Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rmopece1hPnDrxGUQXbePfbuW3g.roa
File: rmopece1hPnDrxGUQXbePfbuW3g.roa (raw, json)
Hash identifier: LzehuaAVFk7vmeksMGf8ccgZKNu8yikV/yTbs25QbhI=
Subject key identifier: AE:6A:29:79:C7:B5:84:F9:C3:AF:11:94:41:76:DE:3D:F6:EE:5B:78
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9AF190EDACD7FC9AA99C34E70BD3E
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rmopece1hPnDrxGUQXbePfbuW3g.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15640
IP address blocks: 213.87.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:af:19:0e:da:cd:7f:c9:aa:99:c3:4e:70:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae6a2979c7b584f9c3af11944176de3df6ee5b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:02:73:8c:52:d0:a1:84:8a:86:aa:7c:37:
6a:da:32:c9:2a:b5:ec:2d:28:ba:88:4d:18:f6:a6:
83:16:9a:7f:3f:53:7c:7f:73:57:c9:2e:86:2a:fb:
7e:66:72:af:80:ea:fc:cc:bd:ad:a6:1b:13:98:a3:
d3:ab:1f:45:de:9c:80:9f:67:d0:e4:02:69:4c:ef:
6b:90:e2:b0:0c:b8:14:46:c0:99:b9:bc:64:36:0d:
58:62:7e:8f:d8:fc:64:a2:35:83:44:23:ee:69:8f:
37:c3:22:66:7f:65:0e:fa:fc:6b:65:7d:ee:90:c8:
a4:ad:4d:e8:06:58:e8:8a:d2:30:fb:40:53:98:7b:
81:31:82:db:fe:89:97:24:d5:58:a1:1c:e7:8e:2a:
8e:02:e2:13:f5:87:85:6e:57:81:2e:33:84:d2:00:
77:dc:48:b0:f9:e6:d3:df:7d:19:ca:61:a5:3b:e1:
90:ad:7e:4f:80:27:3f:e6:04:fd:bb:5b:6f:ee:91:
e6:76:40:9f:1e:e3:1f:ea:d1:8b:9b:f5:93:6a:e9:
88:03:7d:b4:5a:4b:d8:7c:86:34:7c:a3:ac:ae:6f:
00:47:37:53:59:0c:f2:e5:d1:84:16:d6:7b:f8:25:
b3:2d:95:c6:20:76:0c:bb:9a:76:5a:9f:f4:ab:dc:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:29:79:C7:B5:84:F9:C3:AF:11:94:41:76:DE:3D:F6:EE:5B:78
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rmopece1hPnDrxGUQXbePfbuW3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.42.0/23
Signature Algorithm: sha256WithRSAEncryption
38:6f:2c:24:92:65:e7:a4:4c:7a:bf:3f:13:41:54:5c:ce:af:
b8:75:ec:57:35:4d:1c:0e:d3:38:f1:98:00:77:e1:33:ff:bf:
b0:47:ca:e3:b2:1f:0c:05:0d:1e:f3:c5:a1:f5:02:f8:4f:6f:
f7:f7:cd:61:5e:39:b9:c8:3c:fb:64:5e:cb:01:bb:c9:6a:b0:
7c:c1:9a:04:7e:bc:cd:52:3f:69:9d:67:b1:74:6e:b7:93:fe:
2a:64:3f:3e:9b:15:fc:2f:2d:d2:57:ae:7a:41:aa:76:ee:52:
49:81:12:8b:94:5b:12:19:80:42:b1:f5:17:87:5f:c4:a1:af:
89:33:fb:01:d2:36:77:b0:33:63:07:64:a9:34:e0:f5:25:12:
3c:a4:40:85:f5:76:cd:24:bd:9e:8d:49:a8:26:2c:f8:5a:6f:
62:47:2b:67:75:89:11:65:23:02:b5:51:b8:94:0c:e7:5a:8a:
91:9d:a1:7b:9b:69:00:af:e1:6c:1c:44:af:4d:25:92:e5:dc:
0e:4b:9e:69:6c:79:f4:b1:55:e1:a2:ef:13:54:e7:23:6b:37:
12:c8:3e:ab:57:44:1a:4d:72:ec:a7:03:d9:b2:83:68:98:8e:
95:62:31:23:4b:3c:97:ef:54:27:17:8f:ba:ea:d9:72:3a:c9:
43:d0:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:38:52 2025 by rpki-client