Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/5MV2rdKN5gFzkLwT07F5rTi7omY.roa
File: 5MV2rdKN5gFzkLwT07F5rTi7omY.roa (raw, json)
Hash identifier: D3LvO+IMQRq6IdrMAHkY6QYNoiaJ3ZDYs8dNG78o/Fs=
Subject key identifier: E4:C5:76:AD:D2:8D:E6:01:73:90:BC:13:D3:B1:79:AD:38:BB:A2:66
Certificate issuer: /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial: 01941FFA39F05D28C658B356A36429A102B9
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/5MV2rdKN5gFzkLwT07F5rTi7omY.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393960
IP address blocks: 185.221.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:39:f0:5d:28:c6:58:b3:56:a3:64:29:a1:02:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c576add28de6017390bc13d3b179ad38bba266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:da:c7:ec:53:a1:ab:36:a1:db:5c:9d:a3:
9d:ce:79:7b:7c:79:18:eb:cb:5f:63:c2:2a:fe:f8:
2a:3d:9d:cf:ca:fd:b5:82:10:07:14:ab:47:56:2d:
09:3d:ef:2f:2d:5c:91:9b:ac:6e:1e:60:05:90:2a:
a7:2a:41:6b:8b:86:ba:b7:06:6c:f6:97:8f:a4:e8:
e7:0f:82:01:54:a7:3a:c6:05:82:3c:23:5f:1a:15:
5a:4e:e9:44:54:5a:df:1e:ef:ef:dd:0d:7d:ca:38:
1a:33:fb:d9:b0:c9:ad:02:e1:37:4b:e9:93:a6:df:
e8:61:9d:a0:17:8f:15:d9:ed:c0:2d:0c:0e:42:09:
2f:ae:6d:00:3d:9f:6c:d1:3a:65:a8:34:95:70:59:
cf:8a:aa:e2:62:56:19:9b:c2:de:d1:1e:81:af:4e:
f6:4c:f6:6d:cd:c3:5b:a0:fc:5a:ca:8f:a2:56:57:
1b:9b:68:e1:18:9f:64:ef:d5:c6:d8:34:f1:5f:45:
ae:b7:b3:09:0d:22:bb:06:96:3f:7c:f5:1b:de:d6:
31:2f:d2:bd:7b:09:3a:70:a0:52:23:a1:eb:c9:1a:
a3:e7:3a:55:72:6f:be:ac:21:c8:e8:e4:30:d1:91:
1e:9a:4d:65:1b:2e:2b:f5:8c:e2:84:a0:b3:3b:77:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:76:AD:D2:8D:E6:01:73:90:BC:13:D3:B1:79:AD:38:BB:A2:66
X509v3 Authority Key Identifier:
keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/5MV2rdKN5gFzkLwT07F5rTi7omY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.216.0/24
Signature Algorithm: sha256WithRSAEncryption
73:79:c7:b6:a5:7c:c7:ca:c6:ef:94:45:9c:ea:12:26:a5:87:
b5:70:25:d8:9f:00:1c:22:8f:c6:11:25:ed:13:10:1b:47:72:
5e:db:51:0a:b2:f0:b8:8d:ac:d8:72:47:d9:49:63:e4:41:99:
df:41:60:4b:a4:f3:fd:6e:b1:f2:13:62:30:3f:e8:0e:12:93:
ce:59:2a:8a:d7:af:ce:b0:7a:44:8f:db:19:a9:a7:60:6e:cb:
ba:35:76:11:a4:bb:88:bc:be:38:d2:89:bd:cc:0c:c9:2f:e8:
1f:ed:71:ad:bd:6f:a8:3d:fc:39:55:18:6b:17:7e:ce:62:12:
e4:85:8c:70:1e:27:b2:63:01:17:c5:07:58:1e:82:ac:8f:3e:
92:6f:58:0a:6c:53:d6:97:66:1d:fe:63:8a:4c:9b:a1:66:1f:
ff:40:04:df:26:36:0e:ab:c5:28:bb:7a:b2:4a:bd:b5:5f:b6:
8a:68:0f:26:ba:97:8b:af:51:02:c5:2e:3f:ea:9d:b1:81:3b:
a9:38:a1:42:23:13:bf:df:f1:08:ec:27:49:d9:d3:ca:5e:3b:
79:31:74:87:5a:47:9e:3f:13:55:f3:c6:31:e8:1c:8f:be:be:
96:48:39:4f:10:d4:9d:bb:56:67:5d:dd:bf:30:8d:f6:c0:3f:
cb:1a:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:39 2025 by rpki-client