Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/hMX16ycD_uk-plT2tgBVk_QRIts.roa
File: hMX16ycD_uk-plT2tgBVk_QRIts.roa (raw, json)
Hash identifier: BUm/1cBRJ7uJXrwWDMYU8YunYRBuyMSTCIxHnMPsW0s=
Subject key identifier: 84:C5:F5:EB:27:03:FE:E9:3E:A6:54:F6:B6:00:55:93:F4:11:22:DB
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 0196E407104613AEE7F9C92AB3C70194BB57
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/hMX16ycD_uk-plT2tgBVk_QRIts.roa
Signing time: Sun 18 May 2025 15:33:10 +0000
ROA not before: Sun 18 May 2025 15:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 37.140.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e4:07:10:46:13:ae:e7:f9:c9:2a:b3:c7:01:94:bb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: May 18 15:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84c5f5eb2703fee93ea654f6b6005593f41122db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:2f:20:c9:06:2f:9e:71:38:77:0a:29:33:
06:57:e9:35:ea:68:da:1e:ef:59:0f:2d:0c:e1:35:
b3:43:6f:2d:b7:9d:cc:3b:14:c6:08:d8:78:3e:79:
cf:cf:cf:ab:60:34:3a:15:45:c9:a3:20:d6:bc:ae:
3c:4d:d1:21:b8:d3:e1:65:b0:25:36:ef:57:71:5c:
ca:46:0c:3b:01:7f:ae:09:f3:63:29:a2:bd:90:c3:
a7:19:14:d8:70:31:82:fe:c6:8f:cf:b0:b0:1f:9c:
94:07:ec:dd:61:a9:01:ae:2a:31:08:89:1b:9a:f6:
9f:2f:de:2b:37:c7:33:2b:51:5e:13:2e:f0:95:0d:
f2:d9:cd:6c:f2:20:cd:d0:2e:36:19:83:54:b4:ff:
b7:36:9f:94:9e:fb:12:b5:b3:6d:c2:0d:d7:7c:ac:
10:f1:88:3d:b4:a3:ad:c9:42:78:eb:14:dd:cb:d6:
5c:dc:c1:56:5c:e7:47:6e:d3:66:45:18:5f:9d:30:
c1:76:8f:2c:13:13:d2:58:91:07:bd:94:8d:3c:31:
4d:d1:0b:9e:b5:8e:11:64:15:93:22:12:65:90:82:
a5:d3:46:f4:a3:31:54:2a:bc:54:3a:21:da:bb:a8:
d8:d9:a6:91:f2:16:18:e3:8b:5e:b7:9a:af:ee:fc:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C5:F5:EB:27:03:FE:E9:3E:A6:54:F6:B6:00:55:93:F4:11:22:DB
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/hMX16ycD_uk-plT2tgBVk_QRIts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.219.0/24
Signature Algorithm: sha256WithRSAEncryption
55:20:da:0d:4b:52:f5:e4:45:9a:27:03:ae:aa:87:12:93:b0:
da:12:13:53:7b:75:7c:ab:5c:d9:e7:c8:1f:19:3f:00:bb:55:
77:a8:35:60:70:ed:02:37:1c:b0:ab:65:fe:b0:88:0f:c6:52:
32:16:82:a4:5f:37:3d:11:4f:20:ab:8f:28:e7:78:d0:8c:a0:
49:4b:63:a1:79:cd:3b:e0:13:a4:5f:a6:b9:cb:8d:b4:e7:a5:
29:59:36:99:7b:a3:fd:73:17:9c:e0:8e:e6:e2:e5:9b:e5:fd:
89:e3:c8:41:18:04:d9:2e:27:3b:c8:42:a5:69:6b:d7:54:97:
a8:3e:e8:f9:1b:9f:82:8a:0d:fc:1d:51:ba:fa:82:be:20:2d:
fb:e8:fa:18:93:fa:65:22:bf:c4:61:fa:7b:f6:0c:be:60:d7:
59:ef:a0:11:db:31:91:97:35:d0:14:4b:c9:b0:c6:5b:94:51:
b8:94:31:98:05:c0:24:f0:39:08:8a:db:85:b5:c1:27:0c:dd:
9f:5b:d2:88:bf:fb:8b:3f:6b:0c:68:75:62:41:22:12:ea:e0:
43:26:5b:ad:0a:e7:03:46:de:a2:78:d1:d8:a8:81:7f:65:c0:
25:fe:58:61:7d:57:ad:39:4d:9d:af:2c:4d:23:3e:7b:d7:2f:
7d:18:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:12:42 2025 by rpki-client