Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/MeLRa18cJ_Fr_vy3ERuKQLVa_0Q.roa
File: MeLRa18cJ_Fr_vy3ERuKQLVa_0Q.roa (raw, json)
Hash identifier: Scu6X5cdyahgZ+2xGCs9z4LVBnY/p6cK2ML/Vi6GaqU=
Subject key identifier: 31:E2:D1:6B:5F:1C:27:F1:6B:FE:FC:B7:11:1B:8A:40:B5:5A:FF:44
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B683760D562960EF0C0A030C3041CC
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/MeLRa18cJ_Fr_vy3ERuKQLVa_0Q.roa
Signing time: Thu 02 Jan 2025 15:51:00 +0000
ROA not before: Thu 02 Jan 2025 15:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213278
IP address blocks: 195.211.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:83:76:0d:56:29:60:ef:0c:0a:03:0c:30:41:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31e2d16b5f1c27f16bfefcb7111b8a40b55aff44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:3f:36:14:ce:06:91:80:ff:49:c3:55:53:
3c:b2:5e:95:00:01:d5:f9:c1:8b:3b:3d:f8:47:4a:
4c:ea:ab:82:0b:b1:52:5a:0a:d3:fd:d6:30:68:b4:
e1:67:91:cd:89:eb:f6:20:18:6f:ca:e2:70:0a:80:
3f:07:e2:83:4c:9b:b3:82:32:f5:64:79:87:1f:fc:
41:2d:80:c0:34:51:da:34:5e:55:44:b7:f0:22:c6:
73:2c:ea:19:e2:91:08:b2:30:35:e4:a1:e9:16:06:
b8:e9:91:b9:82:9d:35:c9:cf:7c:f7:dd:0f:8b:64:
91:8f:81:c2:65:0d:af:da:a5:61:a3:45:51:9c:bb:
6e:06:0e:41:86:23:be:1a:59:93:4c:47:c5:37:02:
76:ab:e7:6b:d0:43:e1:ee:4c:5b:df:d2:55:a4:c8:
b1:26:a1:ae:19:70:e6:ff:44:2f:35:43:52:65:e2:
8a:b1:39:0a:88:e6:cc:73:ed:8d:41:fe:9d:46:81:
d6:35:74:fa:a9:5b:59:99:db:ed:3e:c5:66:f9:7e:
70:bb:e4:80:dc:50:0c:46:53:7f:52:36:54:0b:1f:
9b:54:c3:52:e3:8d:1b:1c:fb:b1:d8:2c:f3:7b:57:
fd:8d:10:82:7e:4c:54:6a:ef:b0:29:e1:1d:63:e8:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:D1:6B:5F:1C:27:F1:6B:FE:FC:B7:11:1B:8A:40:B5:5A:FF:44
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/MeLRa18cJ_Fr_vy3ERuKQLVa_0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.163.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1e:d9:c6:29:dd:44:6c:94:51:c4:ae:28:7e:1b:b0:24:73:
e5:a5:1f:81:57:1c:6b:e4:dc:4c:fa:46:de:7d:6c:57:02:18:
04:0a:9c:d0:b6:97:da:7a:63:c4:03:c1:20:7d:24:a9:68:c8:
1b:f8:ec:71:a4:86:b6:d0:aa:27:b7:9b:29:1d:46:29:e6:c6:
3b:91:24:be:0a:c3:ba:b7:8d:ad:b1:f3:b2:12:26:56:dc:6d:
b5:8b:9f:75:a0:e3:d2:00:e7:a3:3e:4b:6e:93:49:c9:1e:61:
d6:65:b7:e2:48:54:da:0b:32:c8:45:7c:05:2b:b1:13:df:a6:
6d:9e:39:fd:bc:88:26:89:3b:0d:10:df:3b:bb:a7:9d:2f:83:
d0:9f:5b:05:20:67:2d:d2:20:c5:f8:a2:78:2d:e8:89:ce:24:
a8:70:61:ac:68:12:9f:3e:81:97:48:e5:78:34:17:67:d6:ee:
c1:d5:83:68:0d:ab:a8:dc:31:c7:78:30:86:8a:82:47:27:dd:
0c:78:3d:0a:d1:19:70:29:d1:98:ed:05:72:41:a2:02:89:51:
5f:eb:69:10:16:6e:44:d6:9c:bc:97:92:09:1d:a2:21:e2:5f:
73:92:60:5c:9d:36:1c:34:b4:4e:5c:16:07:8e:36:f4:08:4f:
02:fb:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:10:58 2025 by rpki-client