Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/mh18CeMUKX0D009-9mGv8SAvgKs.roa
File: mh18CeMUKX0D009-9mGv8SAvgKs.roa (raw, json)
Hash identifier: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=
Subject key identifier: 9A:1D:7C:09:E3:14:29:7D:03:D3:4F:7E:F6:61:AF:F1:20:2F:80:AB
Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial: 019427484A5E94FDA64ED8EA1F8CD784EDED
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/mh18CeMUKX0D009-9mGv8SAvgKs.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28940
IP address blocks: 193.97.168.0/21 maxlen: 21
2001:67c:29dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4a:5e:94:fd:a6:4e:d8:ea:1f:8c:d7:84:ed:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a1d7c09e314297d03d34f7ef661aff1202f80ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:72:d1:02:c0:f1:e5:5e:18:a9:2e:99:5d:
de:ad:6a:72:94:c9:15:bb:90:61:ac:c9:af:a9:17:
cc:8c:59:24:58:52:55:c5:ab:a1:47:35:a4:aa:18:
4a:09:fd:a3:f3:9b:0f:8d:7d:64:09:f0:de:7d:47:
e3:b6:61:64:41:51:98:74:bb:ad:d2:0f:bc:82:95:
3d:79:b3:33:18:a4:a5:be:6c:6a:1c:a7:07:9b:8d:
f5:67:4d:1e:37:10:03:f0:04:ee:ea:f6:0d:90:87:
53:da:d0:6f:d7:04:37:27:30:f3:0f:a3:09:22:37:
83:a2:70:f4:70:aa:3f:f2:ca:10:d0:92:d3:5d:4f:
d7:d3:ab:0b:33:9b:3d:2b:94:c5:9b:50:79:ed:0d:
9b:c1:37:55:4a:ce:21:70:da:4c:da:fc:e6:82:c1:
69:1f:cc:32:e9:d1:8f:96:f0:65:32:de:7f:45:e9:
f3:ed:9a:ae:22:b3:2b:2e:96:c2:a5:fb:96:89:ea:
a2:87:3e:2b:3c:c6:ed:08:02:ae:3b:e1:74:91:51:
fa:16:73:ec:fd:da:85:b2:7e:15:98:0f:08:82:d0:
ba:fa:d6:08:2b:07:7a:65:6e:2a:fe:a6:f0:12:1e:
83:03:34:43:d1:e2:04:71:e5:f9:61:dd:7f:64:64:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:7C:09:E3:14:29:7D:03:D3:4F:7E:F6:61:AF:F1:20:2F:80:AB
X509v3 Authority Key Identifier:
keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/mh18CeMUKX0D009-9mGv8SAvgKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.97.168.0/21
IPv6:
2001:67c:29dc::/48
Signature Algorithm: sha256WithRSAEncryption
80:65:74:76:ca:84:a0:ac:36:81:12:ad:35:71:17:e4:96:6c:
19:8a:76:3b:57:dd:8e:5b:30:f4:a7:34:27:9f:49:6e:5e:5b:
89:dc:83:e1:33:d2:f6:ed:73:89:61:7e:80:c8:2a:0c:89:d0:
14:a6:25:40:11:9f:2c:e9:b0:9d:69:84:00:25:a9:22:13:06:
01:2a:36:d7:7d:51:8c:ff:90:66:81:d6:50:fd:d1:8d:1f:6f:
7a:5c:63:42:29:b8:b1:dd:7d:ca:f0:63:04:80:2f:b7:83:69:
83:4c:e2:d9:3d:55:be:71:13:8c:b2:f0:9a:62:43:e9:1e:f9:
b6:da:33:b5:7d:2b:c2:6f:d3:63:d5:f8:bd:17:8f:47:71:cd:
e0:41:1e:db:31:94:79:f6:13:dd:59:08:a1:40:9a:ac:b7:de:
63:0d:69:37:b3:2f:83:ad:17:58:6c:13:1c:7a:21:75:02:13:
c1:b6:b6:5c:8f:63:b8:f7:98:91:35:36:71:96:d3:e9:0e:95:
71:5b:18:fc:4e:35:03:01:90:71:1c:36:3d:72:8c:64:b8:2a:
5a:05:d8:93:88:c9:17:57:e2:fa:f1:ee:9b:c1:51:71:12:f8:
15:6d:17:ef:4c:c4:4a:bd:9e:50:64:6b:8c:ea:7d:ec:e0:22:
37:70:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:54:03 2025 by rpki-client