Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/MChEll1heVmbFidBBJvsHOrl4fE.roa
File: MChEll1heVmbFidBBJvsHOrl4fE.roa (raw, json)
Hash identifier: ARoQGxRNkrRdwVI3hmAp61vYLz+zRk9Xivm5xOWKmgg=
Subject key identifier: 30:28:44:96:5D:61:79:59:9B:16:27:41:04:9B:EC:1C:EA:E5:E1:F1
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 019420D645F5059F60FB0AF9517AAFD8AE36
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/MChEll1heVmbFidBBJvsHOrl4fE.roa
Signing time: Wed 01 Jan 2025 07:48:21 +0000
ROA not before: Wed 01 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208678
IP address blocks: 185.141.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:45:f5:05:9f:60:fb:0a:f9:51:7a:af:d8:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Jan 1 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=302844965d6179599b162741049bec1ceae5e1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:86:af:9c:df:b1:de:7c:0b:e6:92:d6:a1:
ba:4a:fe:db:82:a1:79:33:54:30:f0:ee:10:d3:24:
5e:28:48:0f:40:3a:c3:e7:e7:b5:7e:45:26:0c:33:
18:94:0a:50:3d:b6:8b:37:33:07:0f:fa:6f:76:e3:
1b:9c:fe:f2:ef:41:c3:16:30:ee:7b:d1:77:8f:eb:
e0:50:bc:83:f3:8b:84:9e:d2:11:b5:65:8d:4b:7e:
0f:5a:9a:77:3b:5d:e9:c1:f8:df:63:45:f4:48:a6:
d1:42:49:87:b1:bd:6d:8f:b0:0a:6e:21:93:40:45:
c0:2f:d8:bc:44:4b:f2:a4:57:73:5d:bb:2a:73:d0:
2f:a7:6d:f9:c4:ac:73:ff:0c:a9:51:ad:08:de:9d:
75:1e:1b:3a:c5:26:a7:63:9c:1c:1f:f9:15:d0:a2:
72:f7:3e:66:6f:6f:aa:80:e7:7e:94:49:35:3b:76:
25:99:95:4d:07:f8:03:69:ab:04:d2:d3:28:fd:b6:
47:db:da:04:8c:b3:90:74:bb:f4:65:38:26:a3:9c:
ed:f8:88:cd:f6:f4:17:ad:04:b5:c0:99:a0:24:87:
09:46:a7:40:05:59:fb:ff:c4:fb:0f:86:9d:6c:33:
9d:6e:0c:26:8c:c3:f1:95:43:02:2f:94:f2:94:8f:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:44:96:5D:61:79:59:9B:16:27:41:04:9B:EC:1C:EA:E5:E1:F1
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/MChEll1heVmbFidBBJvsHOrl4fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:27:4b:6f:2e:68:56:f7:6f:00:16:d6:23:dd:d4:28:55:4f:
f6:05:5b:36:1c:dd:20:18:e5:53:e7:e9:33:bd:cc:87:52:18:
23:47:27:32:89:c4:8f:a4:0f:b8:b2:a6:5c:d8:59:5a:c4:8f:
78:df:b7:18:1b:1e:46:05:ec:ce:28:0d:d8:cb:df:3f:99:d5:
a3:9a:99:c9:c4:b8:43:0c:73:b7:ac:31:e2:25:92:75:69:d9:
2c:d9:0e:37:9b:43:4b:5c:80:64:25:2d:7a:cb:e3:bc:30:e7:
12:6d:52:e3:bd:23:af:c5:9c:f6:be:53:43:9c:b2:3f:84:94:
31:3a:08:35:98:fe:01:5d:89:90:2f:ef:ef:e5:3b:2f:01:db:
f1:10:fc:9b:70:b1:c5:62:ec:be:17:a7:a2:cd:12:fa:14:9e:
b4:19:96:7c:e4:35:b8:3c:a4:a9:4f:8c:84:ef:c1:16:88:d8:
21:02:8f:e3:be:ed:e1:8d:16:2b:2a:a7:cb:8b:7d:c7:5f:73:
57:04:4c:82:b2:51:13:1c:1e:12:cc:15:b7:8a:bb:b0:dc:3a:
13:40:ba:50:5e:ce:5a:25:ba:ea:85:17:27:e0:5d:71:68:bb:
a3:ff:62:33:f9:c9:8b:82:08:2c:2f:df:59:18:14:bb:6f:b7:
bb:23:ee:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1kX1BZ9g+wr5UXqv2K42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDc3ZmU2OGZhOWRhYjY0NGZkMGEzZGZiM2EwMjU2NmE4
MDk1OTAwHhcNMjUwMTAxMDc0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDI4NDQ5NjVkNjE3OTU5OWIxNjI3NDEwNDliZWMxY2VhZTVlMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyWGr5zfsd58C+aS1qG6Sv7bgqF5
M1Qw8O4Q0yReKEgPQDrD5+e1fkUmDDMYlApQPbaLNzMHD/pvduMbnP7y70HDFjDu
e9F3j+vgULyD84uEntIRtWWNS34PWpp3O13pwfjfY0X0SKbRQkmHsb1tj7AKbiGT
QEXAL9i8REvypFdzXbsqc9Avp235xKxz/wypUa0I3p11Hhs6xSanY5wcH/kV0KJy
9z5mb2+qgOd+lEk1O3YlmZVNB/gDaasE0tMo/bZH29oEjLOQdLv0ZTgmo5zt+IjN
9vQXrQS1wJmgJIcJRqdABVn7/8T7D4adbDOdbgwmjMPxlUMCL5TylI85ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDAoRJZdYXlZmxYnQQSb7Bzq5eHxMB8GA1UdIwQY
MBaAFDrXf+aPqdq2RP0KPfs6AlZqgJWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2Yt
NjUzYTcwYmYwOTI1LzEvTUNoRWxsMWhlVm1iRmlkQkJKdnNIT3JsNGZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2YtNjUzYTcwYmYwOTI1
LzEvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY0EMA0G
CSqGSIb3DQEBCwUAA4IBAQAbJ0tvLmhW928AFtYj3dQoVU/2BVs2HN0gGOVT5+kz
vcyHUhgjRycyicSPpA+4sqZc2FlaxI9437cYGx5GBezOKA3Yy98/mdWjmpnJxLhD
DHO3rDHiJZJ1adks2Q43m0NLXIBkJS16y+O8MOcSbVLjvSOvxZz2vlNDnLI/hJQx
Ogg1mP4BXYmQL+/v5TsvAdvxEPybcLHFYuy+F6eizRL6FJ60GZZ85DW4PKSpT4yE
78EWiNghAo/jvu3hjRYrKqfLi33HX3NXBEyCslETHB4SzBW3iruw3DoTQLpQXs5a
JbrqhRcn4F1xaLuj/2Iz+cmLgggsL99ZGBS7b7e7I+6p
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:35 2025 by rpki-client