Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa
File: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (raw, json)
Hash identifier: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=
Subject key identifier: 32:F6:7D:52:94:D4:D6:39:31:43:DB:85:4D:71:D4:F0:6E:7D:B8:38
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 01942368D59DF9A11DCAA8FF7EE7889F9F4D
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa
Signing time: Wed 01 Jan 2025 19:47:40 +0000
ROA not before: Wed 01 Jan 2025 19:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47866
IP address blocks: 193.134.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d5:9d:f9:a1:1d:ca:a8:ff:7e:e7:88:9f:9f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Jan 1 19:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32f67d5294d4d6393143db854d71d4f06e7db838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:e6:f2:09:58:0a:ad:a3:12:a2:43:58:0f:
33:9e:21:89:4e:aa:07:95:11:52:05:18:38:fe:7a:
91:48:a8:d2:af:ac:d1:a8:4b:28:37:60:ee:61:6a:
6a:7a:2a:68:6f:6d:01:d6:55:dd:7c:05:8e:89:97:
8a:44:f6:86:f2:d7:a7:89:86:32:ab:b4:26:b8:79:
3c:38:f2:59:fd:fc:92:a2:b8:41:73:57:95:25:63:
2c:84:5c:28:08:72:2a:0d:ad:2a:6a:fb:83:7f:ec:
36:50:e4:95:ec:75:e0:a6:a0:c4:3e:3b:b7:d9:70:
ed:12:24:f8:f5:9d:79:b3:91:8b:e3:f4:8b:e3:5c:
68:f9:e7:11:01:d9:3b:fa:d6:7a:94:6c:f4:c5:09:
99:52:81:bd:4d:26:36:fc:6b:bb:83:30:a0:8d:83:
34:ec:22:8f:c9:2d:18:bb:34:82:39:2b:69:a2:7a:
19:61:ac:b2:57:79:a3:bd:ae:b0:59:54:2b:06:f4:
29:76:da:e0:5b:ec:51:39:47:d9:0e:82:66:2f:1a:
46:83:18:7b:62:1d:7a:b6:2d:cd:df:25:5f:00:6d:
5e:75:62:65:aa:20:ce:58:f4:02:1d:09:e5:b3:fa:
35:5e:15:af:21:b7:67:9a:f8:87:8e:3f:e7:34:db:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:7D:52:94:D4:D6:39:31:43:DB:85:4D:71:D4:F0:6E:7D:B8:38
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.212.0/22
Signature Algorithm: sha256WithRSAEncryption
45:a5:17:6b:c9:cf:17:c3:cb:0a:4b:41:9a:0d:f0:86:2b:e8:
74:e7:ea:36:dc:e9:0d:5a:a7:e1:13:d7:b2:fc:76:0f:ad:20:
92:47:db:ab:6d:29:ae:97:97:91:8c:ed:da:7a:1f:06:e5:84:
ca:cf:0c:49:fa:4e:e8:7f:66:9e:9a:02:1b:6d:6f:dc:44:76:
cb:30:74:b1:45:3e:37:5c:12:64:91:5f:4a:a2:e1:b7:b9:1f:
94:fc:3f:40:10:51:98:bc:e7:b7:83:f2:fe:58:54:23:ad:b4:
1b:3f:49:f9:9b:0f:5f:f2:02:ba:01:25:2a:55:b4:2d:73:16:
6d:c8:dd:60:27:64:51:6c:32:fc:5e:cb:b4:a5:f0:3f:4e:72:
ed:5e:27:13:ca:8e:30:46:3c:9e:5b:9d:27:8e:45:8f:c4:6c:
6e:85:d8:78:43:39:d8:d5:43:ad:1e:55:11:7e:7b:c9:fc:3b:
92:f1:66:28:fb:eb:1b:24:2e:20:ec:ee:3a:d4:98:64:01:3c:
e3:9b:bd:5e:0f:14:f2:1e:c6:fe:51:69:d7:37:e6:9c:94:d5:
48:06:d2:04:9a:6b:bf:68:09:de:84:fd:09:58:3e:4e:5a:75:
6b:22:0e:29:25:7c:f7:83:ed:1a:65:c9:03:7b:cc:26:b4:7c:
a0:6a:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:31:13 2025 by rpki-client