Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/miHlM9LoOvhYbZQONUYiQ010Y0Y.roa
File: miHlM9LoOvhYbZQONUYiQ010Y0Y.roa (raw, json)
Hash identifier: lxFbzya4PF93jTfC+wdGWG8lRjQOoMqPwgxmgMabAZw=
Subject key identifier: 9A:21:E5:33:D2:E8:3A:F8:58:6D:94:0E:35:46:22:43:4D:74:63:46
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 01970B5AE2CC009336EDE80AD79181CA460C
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/miHlM9LoOvhYbZQONUYiQ010Y0Y.roa
Signing time: Mon 26 May 2025 06:49:55 +0000
ROA not before: Mon 26 May 2025 06:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213648
IP address blocks: 5.182.232.0/22 maxlen: 22
194.93.78.0/24 maxlen: 24
2a14:8700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:5a:e2:cc:00:93:36:ed:e8:0a:d7:91:81:ca:46:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: May 26 06:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a21e533d2e83af8586d940e354622434d746346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:2a:a0:71:b6:07:3d:be:24:a2:e8:ea:93:
41:89:32:89:72:dd:98:4f:d6:4d:73:e3:22:1f:0e:
3c:9e:cc:fa:b0:c0:fa:d5:4a:d1:fb:e7:13:1d:7a:
3a:93:16:7c:f0:21:42:d8:35:f8:7f:07:b8:78:23:
fc:20:f3:90:1d:dd:45:7c:b2:d6:ef:a1:c4:19:85:
3c:ff:05:80:0a:9c:1f:94:fd:e2:5e:bd:eb:53:95:
85:7b:62:27:be:06:e5:44:3a:52:67:b3:a6:f6:61:
c9:09:64:b3:cb:b6:15:3a:92:e3:a8:81:66:10:46:
be:4d:10:84:2e:49:d1:fc:e5:1a:f4:74:41:96:75:
f3:fa:09:5b:ef:3d:ec:a7:03:14:75:ef:77:c1:c3:
82:a1:97:98:f6:48:cd:d0:d5:27:ad:f9:0f:62:84:
19:e0:a0:29:47:cb:9a:a1:52:f1:ca:fc:bd:cc:78:
f5:53:e9:b4:39:55:3e:c6:15:18:31:2f:1f:9b:b1:
35:1b:39:b6:0b:16:12:c0:13:31:ac:27:79:49:d5:
8c:45:88:33:91:83:0a:f3:ac:16:99:09:88:4d:da:
be:93:fb:2e:91:c5:2f:07:67:00:41:3b:12:a5:96:
d8:a4:81:23:b5:2a:07:2b:93:a4:eb:2c:d1:b1:0c:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:E5:33:D2:E8:3A:F8:58:6D:94:0E:35:46:22:43:4D:74:63:46
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/miHlM9LoOvhYbZQONUYiQ010Y0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.232.0/22
194.93.78.0/24
IPv6:
2a14:8700::/29
Signature Algorithm: sha256WithRSAEncryption
5a:53:33:45:4a:28:2f:91:5d:5f:38:b0:55:50:63:0d:07:48:
5d:8d:f6:a8:87:9d:dd:36:d5:9d:40:91:ad:dc:05:10:4d:8b:
96:b4:ff:69:2e:84:52:b0:87:28:6b:d2:42:76:bd:bb:8a:f2:
bf:88:58:d5:8e:5e:51:42:18:97:0b:0b:79:94:0e:48:b1:6d:
7d:6d:09:3f:00:57:66:79:93:43:14:bb:28:02:6e:83:7f:7b:
63:a1:d9:38:08:12:9b:55:b7:1e:75:40:e4:69:60:eb:0d:ea:
2a:bd:1f:bc:65:b4:6c:d8:07:f4:a3:22:a3:60:0c:a4:84:5e:
e1:27:54:4a:5d:b5:5a:54:52:e1:20:7f:df:57:cc:32:55:89:
26:64:66:1b:cc:08:b7:49:5b:03:d5:97:2a:ec:cd:51:eb:f3:
0f:c9:c1:4e:93:75:3d:1a:ef:c0:58:c9:d3:69:27:6b:f3:23:
af:15:50:40:b3:9d:63:50:f1:22:86:57:bd:2d:ce:70:64:e1:
24:03:fa:44:6a:dc:56:3a:18:6c:0e:9f:31:04:f9:8b:66:d0:
88:84:89:13:1d:06:ae:f2:a9:55:9e:c4:03:9e:7b:bf:19:24:
6f:f2:76:05:86:36:e2:54:26:27:cd:4e:f0:33:83:05:9e:76:
0d:75:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:58:10 2025 by rpki-client