Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/mCmdogU3kH7W3vnMnxNLVbtvTa4.roa
File: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (raw, json)
Hash identifier: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=
Subject key identifier: 98:29:9D:A2:05:37:90:7E:D6:DE:F9:CC:9F:13:4B:55:BB:6F:4D:AE
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 019424B26A7B33B287922A87EB9D3492134C
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/mCmdogU3kH7W3vnMnxNLVbtvTa4.roa
Signing time: Thu 02 Jan 2025 01:47:39 +0000
ROA not before: Thu 02 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41332
IP address blocks: 194.127.234.0/23 maxlen: 24
194.127.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6a:7b:33:b2:87:92:2a:87:eb:9d:34:92:13:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Jan 2 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98299da20537907ed6def9cc9f134b55bb6f4dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:bc:5a:c0:29:47:fb:68:f5:d7:a0:b4:a2:
fb:2d:46:a3:29:a4:26:6d:74:5c:25:af:11:84:8f:
51:bc:3c:74:fc:9a:fc:35:94:50:58:25:0a:a2:62:
9a:dd:04:dd:b7:70:b7:14:11:19:e8:1f:cd:f2:51:
19:04:be:79:ed:b3:97:59:1f:9c:40:8c:05:f8:55:
7e:fe:f0:7a:0d:bc:f3:60:33:90:62:c7:73:d2:28:
1e:72:db:93:bb:29:07:80:0c:59:4a:db:13:45:a1:
8f:5a:bd:b1:4b:9b:97:5e:fe:e6:c5:29:67:00:6c:
46:4d:74:c2:13:f1:16:50:da:b1:bf:fe:bd:14:06:
ec:4f:08:cb:36:aa:f3:ad:e7:d2:e6:04:36:cc:c2:
33:65:42:a7:3d:08:6a:e7:7b:aa:58:cc:04:46:ba:
75:f0:c6:43:d8:8b:7a:16:aa:7e:c5:65:3d:b0:67:
88:3e:bd:eb:4c:a0:3d:f9:ce:2a:d3:f4:02:a6:3f:
d3:23:af:d7:21:89:3a:c0:5f:e7:28:93:40:11:b0:
eb:d5:71:0e:7f:fa:d4:aa:cf:91:4d:f4:b1:b5:58:
00:eb:3a:b5:ce:d6:0b:d8:e1:16:9d:6a:1a:53:5c:
18:c0:21:47:0c:2b:13:53:39:d6:87:ae:ae:b6:1e:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:9D:A2:05:37:90:7E:D6:DE:F9:CC:9F:13:4B:55:BB:6F:4D:AE
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/mCmdogU3kH7W3vnMnxNLVbtvTa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.234.0-194.127.237.255
Signature Algorithm: sha256WithRSAEncryption
4a:83:12:de:a6:a5:3a:35:28:96:77:89:b0:2a:97:8c:84:30:
a0:e1:f3:cb:7e:fd:14:dc:e2:4c:b9:f6:7a:5d:da:1f:66:24:
a4:44:bd:0c:05:74:71:68:9e:25:b0:c5:5e:a5:d5:66:d4:91:
24:eb:22:54:bf:26:a9:4f:e5:fa:7e:ca:5a:48:6a:60:23:eb:
16:cd:96:bf:9f:03:92:cc:81:6a:fa:4d:da:5a:40:c5:61:4b:
f4:c6:50:f9:59:39:5b:d7:d5:90:20:d5:3e:56:cd:f5:6d:d6:
2f:90:11:87:3e:a2:f3:40:80:6c:2f:93:ff:6c:35:36:ad:cb:
00:86:ff:64:23:f2:38:bd:78:35:22:f1:74:f1:20:70:cf:a2:
da:2e:9b:34:d4:b2:e4:fe:7b:59:c2:fc:2a:eb:47:1b:65:1c:
34:c5:c6:e0:fa:bc:47:82:88:57:e1:d7:5b:2e:74:d2:5c:34:
9c:e5:29:a5:72:e0:0d:98:4f:86:cb:4f:3d:da:e2:b1:46:6c:
d5:a0:2b:fa:b9:12:6c:6c:29:0d:74:5b:92:4e:d8:89:d7:28:
e7:d9:48:7d:33:0d:c3:7f:ef:5c:24:3c:e7:e9:71:a4:c5:75:
97:b1:b6:b7:e2:d1:18:1a:25:54:24:c2:69:2c:da:95:d7:cc:
80:64:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:12 2025 by rpki-client