Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MxXaQUELXo1ThIX579M6l4KvrUw.roa
File: MxXaQUELXo1ThIX579M6l4KvrUw.roa (raw, json)
Hash identifier: +4LNo2C1I+BpG/Q1xlakEMv7B/aeS6KcZEWKLhpXrek=
Subject key identifier: 33:15:DA:41:41:0B:5E:8D:53:84:85:F9:EF:D3:3A:97:82:AF:AD:4C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0195AD9BE600C312F2B19AF38305D5970666
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MxXaQUELXo1ThIX579M6l4KvrUw.roa
Signing time: Wed 19 Mar 2025 08:53:49 +0000
ROA not before: Wed 19 Mar 2025 08:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211141
IP address blocks: 185.226.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:9b:e6:00:c3:12:f2:b1:9a:f3:83:05:d5:97:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 19 08:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3315da41410b5e8d538485f9efd33a9782afad4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:e9:48:49:11:af:3c:54:be:ff:6b:63:52:
8d:f3:c8:46:3c:24:25:77:56:ac:4b:a3:36:2a:55:
33:ba:a1:c3:03:27:2e:48:eb:06:86:69:a6:9d:e2:
4e:a9:b7:f6:e6:9d:ca:34:76:bb:4a:12:01:2a:29:
0e:23:af:1e:24:6c:6c:71:2d:1b:ee:74:56:f6:97:
c3:9e:b3:63:f6:fb:73:07:7d:1e:ad:5c:8b:44:74:
d2:2b:5e:ce:a1:8e:97:1e:8e:91:9e:07:f8:a9:c8:
2c:d7:0d:63:57:2d:19:ce:b4:b7:29:d5:17:a1:2c:
e8:9a:21:05:e7:e4:c9:01:53:29:59:dd:ca:d7:86:
01:5c:81:6b:1b:b5:63:52:78:93:53:28:c2:80:7b:
7e:9e:67:46:7a:3f:87:63:c6:3a:98:86:6b:1f:dd:
c2:1d:b0:e8:f3:76:60:2c:1f:40:8c:49:31:e0:38:
54:db:b2:43:8a:1d:31:16:c7:c6:c3:12:d3:8c:9b:
45:0d:08:65:4e:fa:56:ef:b2:fd:79:91:20:bb:a6:
d5:e4:e5:7c:cf:f1:7e:8f:8e:06:82:fb:35:6e:14:
c7:a4:78:a0:b1:6d:5c:76:e3:cc:3e:ff:5d:78:a7:
f2:94:48:fc:bf:c2:59:7c:06:d6:f4:e6:c3:79:37:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:15:DA:41:41:0B:5E:8D:53:84:85:F9:EF:D3:3A:97:82:AF:AD:4C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/MxXaQUELXo1ThIX579M6l4KvrUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.195.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:3e:00:8b:a2:fe:6d:4f:8a:16:55:0d:23:89:ca:11:b1:57:
df:6c:20:9d:b1:f0:1b:fd:dc:f3:f7:9e:e8:3d:2b:94:ab:ec:
68:22:1a:c8:3e:06:00:c0:78:76:c2:35:e7:2c:e4:2e:cf:88:
30:ef:18:ba:0d:1c:ea:0b:68:8d:5b:71:0d:b6:f3:14:02:b0:
78:66:8d:df:88:16:02:eb:f9:e6:c2:00:0c:05:60:01:91:06:
da:23:c4:a8:94:f7:7a:a0:ca:42:b8:81:b2:ad:f2:29:28:0c:
c9:5b:ed:08:76:d6:56:5a:ae:d6:1f:fd:b1:e9:20:7e:38:e0:
65:d5:ef:15:1f:1a:f0:8e:3b:94:5e:2a:17:21:dc:0c:37:38:
8c:87:19:4a:93:5e:cc:b3:06:24:fc:71:bd:55:4c:db:a3:33:
88:7b:08:ab:26:01:39:f8:55:e6:1c:b8:4d:21:8a:40:2e:2e:
ee:aa:ea:18:5f:0f:54:4d:4a:b3:97:e9:14:e3:b1:2d:25:63:
44:fa:59:3f:88:af:8d:06:8f:c0:5d:1d:8b:90:ba:26:7f:b8:
d8:8d:81:48:c0:90:07:f5:74:b3:d2:2e:bb:b4:14:0c:18:fe:
62:5e:ab:d7:b2:4b:60:99:a0:80:af:7b:c0:a8:89:db:3c:06:
f1:6c:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:05 2025 by rpki-client