Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M4opxI4CjJciXFjqJ_wV4DS5LbI.roa
File: M4opxI4CjJciXFjqJ_wV4DS5LbI.roa (raw, json)
Hash identifier: OOpTlm3lel41fdwepmJ9Q4dosLJqlma0PO0SBgE2q7k=
Subject key identifier: 33:8A:29:C4:8E:02:8C:97:22:5C:58:EA:27:FC:15:E0:34:B9:2D:B2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9714BA7C7B023412ABF43FE79578
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M4opxI4CjJciXFjqJ_wV4DS5LbI.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51076
IP address blocks: 80.242.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:97:14:ba:7c:7b:02:34:12:ab:f4:3f:e7:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=338a29c48e028c97225c58ea27fc15e034b92db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:7f:8f:aa:0b:07:bb:f1:6e:9e:ae:cd:12:
15:aa:75:de:4c:9d:bc:13:9d:83:f6:87:f9:4e:06:
fa:7d:ab:29:bf:32:a4:a9:c9:1e:46:d4:3f:f0:3c:
45:20:8e:45:dd:75:3b:ad:7b:69:3f:f7:f2:fa:cc:
8b:f7:ce:4b:82:d5:a7:ee:31:f6:f1:ad:8d:8d:c8:
2d:9b:26:b8:65:07:ab:94:14:65:03:da:3c:a7:5f:
71:6c:20:ba:a0:62:00:9b:04:a4:bc:7e:3b:7d:59:
ff:0e:80:65:c0:2a:e0:7f:9b:2f:3c:95:c9:7d:2c:
7e:67:7d:48:c6:9e:81:f3:99:e1:eb:82:7f:73:8b:
14:7d:6f:bb:48:3e:1f:a8:01:a7:8c:66:14:97:60:
59:dc:2a:d9:57:3b:94:e5:31:8c:1d:7b:b9:71:cb:
4d:07:37:57:d4:4b:6e:c5:3f:ed:45:d8:64:0b:e8:
e6:90:80:13:7d:06:76:b0:73:f4:0c:be:e6:6e:c2:
d2:c8:a9:a2:bf:14:09:f5:62:59:1f:34:36:fe:bc:
e9:1e:b6:65:64:ab:8d:22:09:b8:12:68:54:04:a7:
06:39:ba:a6:e8:22:5e:7c:d9:21:16:c6:56:1f:1b:
14:d1:06:e0:9c:d2:a8:d3:9f:e3:6f:64:46:d0:34:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:29:C4:8E:02:8C:97:22:5C:58:EA:27:FC:15:E0:34:B9:2D:B2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M4opxI4CjJciXFjqJ_wV4DS5LbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2d:91:20:42:12:08:bb:da:56:7f:90:50:70:4c:6c:5b:6c:
98:61:ad:98:5f:65:90:8d:0b:38:9a:8f:5f:3c:26:ee:02:d3:
08:5d:0e:fe:c8:a4:06:79:d2:12:85:8e:41:da:07:9c:4a:c4:
49:2e:c7:ff:92:d7:81:bc:68:f9:d4:0a:9f:c2:d1:37:15:32:
7c:a9:c2:19:36:6a:42:b2:51:6a:01:47:f0:4f:51:10:55:4a:
0a:4d:53:e0:dd:78:3b:8d:cf:0b:af:04:d2:6b:a9:6b:cc:a8:
2d:ce:59:86:5f:06:dc:b1:d5:8a:f0:30:35:54:a3:9a:14:55:
cb:0d:1f:a9:26:ec:3d:38:33:ef:4e:3d:5f:fc:0d:b9:8d:fe:
42:60:0a:b4:7f:18:c3:77:7c:1d:de:a5:ac:f1:9e:44:61:61:
5e:07:02:57:da:64:41:a0:42:22:ec:94:b6:a4:3b:ba:c3:da:
9e:25:9c:da:bb:80:78:ff:2b:57:21:1a:b5:35:4a:22:fa:63:
94:a4:11:bb:d7:9f:0b:bf:70:85:c6:7d:88:ee:d9:8e:1b:39:
5b:04:9d:9d:1f:3f:6e:48:41:cc:f4:4c:7d:c5:04:ec:b3:d6:
43:e8:d7:00:55:73:00:d0:c4:a9:c4:c5:e4:2f:fb:c3:db:d2:
20:90:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:19 2025 by rpki-client