Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/mJWGLM8T_1at8gmBKfytV80xCsY.roa
File: mJWGLM8T_1at8gmBKfytV80xCsY.roa (raw, json)
Hash identifier: nBO32lhSvSUXg7lebbqssrsekQToM8cKNZVTOaKe1bQ=
Subject key identifier: 98:95:86:2C:CF:13:FF:56:AD:F2:09:81:29:FC:AD:57:CD:31:0A:C6
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 0194D5B798DB996370F9F77315E4343C0779
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/mJWGLM8T_1at8gmBKfytV80xCsY.roa
Signing time: Wed 05 Feb 2025 10:46:06 +0000
ROA not before: Wed 05 Feb 2025 10:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50377
IP address blocks: 5.180.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:b7:98:db:99:63:70:f9:f7:73:15:e4:34:3c:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Feb 5 10:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9895862ccf13ff56adf2098129fcad57cd310ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:1e:90:46:24:f9:65:08:a3:f8:2b:19:97:
9a:90:50:8d:00:1c:64:70:0d:6e:1d:39:fb:4f:11:
7c:f0:0e:46:58:63:7d:8c:d2:9f:a3:fd:14:a2:63:
0f:5a:2d:8c:15:4b:87:aa:a6:9a:10:39:10:06:ee:
35:fc:59:b5:67:50:44:8d:dd:f3:17:59:b3:64:34:
41:a9:c3:2c:e7:34:4c:96:8b:0d:45:b5:28:6b:dd:
b2:9a:7b:86:7c:65:92:a0:29:ba:b8:28:47:d1:72:
13:0b:9f:74:1d:49:45:d8:33:31:4f:be:a9:ca:7f:
85:e7:49:29:74:5a:8b:db:7d:77:73:c8:cc:54:b3:
8f:2d:03:b8:8c:55:59:8e:c6:81:a3:14:5d:91:3e:
27:7b:34:38:ed:dd:7f:e2:1e:40:42:f3:39:68:1d:
40:a0:db:32:07:bb:a9:2e:d2:8e:fb:c3:97:02:47:
22:bd:0d:08:fc:a4:0e:c0:5b:d8:3a:57:ee:33:6a:
14:65:11:0c:b5:55:7f:d8:44:1d:d4:60:9d:01:b8:
fb:85:5c:d2:43:81:c7:b4:d0:39:ef:55:1a:42:cc:
2e:d5:99:ee:eb:6b:18:b3:28:c0:50:59:f3:ed:eb:
04:1d:08:19:80:13:94:41:b5:3e:e3:5e:2a:b0:ed:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:86:2C:CF:13:FF:56:AD:F2:09:81:29:FC:AD:57:CD:31:0A:C6
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/mJWGLM8T_1at8gmBKfytV80xCsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:66:22:a7:cc:fb:e1:f0:ed:a7:b0:09:d9:c2:bf:72:d9:86:
9e:0e:11:e6:bc:cf:50:39:31:0f:39:d4:f0:2e:ab:4e:e1:23:
09:33:4b:dd:7e:36:c5:52:9a:b8:f7:4c:23:af:7e:43:05:fd:
f5:18:8c:64:0b:28:9e:4f:d8:88:03:4a:d8:52:82:52:b2:1d:
8e:61:ab:3e:a1:fc:5d:b3:6f:4b:69:8b:c2:56:eb:4b:82:e1:
93:9e:6d:e1:d1:a3:8d:b4:de:25:d1:22:d7:68:a9:e2:c6:e9:
be:29:fa:5a:bc:50:02:1e:0c:fe:ba:24:68:3f:0e:13:5c:0e:
ea:78:05:6f:da:b5:78:5c:b0:47:8a:ce:4d:8a:ef:a3:77:8c:
ba:86:e9:05:92:38:d5:3e:31:fe:58:a9:2e:69:96:28:f9:d2:
a7:c7:79:54:7a:7b:1d:04:48:85:8c:7e:20:aa:07:0b:10:8b:
f9:e3:bd:69:dd:6f:c2:7c:70:30:b5:e9:08:05:10:63:e7:23:
dc:28:c8:79:f7:df:a4:24:94:f2:38:fb:cf:5e:c4:24:3e:6b:
3f:07:d7:31:21:4a:12:45:53:92:27:30:3e:f6:39:d9:f9:cf:
98:11:c6:1e:a8:fe:2b:2b:c7:70:92:2a:d4:f2:5f:7d:94:de:
50:fc:3d:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTVt5jbmWNw+fdzFeQ0PAd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjUwMjA1MTA0NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODk1ODYyY2NmMTNmZjU2YWRmMjA5ODEyOWZjYWQ1N2NkMzEwYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgcekEYk+WUIo/grGZeakFCNABxk
cA1uHTn7TxF88A5GWGN9jNKfo/0UomMPWi2MFUuHqqaaEDkQBu41/Fm1Z1BEjd3z
F1mzZDRBqcMs5zRMlosNRbUoa92ymnuGfGWSoCm6uChH0XITC590HUlF2DMxT76p
yn+F50kpdFqL2313c8jMVLOPLQO4jFVZjsaBoxRdkT4nezQ47d1/4h5AQvM5aB1A
oNsyB7upLtKO+8OXAkcivQ0I/KQOwFvYOlfuM2oUZREMtVV/2EQd1GCdAbj7hVzS
Q4HHtNA571UaQswu1Znu62sYsyjAUFnz7esEHQgZgBOUQbU+414qsO0obwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiVhizPE/9WrfIJgSn8rVfNMQrGMB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvbUpXR0xNOFRfMWF0OGdtQktmeXRWODB4Q3NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbSMMA0G
CSqGSIb3DQEBCwUAA4IBAQCyZiKnzPvh8O2nsAnZwr9y2YaeDhHmvM9QOTEPOdTw
LqtO4SMJM0vdfjbFUpq490wjr35DBf31GIxkCyieT9iIA0rYUoJSsh2OYas+ofxd
s29LaYvCVutLguGTnm3h0aONtN4l0SLXaKnixum+KfpavFACHgz+uiRoPw4TXA7q
eAVv2rV4XLBHis5Niu+jd4y6hukFkjjVPjH+WKkuaZYo+dKnx3lUensdBEiFjH4g
qgcLEIv5471p3W/CfHAwtekIBRBj5yPcKMh599+kJJTyOPvPXsQkPms/B9cxIUoS
RVOSJzA+9jnZ+c+YEcYeqP4rK8dwkirU8l99lN5Q/D0R
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:40:13 2025 by rpki-client