Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/MR_f-x3g7wcjluP2eCx_et2XgAo.roa
File: MR_f-x3g7wcjluP2eCx_et2XgAo.roa (raw, json)
Hash identifier: bnbauqYg41qtiywoh5HUkv8me54R7s04AvQU8Lpnw6o=
Subject key identifier: 31:1F:DF:FB:1D:E0:EF:07:23:96:E3:F6:78:2C:7F:7A:DD:97:80:0A
Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial: 01986551C2781C9C9906D63A68E1EAF324E6
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/MR_f-x3g7wcjluP2eCx_et2XgAo.roa
Signing time: Fri 01 Aug 2025 11:08:33 +0000
ROA not before: Fri 01 Aug 2025 11:08:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 45.152.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:51:c2:78:1c:9c:99:06:d6:3a:68:e1:ea:f3:24:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
Validity
Not Before: Aug 1 11:08:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311fdffb1de0ef072396e3f6782c7f7add97800a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:18:63:6a:95:da:95:51:92:75:ef:3c:40:
78:fb:80:79:54:75:09:e7:3f:5c:31:7a:d5:e4:17:
15:56:0d:24:55:8f:a9:d6:8a:e0:c9:78:24:42:fc:
b6:52:b6:61:cb:5a:cd:1e:a4:07:80:b6:52:9b:a6:
69:e5:58:6a:af:ba:c2:01:a4:45:f6:f5:29:c1:84:
98:5d:50:14:61:f4:c8:97:e3:da:76:b8:d0:53:f3:
97:a8:3d:82:d1:55:f8:2b:5d:8d:54:65:38:9a:7a:
32:a1:8d:d9:47:fd:69:25:ec:2d:40:68:94:df:7d:
d2:76:a7:db:5c:be:46:c1:0c:04:22:95:09:ba:ec:
a2:6a:a9:a4:cc:7a:5c:dc:93:8a:7f:cf:26:ef:ab:
b0:a3:a6:d5:df:a3:ff:94:05:5b:63:e2:13:01:af:
7d:80:60:06:8e:db:4e:97:fd:bc:dc:56:8d:d8:18:
7b:49:4d:a9:41:3c:e6:1d:ea:b0:0a:dc:ad:0e:9d:
59:53:52:d4:aa:3c:ad:08:76:44:d3:0a:82:d6:31:
85:c0:a4:95:a5:0a:c9:58:56:90:e3:11:c7:25:db:
e7:cb:2b:03:56:27:bf:24:c7:c1:63:31:ef:8b:50:
72:c5:17:3c:64:65:cb:10:fb:c4:1b:80:c9:8b:8b:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:DF:FB:1D:E0:EF:07:23:96:E3:F6:78:2C:7F:7A:DD:97:80:0A
X509v3 Authority Key Identifier:
keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/MR_f-x3g7wcjluP2eCx_et2XgAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.56.0/22
Signature Algorithm: sha256WithRSAEncryption
04:19:5c:09:07:05:a8:9d:cb:c2:1a:1d:1c:9e:a3:4e:b9:83:
d9:9d:d4:79:ba:e3:c2:13:5d:be:58:ed:61:63:e7:cb:d4:b1:
9d:1f:2d:fe:fc:1f:c0:ec:90:73:f6:db:cb:1b:39:d5:b6:da:
4e:30:49:67:8f:51:e9:aa:84:9a:78:73:7e:ef:c1:39:c3:a6:
49:6f:4d:d6:01:35:5b:b1:a8:41:72:47:fc:22:57:2d:4f:13:
20:cb:2d:1b:7c:54:2d:b3:38:34:1d:ba:bc:bc:5a:1d:5e:48:
be:fb:b8:b0:f2:90:e8:e6:62:46:2b:19:77:fc:75:1c:ea:78:
30:3d:89:e5:eb:1d:07:d2:24:0d:30:68:ac:94:7a:0f:73:66:
f9:4a:37:cd:ae:c5:14:50:27:13:27:ad:be:c5:50:5a:cb:57:
91:42:b7:0c:32:63:8e:9e:95:72:32:9a:ed:d3:71:b0:b6:a1:
9e:bf:a8:73:93:02:37:76:82:34:f6:9c:31:ae:20:7c:41:94:
82:96:5c:7a:9c:d5:0d:f0:a9:2f:2f:aa:29:4f:ff:e2:ae:3e:
13:02:5b:12:36:1b:2c:c4:cd:94:a9:35:ce:df:78:c4:8f:ba:
0c:fb:21:ce:19:85:7e:32:d0:0e:79:dd:c8:7b:b4:a8:73:82:
90:57:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:06:24 2025 by rpki-client