Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mfLf_R2E5eatIMIudnPV3qMkyes.roa
File: mfLf_R2E5eatIMIudnPV3qMkyes.roa (raw, json)
Hash identifier: 5eoRYehaJBMACS7Uccrn3nQ1AvHHWyfIEYiEvquirSs=
Subject key identifier: 99:F2:DF:FD:1D:84:E5:E6:AD:20:C2:2E:76:73:D5:DE:A3:24:C9:EB
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C85F6CB50F26BF84C9E4578D14E14
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mfLf_R2E5eatIMIudnPV3qMkyes.roa
Signing time: Thu 02 Jan 2025 09:50:33 +0000
ROA not before: Thu 02 Jan 2025 09:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200121
IP address blocks: 176.211.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:85:f6:cb:50:f2:6b:f8:4c:9e:45:78:d1:4e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99f2dffd1d84e5e6ad20c22e7673d5dea324c9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a3:2b:7f:0a:2e:50:39:e5:d1:65:f6:6b:7f:
92:c3:f1:bf:a6:7a:7f:0b:80:af:64:c4:ec:69:88:
49:36:3f:24:06:93:55:37:db:f1:27:2b:c5:7c:ff:
e1:98:8d:ba:1a:cb:1b:49:6b:f2:0d:8b:50:22:cb:
2f:43:60:70:68:94:60:45:60:09:56:8e:a3:2f:79:
2e:aa:12:97:0b:2b:83:1c:8c:09:7a:85:fc:7e:18:
7d:bc:6a:fd:d6:58:d8:c5:85:e5:26:bb:db:fa:3f:
9a:0b:e4:f6:0b:9f:82:2a:67:ef:c6:dd:49:c1:ad:
53:df:a4:f8:76:2e:1a:0a:bc:c4:86:7a:7a:eb:60:
f0:1f:cf:59:5a:13:05:94:13:61:e1:a6:0a:e2:08:
5b:44:5d:18:74:db:1a:96:b8:ed:27:e4:bc:f6:03:
f7:eb:8a:6e:10:9e:a1:64:ce:71:f6:b5:d8:76:a4:
d2:dc:85:6d:04:67:6b:a3:5c:ba:a6:25:2e:b1:22:
48:f9:51:c8:8f:9d:71:5a:4b:13:c3:21:66:92:c3:
9f:b1:8a:0a:6d:81:2a:b1:14:c1:ba:02:61:dd:75:
e7:eb:12:a3:69:49:75:21:7d:66:f0:71:05:18:cb:
5e:83:67:45:06:12:76:7d:f4:b3:6f:82:83:71:b5:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F2:DF:FD:1D:84:E5:E6:AD:20:C2:2E:76:73:D5:DE:A3:24:C9:EB
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mfLf_R2E5eatIMIudnPV3qMkyes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.211.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:65:13:96:d3:b5:b3:3a:f6:c2:17:0d:d0:ca:26:42:4d:cd:
af:e9:49:87:2c:6f:9c:66:72:5f:0b:51:a1:ba:0c:c4:91:9c:
be:82:af:3e:0f:40:ab:de:0f:6b:58:d0:f3:a1:c5:0a:f9:9a:
bd:9f:f3:be:54:c5:3a:a3:44:bd:df:ef:ea:ad:da:92:a6:7d:
e5:a3:e2:4e:c5:24:71:a3:b7:7f:be:ba:1b:8b:3f:f6:9e:e6:
f7:34:6c:a6:da:e3:22:9d:04:18:64:c8:ee:37:31:1b:3f:8b:
a0:1e:7c:b7:ee:08:52:52:61:d8:a9:91:9c:63:33:33:d2:6f:
ad:16:1d:ce:b1:d3:36:d8:5c:33:4b:24:f4:18:d2:53:f3:fc:
43:f1:0d:f1:77:e7:02:82:b9:18:2f:5d:b3:a2:6a:8c:90:7b:
09:cf:b4:10:47:ec:6c:3e:25:89:fb:d6:b3:ed:64:4e:43:d4:
58:ab:ee:62:bc:1b:11:7f:36:86:c0:33:38:4c:d6:1b:a2:c3:
8f:f6:81:6f:ab:e4:18:b3:cd:b7:bd:3e:5c:77:d9:a6:e7:4d:
3b:4c:3b:95:56:ef:b4:12:e6:73:a8:44:b8:5c:b8:19:64:c2:
16:c5:6c:fb:f2:38:54:3f:f6:dc:97:6c:ad:98:d1:78:db:a7:
bc:1c:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:59:45 2025 by rpki-client