Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/5MLQ6HobgYnrcmZuzDJ7-7MBObg.roa
File: 5MLQ6HobgYnrcmZuzDJ7-7MBObg.roa (raw, json)
Hash identifier: HXGMBj8FDOCPTbOmCVEhDw3Ja6TDt9UrFzvJJ6jMhlM=
Subject key identifier: E4:C2:D0:E8:7A:1B:81:89:EB:72:66:6E:CC:32:7B:FB:B3:01:39:B8
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01963EB99092448E0E8E77ABD35C925D2FE3
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/5MLQ6HobgYnrcmZuzDJ7-7MBObg.roa
Signing time: Wed 16 Apr 2025 13:11:10 +0000
ROA not before: Wed 16 Apr 2025 13:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212520
IP address blocks: 217.154.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:b9:90:92:44:8e:0e:8e:77:ab:d3:5c:92:5d:2f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Apr 16 13:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c2d0e87a1b8189eb72666ecc327bfbb30139b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:42:96:0e:89:a7:48:0e:a9:27:b5:be:fa:
ef:83:ae:87:72:5a:a6:f7:ca:99:06:bd:03:05:cc:
8c:d1:89:57:5a:9f:b1:8c:d5:ec:bb:7a:3a:08:65:
0d:0d:1e:52:1b:51:51:ae:5e:2b:6f:dd:a3:2f:73:
10:a3:df:1b:a3:a6:3c:da:f7:bc:0f:52:48:b0:fd:
b3:d3:94:03:be:53:9d:ae:28:44:4b:23:23:b2:30:
e9:84:82:bf:81:0d:19:08:4f:bf:3d:e3:b7:3d:bd:
ad:c5:aa:62:e6:c7:4f:36:75:ae:ae:26:81:0f:70:
25:45:6e:85:45:db:88:02:91:a7:8b:15:20:9a:25:
44:fe:8c:44:16:05:1d:a4:05:80:c1:1a:78:a4:75:
a1:54:9c:d4:59:f3:87:9c:91:0f:cc:a8:11:e3:f7:
94:a4:33:60:90:27:2d:5b:a1:ce:94:79:b7:f3:da:
37:4e:56:39:de:3f:a9:ec:3c:26:0e:62:36:ed:c7:
14:f8:d9:03:b4:a0:68:03:87:49:b2:70:c2:3f:8e:
7b:fb:78:41:79:4a:9c:75:69:83:c3:d5:65:79:03:
19:d6:08:d6:7a:3f:73:69:5e:87:77:95:f8:4c:0a:
18:81:b1:fc:b7:3b:9d:ac:7e:67:c7:69:b5:34:79:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:D0:E8:7A:1B:81:89:EB:72:66:6E:CC:32:7B:FB:B3:01:39:B8
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/5MLQ6HobgYnrcmZuzDJ7-7MBObg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.154.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d1:33:e5:cc:00:a4:11:a5:14:eb:de:ed:e9:a7:8b:04:3f:
36:02:5b:11:f8:a5:40:4b:46:04:68:82:39:51:90:1f:8f:44:
43:3f:c7:8b:e9:04:d6:a8:71:80:69:15:ac:87:c5:e0:18:b6:
04:84:b2:20:05:c0:48:6f:31:11:f3:d5:f7:0d:59:04:d1:54:
51:f4:0a:3e:2a:d5:4a:d8:ab:53:4a:d3:bd:e6:d4:da:73:33:
64:b7:41:9a:bc:89:ec:3b:6e:8b:2b:93:93:13:cf:9b:35:4b:
bf:46:ec:16:2b:a2:db:f9:79:52:91:8b:8f:31:a3:d2:fe:bd:
2d:92:00:cb:28:70:e7:2e:a7:92:a7:eb:5e:e5:ac:71:63:48:
70:bf:16:9d:3a:55:0d:ad:f6:b0:66:63:a6:2f:e1:05:3f:fb:
96:6e:b0:21:13:f8:8e:09:b6:5c:08:a4:0b:2e:cc:1f:3b:10:
4f:dd:92:f4:81:15:2e:4f:05:c0:89:df:7f:93:ae:19:f3:49:
67:8b:6b:28:44:b5:ed:87:0f:2e:d2:7c:5b:ee:d6:e8:fa:8b:
08:4e:80:8b:2f:47:32:db:00:c6:32:a1:88:d9:89:59:f7:ae:
02:a0:c3:0c:2a:7a:92:65:96:bd:c1:30:b6:a9:1a:ed:04:7b:
bf:04:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:46 2025 by rpki-client