Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_mvpzQdrT-UPeHFVLuGvqi5s8sg.roa
File: _mvpzQdrT-UPeHFVLuGvqi5s8sg.roa (raw, json)
Hash identifier: 2qnT0PTv3mf8zPz3H6aGiUOr76hH+q7zL6DiRLrU15Y=
Subject key identifier: FE:6B:E9:CD:07:6B:4F:E5:0F:78:71:55:2E:E1:AF:AA:2E:6C:F2:C8
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA65EDF81A1CE3B8AFD58C1DEE076E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_mvpzQdrT-UPeHFVLuGvqi5s8sg.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34412
IP address blocks: 5.57.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:65:ed:f8:1a:1c:e3:b8:af:d5:8c:1d:ee:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe6be9cd076b4fe50f7871552ee1afaa2e6cf2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:6e:f0:07:2f:89:12:ce:cf:ec:60:ac:ea:
14:6d:c6:8d:bf:04:b3:e9:f9:98:c6:ca:11:26:28:
3f:61:eb:7a:66:c1:dc:80:cf:c1:7d:ef:ef:39:9a:
12:06:bc:ed:91:d5:c0:43:1d:65:60:23:90:19:44:
99:6d:cd:d5:35:b4:76:d3:a7:4a:63:58:96:c5:5f:
43:74:13:3d:21:fa:45:37:1f:a6:7c:ea:cf:48:5f:
2e:80:32:f2:ad:f4:f1:ac:02:43:83:25:f6:03:73:
ff:31:2d:79:96:7e:37:ee:f2:ed:7f:15:1f:6c:36:
5e:88:45:fb:05:df:7a:0b:7d:f8:3f:08:42:26:fe:
e1:98:5c:3f:ea:1d:98:b7:fa:50:7a:a0:fd:92:32:
e2:42:74:88:cd:0a:be:d0:ff:af:33:fb:c6:97:26:
64:ea:e2:48:6d:ac:7d:e1:49:1f:45:8c:38:31:a9:
79:a1:d1:ed:75:a1:b5:5e:bd:21:9d:1c:4c:ee:62:
0d:7c:40:54:7b:ab:0b:11:d6:d1:cf:42:14:6e:ee:
91:90:09:4a:bb:d7:d4:f1:39:24:7d:aa:8f:d4:a9:
94:06:a4:24:72:5e:1d:4c:a7:cc:90:6c:17:dc:89:
2a:81:b2:f3:79:6d:90:4e:05:00:eb:a2:e4:5e:e3:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6B:E9:CD:07:6B:4F:E5:0F:78:71:55:2E:E1:AF:AA:2E:6C:F2:C8
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_mvpzQdrT-UPeHFVLuGvqi5s8sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.37.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6a:e9:9e:6b:5d:af:38:af:aa:78:8b:7f:de:18:97:51:ce:
6c:8d:98:5b:69:ea:ed:4a:f7:ac:25:48:fc:6a:9e:1b:8d:b1:
fa:70:ff:0a:42:03:05:da:7e:77:bf:4a:0e:a5:4c:a2:16:5a:
fb:b1:2c:33:0d:fa:e4:d7:51:33:59:3a:82:2f:4d:fc:fe:43:
b7:b7:0f:36:f3:b9:e0:c3:18:27:72:1d:07:ae:fa:0b:36:cf:
3a:16:53:56:9e:a7:3c:4c:2a:30:eb:42:85:80:e3:34:c1:75:
6a:bd:dd:f6:a8:34:10:54:b6:6e:7e:80:e1:6c:7d:19:6d:63:
2b:f8:f9:12:bd:db:4c:5e:16:ac:16:32:80:78:3c:3c:b7:3a:
a9:22:bc:9b:35:79:53:b9:64:57:6e:cb:76:3e:b6:4f:01:1b:
0b:ee:a5:41:ce:17:cc:f9:1b:33:f2:51:3d:73:6a:4b:b6:55:
d0:0e:61:2b:78:28:bf:ac:63:0b:5a:b3:97:b1:be:c1:10:bc:
92:64:02:64:91:cf:89:aa:6e:d6:33:37:43:4a:3b:2d:05:72:
8d:09:b0:3d:6b:23:7b:6d:28:82:65:c2:dc:b0:19:79:db:b1:
18:e6:7a:38:aa:51:46:e0:86:1c:c5:92:41:9a:ef:1d:d0:91:
a6:9f:f0:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mXt+Boc47iv1Ywd7gduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwMTAxMDM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTZiZTljZDA3NmI0ZmU1MGY3ODcxNTUyZWUxYWZhYTJlNmNmMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsulu8AcviRLOz+xgrOoUbcaNvwSz
6fmYxsoRJig/Yet6ZsHcgM/Bfe/vOZoSBrztkdXAQx1lYCOQGUSZbc3VNbR206dK
Y1iWxV9DdBM9IfpFNx+mfOrPSF8ugDLyrfTxrAJDgyX2A3P/MS15ln437vLtfxUf
bDZeiEX7Bd96C334PwhCJv7hmFw/6h2Yt/pQeqD9kjLiQnSIzQq+0P+vM/vGlyZk
6uJIbax94UkfRYw4Mal5odHtdaG1Xr0hnRxM7mINfEBUe6sLEdbRz0IUbu6RkAlK
u9fU8TkkfaqP1KmUBqQkcl4dTKfMkGwX3IkqgbLzeW2QTgUA66LkXuOW+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP5r6c0Ha0/lD3hxVS7hr6oubPLIMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvX212cHpRZHJULVVQZUhGVkx1R3ZxaTVzOHNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTklMA0G
CSqGSIb3DQEBCwUAA4IBAQBUaumea12vOK+qeIt/3hiXUc5sjZhbaertSvesJUj8
ap4bjbH6cP8KQgMF2n53v0oOpUyiFlr7sSwzDfrk11EzWTqCL038/kO3tw8287ng
wxgnch0HrvoLNs86FlNWnqc8TCow60KFgOM0wXVqvd32qDQQVLZufoDhbH0ZbWMr
+PkSvdtMXhasFjKAeDw8tzqpIrybNXlTuWRXbst2PrZPARsL7qVBzhfM+Rsz8lE9
c2pLtlXQDmEreCi/rGMLWrOXsb7BELySZAJkkc+Jqm7WMzdDSjstBXKNCbA9ayN7
bSiCZcLcsBl527EY5no4qlFG4IYcxZJBmu8d0JGmn/DX
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:15 2025 by rpki-client