Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/MHaB6YDK7hMFt-_1LMKEcRnolXY.roa
File: MHaB6YDK7hMFt-_1LMKEcRnolXY.roa (raw, json)
Hash identifier: HMU04XiVIqiavwZxk6eCzMS/VCWuh3NjcyT+luDuzS0=
Subject key identifier: 30:76:81:E9:80:CA:EE:13:05:B7:EF:F5:2C:C2:84:71:19:E8:95:76
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 0196149EBEC28E0AADE730BF3AC02450426F
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/MHaB6YDK7hMFt-_1LMKEcRnolXY.roa
Signing time: Tue 08 Apr 2025 08:57:49 +0000
ROA not before: Tue 08 Apr 2025 08:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 5.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:9e:be:c2:8e:0a:ad:e7:30:bf:3a:c0:24:50:42:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Apr 8 08:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=307681e980caee1305b7eff52cc2847119e89576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:9f:76:3e:03:ce:db:c5:cf:38:2e:0b:92:
c6:de:18:ba:be:d8:3e:e2:de:21:07:bd:0d:f8:2a:
9b:90:6e:1c:25:45:7e:ad:6d:17:ee:68:36:e8:40:
09:fc:f6:22:00:f0:a3:e8:25:cc:90:7f:5e:f5:8b:
2b:43:84:cf:59:16:0e:1d:18:88:66:84:42:69:83:
5c:c4:1e:2b:c8:7f:c0:d2:09:b3:b6:2f:94:0c:ba:
7f:5b:fe:15:11:41:be:ca:49:07:48:9c:80:03:3d:
ac:e9:07:ba:28:44:87:a3:34:ad:d6:83:cd:f3:dd:
cc:a8:00:da:9b:4d:25:a6:db:83:0f:61:92:ed:b6:
0a:8c:3f:53:87:3e:b8:92:80:6e:c6:e1:7c:0b:94:
9a:74:fa:29:54:c3:3c:22:32:44:91:fe:51:4f:39:
78:7d:b1:88:82:68:f4:54:9e:3c:a7:dd:bc:e1:1a:
95:36:61:35:76:25:f2:10:53:f2:5c:e4:d4:90:d2:
e0:91:80:8c:64:10:c3:45:7b:d2:dc:e6:5c:e7:3e:
66:97:2c:83:fa:4f:bd:8e:8b:ed:d5:e1:21:b1:ac:
58:d1:1f:1d:c7:1b:bf:b0:9a:db:9d:3a:62:18:98:
cf:c2:e5:4d:d0:3c:b2:25:b9:ef:6c:68:e5:1b:01:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:76:81:E9:80:CA:EE:13:05:B7:EF:F5:2C:C2:84:71:19:E8:95:76
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/MHaB6YDK7hMFt-_1LMKEcRnolXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.183.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7d:86:c5:dd:95:71:de:62:b1:1b:50:8d:97:7d:c8:53:a8:
ae:08:89:71:fa:4c:25:8e:f3:da:18:47:05:c3:f3:da:db:87:
ed:24:f2:02:db:e7:20:b9:1e:ee:9c:9c:2b:0b:fb:7d:01:51:
12:f2:76:24:7a:ba:09:6b:3c:56:63:ae:4c:42:85:64:4e:b7:
47:ff:f1:a5:05:f8:7d:e7:e9:f1:7c:ec:53:4e:c6:77:97:1c:
49:c8:ad:5b:95:f3:8b:2e:63:b0:68:9c:7e:78:6d:77:95:61:
85:df:d1:67:8a:76:ce:a6:da:18:37:da:f0:e5:40:6f:ce:2a:
0f:75:70:3e:39:59:61:9e:c7:c8:88:76:95:a0:f0:a7:68:74:
64:2c:d4:9c:00:5f:ad:96:69:f8:da:bb:7b:99:04:c5:5b:0c:
fb:08:77:3b:50:9a:23:60:17:22:58:8d:43:e7:45:7a:d9:57:
7e:63:f2:52:5d:ee:b6:ad:7d:50:d1:32:02:a2:66:2c:da:9b:
2a:55:9c:06:75:a5:9e:d4:bf:04:1b:65:2c:7d:e7:c5:31:63:
eb:8f:32:95:35:f2:3d:1e:5c:93:0d:66:fb:d4:49:6d:35:52:
0e:c0:ea:6e:41:84:75:c0:f6:0b:50:77:8f:7b:b4:93:4d:22:
1c:83:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:51 2025 by rpki-client