Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/MjdKbFiEyBYefwEqDa5k32efH84.roa
File: MjdKbFiEyBYefwEqDa5k32efH84.roa (raw, json)
Hash identifier: yMrvEUe4dfvDGnvXjb6T/gK+z8B3+E50n+nxlmXb8j8=
Subject key identifier: 32:37:4A:6C:58:84:C8:16:1E:7F:01:2A:0D:AE:64:DF:67:9F:1F:CE
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 019600933753F5C461FC935B7C1D48B56F22
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/MjdKbFiEyBYefwEqDa5k32efH84.roa
Signing time: Fri 04 Apr 2025 11:32:49 +0000
ROA not before: Fri 04 Apr 2025 11:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61438
IP address blocks: 195.64.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:93:37:53:f5:c4:61:fc:93:5b:7c:1d:48:b5:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Apr 4 11:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32374a6c5884c8161e7f012a0dae64df679f1fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:84:48:13:50:c7:4e:76:f3:f9:04:1a:cc:
50:17:b4:b9:cc:25:df:20:c5:2d:1a:39:a5:6e:b0:
10:16:9b:e4:f2:28:52:21:f4:75:72:db:ab:68:aa:
eb:40:3e:40:ce:81:c6:57:59:b9:46:82:e5:85:a0:
ee:d8:77:71:0a:75:02:0f:1d:1d:dd:96:7f:24:75:
05:a7:b3:33:ec:91:01:71:f0:c3:fe:f2:00:e7:59:
8e:ed:66:96:bd:31:97:88:fd:80:24:2d:8f:70:b0:
bb:9e:36:3b:a1:e6:4b:28:07:99:a7:62:c3:67:f8:
c1:8e:11:cd:14:b8:b6:3c:61:bc:1f:a0:5f:1a:99:
7e:40:83:0b:41:89:ee:dd:0f:8a:87:a1:d9:55:cb:
27:1d:8e:5e:92:51:1d:7d:be:7a:39:87:ba:23:c0:
2e:47:64:8c:99:77:62:f1:f6:9f:22:20:e8:ad:1d:
20:3a:09:fc:79:94:52:f7:67:77:e4:b4:2b:89:7a:
df:52:43:69:c0:e2:17:5f:78:b7:32:5c:97:83:78:
d1:96:71:63:6a:f6:d1:1d:21:bc:57:d5:81:36:22:
e1:e7:61:7b:79:91:f4:88:0b:f8:90:6f:be:11:1d:
98:e5:4c:a9:9e:60:20:fa:6e:d8:75:10:e1:b4:dc:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:37:4A:6C:58:84:C8:16:1E:7F:01:2A:0D:AE:64:DF:67:9F:1F:CE
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/MjdKbFiEyBYefwEqDa5k32efH84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.96.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e7:9d:da:f6:ea:7e:00:8d:59:9d:b9:f2:78:64:b1:da:f7:
d8:03:0b:1b:70:4f:99:de:e8:d3:7f:5b:47:45:c4:85:f6:89:
b1:64:92:52:ec:22:55:bd:28:50:21:ae:8c:ed:92:42:7a:8f:
c2:e2:4d:fc:0c:de:99:7b:f6:63:37:2f:3c:65:fb:12:4c:2e:
27:35:7b:6c:97:a1:38:8d:d1:a4:dd:43:a6:3b:15:2c:3e:68:
86:c8:54:c5:99:ac:c6:25:01:46:e3:99:c4:82:98:76:35:c9:
83:4c:3c:ab:b2:7e:b1:45:6f:20:6f:3d:77:44:b5:1d:9d:9b:
d5:88:4f:e9:de:69:cd:a5:9e:c9:6e:4c:91:40:a4:8d:c9:2a:
04:df:3f:f5:d9:d5:49:80:b3:01:ae:6c:dd:2b:11:c4:bf:5e:
06:b7:ed:61:01:37:62:9f:26:72:d3:f7:2f:b5:ca:4f:bd:35:
88:01:d3:1a:b0:c1:72:0d:61:fd:16:5e:1e:76:83:6b:10:0a:
b6:53:42:43:be:00:73:e5:ca:a3:34:54:26:c5:94:66:1c:36:
65:c5:a5:54:d8:c2:a2:3f:24:62:1f:83:d7:7d:49:da:25:75:
1d:9f:c8:2f:68:0e:4d:ca:07:2d:af:d4:1d:2e:fb:4c:3b:80:
ec:33:10:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYAkzdT9cRh/JNbfB1ItW8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjUwNDA0MTEzMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjM3NGE2YzU4ODRjODE2MWU3ZjAxMmEwZGFlNjRkZjY3OWYxZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYaESBNQx0528/kEGsxQF7S5zCXf
IMUtGjmlbrAQFpvk8ihSIfR1cturaKrrQD5AzoHGV1m5RoLlhaDu2HdxCnUCDx0d
3ZZ/JHUFp7Mz7JEBcfDD/vIA51mO7WaWvTGXiP2AJC2PcLC7njY7oeZLKAeZp2LD
Z/jBjhHNFLi2PGG8H6BfGpl+QIMLQYnu3Q+Kh6HZVcsnHY5eklEdfb56OYe6I8Au
R2SMmXdi8fafIiDorR0gOgn8eZRS92d35LQriXrfUkNpwOIXX3i3MlyXg3jRlnFj
avbRHSG8V9WBNiLh52F7eZH0iAv4kG++ER2Y5UypnmAg+m7YdRDhtNydxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDI3SmxYhMgWHn8BKg2uZN9nnx/OMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEvTWpkS2JGaUV5QlllZndFcURhNWszMmVmSDg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0BgMA0G
CSqGSIb3DQEBCwUAA4IBAQAS553a9up+AI1ZnbnyeGSx2vfYAwsbcE+Z3ujTf1tH
RcSF9omxZJJS7CJVvShQIa6M7ZJCeo/C4k38DN6Ze/ZjNy88ZfsSTC4nNXtsl6E4
jdGk3UOmOxUsPmiGyFTFmazGJQFG45nEgph2NcmDTDyrsn6xRW8gbz13RLUdnZvV
iE/p3mnNpZ7JbkyRQKSNySoE3z/12dVJgLMBrmzdKxHEv14Gt+1hATdinyZy0/cv
tcpPvTWIAdMasMFyDWH9Fl4edoNrEAq2U0JDvgBz5cqjNFQmxZRmHDZlxaVU2MKi
PyRiH4PXfUnaJXUdn8gvaA5Nygctr9QdLvtMO4DsMxBV
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:34:15 2025 by rpki-client