Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Mvh9OytF8ydBgBbDWy4OHmDbxFU.roa
File: Mvh9OytF8ydBgBbDWy4OHmDbxFU.roa (raw, json)
Hash identifier: 9/il9gaf0rrKP5Ou+BbRgsOPf0jTZPX/7nmFM5dPQco=
Subject key identifier: 32:F8:7D:3B:2B:45:F3:27:41:80:16:C3:5B:2E:0E:1E:60:DB:C4:55
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01968507EACA2718CC4151B665E732FC358D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Mvh9OytF8ydBgBbDWy4OHmDbxFU.roa
Signing time: Wed 30 Apr 2025 04:50:10 +0000
ROA not before: Wed 30 Apr 2025 04:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270111
IP address blocks: 151.242.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:07:ea:ca:27:18:cc:41:51:b6:65:e7:32:fc:35:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 04:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32f87d3b2b45f327418016c35b2e0e1e60dbc455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:04:8c:b5:87:ad:59:a0:28:75:97:c0:27:
1d:2e:67:f1:56:80:ee:cd:17:2f:49:1d:a7:6d:1b:
b9:92:cf:98:bc:4a:eb:db:f2:79:be:f9:f9:08:e7:
ab:d8:a6:9d:ef:13:2c:67:49:ba:8d:9a:7e:c1:75:
2e:21:f6:73:06:d4:d0:40:69:84:8a:4e:9b:0c:b9:
a7:9f:e4:97:9d:fa:b8:3c:5d:2d:b3:63:80:92:92:
1c:55:53:83:81:8e:17:83:80:b7:03:df:9b:20:ea:
dd:14:e1:18:56:b2:dc:fc:05:b2:75:6f:01:55:56:
9b:b0:84:32:70:8e:4b:90:05:ec:c7:dc:ab:71:4b:
b1:01:7d:bb:d3:39:8d:06:0c:ba:3e:90:5e:f9:70:
ea:be:ea:ca:18:cd:ef:38:91:04:ef:a3:1c:f7:e9:
58:64:6a:a4:1e:45:a7:8c:6d:16:72:a9:75:27:ac:
6b:6d:90:37:79:bd:7c:4a:fc:e7:9f:0d:d4:1c:29:
80:8b:bc:94:6d:75:19:ee:ef:fb:28:31:9b:c3:a3:
31:c1:71:17:89:2f:0b:2b:42:de:a7:de:52:75:4c:
16:59:3a:18:29:96:d3:92:31:ac:91:8a:82:b7:43:
2e:e8:55:6f:7a:9d:bd:88:e1:c1:b2:0b:40:da:21:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:7D:3B:2B:45:F3:27:41:80:16:C3:5B:2E:0E:1E:60:DB:C4:55
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Mvh9OytF8ydBgBbDWy4OHmDbxFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.140.0/22
Signature Algorithm: sha256WithRSAEncryption
69:85:c2:a2:7d:d6:82:6d:29:ca:05:d1:a7:d0:8a:e0:8d:f9:
53:2c:29:7f:af:eb:13:36:e9:40:4e:69:57:7e:75:58:25:24:
81:d2:5c:fd:74:68:4d:34:e1:98:2a:11:e8:39:d2:de:2a:bb:
9e:61:30:4d:b0:82:80:41:66:84:dc:eb:9b:6c:9f:3e:58:63:
2f:1e:4d:1b:ef:34:20:78:d6:bc:61:35:a1:a7:74:87:8a:05:
3e:ec:53:df:8c:b0:ec:59:d9:16:87:ae:58:1c:4d:52:e9:9f:
07:21:7f:9c:e8:4d:53:29:f6:46:55:1b:7e:b9:2b:a1:1d:86:
57:bc:23:5b:10:cf:d8:b4:17:d6:fa:3f:78:31:03:b4:84:b3:
b6:81:a0:d7:4e:43:21:c2:08:af:b9:b0:42:c0:26:23:02:5b:
b1:57:7c:35:fc:3e:50:86:77:b6:78:fb:51:0c:1b:2c:48:b8:
9e:6b:d3:ee:4a:db:75:ff:5d:fd:23:84:e7:37:3d:0c:79:b4:
12:9b:ed:00:c2:f5:25:b4:7c:86:88:5f:cd:7d:98:09:71:fc:
23:89:28:0f:62:41:f4:64:26:9f:e0:67:aa:07:ca:4c:d8:fc:
57:87:5a:4e:b6:18:b2:83:b1:93:5f:c9:f5:4e:e8:f6:79:96:
5e:96:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:32:11 2025 by rpki-client