Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa
File: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (raw, json)
Hash identifier: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=
Subject key identifier: 33:3E:75:01:C3:76:C1:92:07:0E:14:B7:FF:86:26:BE:62:11:1A:14
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 01941FFA618A652AF3AFC1FC9B15D4D6667A
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 195.211.124.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:61:8a:65:2a:f3:af:c1:fc:9b:15:d4:d6:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333e7501c376c192070e14b7ff8626be62111a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:af:55:c4:a8:81:a5:07:4f:fd:06:09:66:
0e:f3:05:eb:61:3e:0e:f5:ee:01:47:79:f3:86:54:
15:f0:f9:5b:8a:5f:ff:9a:78:1a:85:45:85:5b:45:
58:87:2a:65:a3:b0:7e:43:8c:ac:82:9a:c7:f6:f6:
ad:3d:1f:4c:56:fd:37:c3:de:da:08:6f:f5:27:c1:
fe:85:3b:9b:62:a9:f8:94:d2:1c:ca:e5:58:5b:31:
9e:cb:6a:22:08:e8:54:30:59:76:8e:f9:9d:53:50:
61:f7:c2:dc:41:57:94:74:3a:84:10:33:f6:58:f0:
91:91:0f:d2:d1:31:b8:74:7b:47:12:17:7a:a9:cc:
e5:c8:3f:4d:56:43:49:08:89:89:96:1e:1a:16:5e:
2a:44:00:43:a1:9e:d6:aa:28:b8:08:ed:08:c1:d8:
0d:ca:f4:31:6c:75:53:a6:0c:55:1d:d3:fe:db:f5:
67:0f:90:a3:92:7f:29:0e:3c:c7:a2:3c:c3:3d:65:
f8:f7:d6:b1:72:92:ce:db:9b:a3:b5:8a:cb:9d:65:
ab:d6:0c:f3:74:07:50:32:9d:9f:ed:0f:4f:cf:5b:
0c:41:02:1a:70:1a:c9:46:18:2f:f7:2d:20:64:d2:
fc:a8:f6:63:1f:ee:94:a6:61:2d:3e:18:ed:9c:e4:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:75:01:C3:76:C1:92:07:0E:14:B7:FF:86:26:BE:62:11:1A:14
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9a:57:40:24:c1:94:ba:61:c6:a0:53:49:1f:4f:cf:df:ff:
c6:50:16:dc:d1:b0:d2:a2:e1:27:0e:ec:d2:ed:48:f8:20:46:
5d:f2:13:a4:9f:0b:f0:05:8c:c2:8b:1d:27:1d:68:28:fd:27:
9c:fd:20:94:fd:54:f6:9b:ee:17:61:fb:b3:d9:75:d2:9f:00:
c1:00:14:c7:40:d9:e9:31:3b:93:32:f9:ba:63:e8:8a:bf:2f:
b3:87:47:ad:32:d2:41:1e:29:a7:06:c4:4c:ec:4b:8c:89:af:
3c:d6:65:c0:87:30:d2:cd:7b:a6:fe:29:b7:91:0e:65:3d:e9:
ee:0a:23:12:5b:dd:54:fd:cf:f4:a4:0f:88:04:46:f3:da:15:
1f:1a:90:7e:e6:9c:e0:c4:3c:86:76:41:9c:b9:c2:e4:4d:a9:
ef:68:5d:b8:5b:4f:19:67:17:d6:1e:c1:f6:f3:a1:2b:56:50:
26:fd:35:45:c2:0e:59:c6:68:1a:5a:85:8e:91:65:bd:b0:47:
48:6c:7c:13:17:ee:2a:e8:e1:24:a3:c4:3a:35:20:92:81:39:
5f:30:97:77:ea:5f:8a:8b:c4:fb:04:1f:6c:94:11:72:b5:c4:
49:47:fd:42:6c:de:b2:e6:bb:c2:f0:bd:7b:d1:9b:45:c8:6d:
f5:01:9d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:06 2025 by rpki-client