Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MSVsSFqyYmkzSthiCPb6J97bGuA.roa
File: MSVsSFqyYmkzSthiCPb6J97bGuA.roa (raw, json)
Hash identifier: 7RplfcUQh52LNdkySIuR2OoK0vORAK8vru947BL+8ZM=
Subject key identifier: 31:25:6C:48:5A:B2:62:69:33:4A:D8:62:08:F6:FA:27:DE:DB:1A:E0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0195951360416013908EFC3F7D895077AF3D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MSVsSFqyYmkzSthiCPb6J97bGuA.roa
Signing time: Fri 14 Mar 2025 14:33:49 +0000
ROA not before: Fri 14 Mar 2025 14:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50049
IP address blocks: 62.50.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 12:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:95:13:60:41:60:13:90:8e:fc:3f:7d:89:50:77:af:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 14 14:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31256c485ab26269334ad86208f6fa27dedb1ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:6e:a8:ff:69:4d:31:ae:f6:8c:db:77:0a:
8e:a8:1f:cd:60:aa:bc:2f:62:79:37:fc:f3:b4:49:
9a:37:09:d3:16:a4:5b:3a:c5:24:e8:57:e3:73:4a:
b1:84:ec:77:fc:dd:b7:7c:c9:76:32:0e:0e:5e:b8:
d3:62:f4:e5:67:ac:18:a4:72:8f:35:d2:f3:5b:23:
25:4a:43:30:5d:e1:fa:ba:a3:ea:26:47:13:a8:17:
a7:a1:68:74:40:50:0a:6a:d9:8e:31:1a:55:4c:ee:
93:f8:7c:9a:b4:b0:a7:82:8f:61:06:0f:ef:ea:9c:
5f:f2:ec:9e:42:44:b5:c9:52:2c:b0:bf:92:9d:86:
d4:32:64:8c:ef:5a:39:8a:48:94:fb:be:8d:1f:60:
87:99:47:69:df:ad:aa:27:f1:e1:ad:40:7f:78:7c:
a7:12:c5:2d:7e:74:fb:0e:d6:25:f1:48:35:63:17:
f4:81:61:9f:54:e4:8f:6a:3f:50:82:c2:44:8a:7c:
a8:65:32:54:0e:a1:29:48:ae:59:03:24:81:7d:71:
79:4a:01:4a:df:48:9d:2a:e5:9f:9a:2d:e0:8d:18:
99:9f:74:c7:42:34:43:fe:9e:e5:e3:1a:97:42:a6:
bb:01:63:a3:80:c9:db:a0:1e:2a:87:19:df:ab:9a:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:25:6C:48:5A:B2:62:69:33:4A:D8:62:08:F6:FA:27:DE:DB:1A:E0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MSVsSFqyYmkzSthiCPb6J97bGuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.50.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:3e:bd:59:a1:8d:1f:86:88:5d:5c:9a:47:e2:cb:9e:8a:58:
1c:6a:f9:ec:1f:49:4d:07:85:2c:62:03:58:c3:e8:ee:98:fc:
34:e8:47:6a:d9:53:01:0c:0e:94:cc:8c:cf:61:c0:d3:c9:24:
e4:a8:4f:fb:a8:50:b1:0c:72:11:73:10:6c:de:c4:cc:7e:b2:
cc:38:e0:8a:35:dc:21:f3:ce:e1:e3:b3:78:fe:8b:c0:58:24:
5f:02:4e:d2:b8:37:8a:24:46:cf:ce:a9:08:6c:cb:6e:79:46:
fb:69:8f:aa:c1:54:ab:af:b5:f0:76:31:77:6c:af:45:89:84:
ec:75:7f:10:2d:3e:9d:45:c2:8c:27:93:af:b4:de:ed:1d:a1:
17:7a:0a:0a:c5:84:22:3b:d9:22:65:52:fe:75:ed:6f:c1:26:
61:0e:8c:18:bb:43:fb:36:0b:f9:5b:bd:e8:a4:5e:d1:a9:25:
cf:f3:0a:9f:5c:6b:ad:a5:2d:da:0f:ca:a4:de:e6:52:6d:81:
02:8d:77:8a:7b:33:dd:8c:fc:13:eb:45:8d:da:1e:e0:8c:f5:
67:26:b6:ea:b1:80:a6:a7:65:4c:1c:78:23:f5:72:e5:7c:5f:
a6:89:65:5c:d3:27:55:68:4c:d6:8b:35:c0:c4:2c:60:29:b4:
29:c7:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:22:00 2025 by rpki-client