Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mv_a-WXN9u1j2MpwExlmXt_l8JA.roa
File: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (raw, json)
Hash identifier: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=
Subject key identifier: 9A:FF:DA:F9:65:CD:F6:ED:63:D8:CA:70:13:19:66:5E:DF:E5:F0:90
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019420D598C433862FED0CA82F0AE73FA5A4
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mv_a-WXN9u1j2MpwExlmXt_l8JA.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 193.8.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:98:c4:33:86:2f:ed:0c:a8:2f:0a:e7:3f:a5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9affdaf965cdf6ed63d8ca701319665edfe5f090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:83:7a:e9:51:38:e4:21:19:7f:40:4e:f4:
d7:b2:66:71:fc:fe:41:f6:e3:1e:cb:9e:70:b6:ea:
4f:66:f0:ed:eb:53:c2:7a:25:f6:2d:62:2f:28:a7:
50:da:9d:0f:ab:8b:87:9e:c3:75:32:08:9f:0a:01:
b2:8b:c3:95:ad:50:a2:6e:62:08:8d:e6:d4:1e:9c:
df:96:96:a6:8d:d9:dd:ac:b0:ef:7f:e6:67:d4:3c:
03:5e:e6:d6:8f:74:af:97:da:80:34:84:9c:d3:90:
0c:02:7d:5e:22:c8:0c:a3:23:a7:96:4f:28:14:2f:
d6:83:8b:63:2d:0a:db:f8:73:bc:c3:19:af:94:e1:
b5:54:c4:34:5e:a5:9a:e5:30:b5:59:78:35:92:69:
e4:c7:83:c2:9e:f5:6f:8b:08:a5:ab:d3:78:82:4a:
ee:da:64:a3:66:af:dc:07:ea:5e:73:57:4d:39:dd:
61:48:cf:ff:97:e4:f7:24:98:41:2d:1e:c6:c3:d6:
bb:fe:31:fc:34:aa:77:1b:7c:c7:0e:42:55:47:57:
1f:83:f0:7d:8b:05:85:9d:8d:65:0a:11:be:01:a5:
72:02:8f:e9:35:57:30:67:82:f9:c1:f6:bd:52:d3:
87:24:1f:7a:e2:dc:04:27:1b:bc:7c:1b:de:13:19:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:DA:F9:65:CD:F6:ED:63:D8:CA:70:13:19:66:5E:DF:E5:F0:90
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mv_a-WXN9u1j2MpwExlmXt_l8JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.248.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c4:d0:ee:f6:e4:69:d8:74:ea:b0:16:e4:3d:76:9d:75:46:
98:8d:2e:3b:9d:5b:d0:67:31:f0:f9:9a:43:15:60:d7:fa:a9:
cc:01:41:e7:84:a5:fa:7d:75:bf:86:e5:b6:86:27:69:73:5c:
37:8f:85:19:72:42:7d:ca:a3:c6:79:49:12:47:1a:38:4f:06:
44:24:c1:b3:45:91:aa:43:09:cc:2a:29:1a:11:83:37:b4:82:
2b:b5:e3:30:f3:71:a9:8d:e4:75:8c:7a:e4:60:42:c9:be:8f:
1c:7f:bd:df:3e:68:93:28:17:4b:71:7e:3b:22:90:f7:22:4d:
5e:80:ec:08:9d:bd:3f:4b:ae:73:1a:af:b6:26:df:34:bc:de:
46:18:23:ca:79:d8:42:63:46:eb:ff:58:e4:24:c5:b1:cb:37:
8b:a8:1d:03:80:04:ae:fe:dd:89:28:78:38:66:50:db:c1:1c:
ba:d7:0e:fe:66:0e:48:72:29:46:98:69:8c:69:56:9c:ef:2d:
20:4f:a0:4e:35:e5:77:c9:40:7c:d3:78:85:5c:c9:e8:60:ef:
63:3d:f0:ad:59:19:f8:e5:0d:05:19:b9:06:81:e7:d4:b0:fc:
9d:6a:4d:89:0f:94:d2:74:ae:44:4d:03:b6:0f:33:71:cd:82:
c3:24:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:48:37 2025 by rpki-client