00:a2:71:a1:c8:09:c8:c4:
73:bd:76:ad:bb:41:97:2e:ae:60:90:c3:c0:3f:ce:26:f4:8e:
b3:08:57:24:1c:30:cd:d4:68:b6:21:4d:b5:8d:10:bb:3f:e4:
31:6d:12:f4:7a:7c:63:fd:d3:44:f2:23:ab:b6:65:ee:d2:fd:
13:db:e8:fb:cc:74:f0:e7:2a:2a:86:1c:73:d7:7a:0e:3e:5f:
b7:a9:b5:3b:ff:ec:80:90:c5:f0:dd:78:39:f4:3b:21:42:df:
f5:69:be:31:9c:30:d2:a2:db:a8:0e:4b:56:17:24:b8:70:5b:
24:6b:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:28:53 2025 by rpki-client