Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/MBnjR0q6eR7PujQYuvXc6EY3kbo.roa
File: MBnjR0q6eR7PujQYuvXc6EY3kbo.roa (raw, json)
Hash identifier: HNqzyjDd+TtlMN5tniTDAwjj1tssNX0++6C4Wyg438o=
Subject key identifier: 30:19:E3:47:4A:BA:79:1E:CF:BA:34:18:BA:F5:DC:E8:46:37:91:BA
Certificate issuer: /CN=4434edbe1b4101b28abe232f2bcf2a014897825a
Certificate serial: 019421B25464D13E1143F72E5D47DE8FFF3E
Authority key identifier: 44:34:ED:BE:1B:41:01:B2:8A:BE:23:2F:2B:CF:2A:01:48:97:82:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/MBnjR0q6eR7PujQYuvXc6EY3kbo.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59752
IP address blocks: 195.49.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:54:64:d1:3e:11:43:f7:2e:5d:47:de:8f:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4434edbe1b4101b28abe232f2bcf2a014897825a
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3019e3474aba791ecfba3418baf5dce8463791ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:f7:6c:23:b3:b9:3e:30:5f:fd:62:c0:5b:
ce:c5:75:f0:a6:66:91:85:61:d8:43:6b:df:48:ea:
76:8d:87:3c:1d:44:b0:26:ad:bc:a4:1e:e7:d9:11:
a3:e4:0c:fa:b3:ec:eb:7b:01:a3:96:7d:c6:d2:5c:
77:38:e9:24:49:86:19:81:d9:00:2c:fd:ae:0a:7d:
f2:5a:06:67:af:df:17:66:41:b5:a6:55:35:7b:9f:
94:63:54:03:38:41:b0:a1:8c:a8:78:96:67:e7:39:
c8:6d:43:ef:c4:06:28:59:da:f7:82:dc:f8:14:81:
7c:97:17:cd:7e:c6:59:92:c1:7e:0c:ae:99:a5:02:
38:a6:e1:64:bc:70:70:83:6e:82:21:4a:0e:37:6a:
ef:b8:a9:ed:c7:c6:a8:06:db:b3:1a:71:db:75:7a:
74:db:0d:c3:e5:8f:f9:48:d8:0b:c0:cf:b7:87:fd:
e3:48:78:fb:58:ef:f7:bb:f9:85:78:7d:e2:a6:75:
5a:bd:f0:f4:aa:c2:c9:0d:2e:ff:e3:b2:5c:a4:ad:
35:f2:0a:99:bc:43:50:80:9e:d6:76:66:88:bf:79:
17:c0:c1:1c:73:a9:28:64:04:c6:82:b6:4e:b7:32:
f6:c5:bb:45:95:fb:f3:a5:d7:0f:ca:95:03:e6:51:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:E3:47:4A:BA:79:1E:CF:BA:34:18:BA:F5:DC:E8:46:37:91:BA
X509v3 Authority Key Identifier:
keyid:44:34:ED:BE:1B:41:01:B2:8A:BE:23:2F:2B:CF:2A:01:48:97:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/MBnjR0q6eR7PujQYuvXc6EY3kbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.136.0/22
Signature Algorithm: sha256WithRSAEncryption
60:f8:d2:e6:7c:8e:b9:c9:4b:fd:77:30:db:13:8f:b9:5c:4c:
2c:42:be:3e:e7:74:98:25:55:02:e2:48:91:ad:56:f8:0c:37:
51:33:c6:03:15:77:6d:03:aa:0d:30:c7:5c:fc:3d:0a:e3:d9:
4c:1e:d9:ca:7e:16:31:a5:06:fe:61:a1:7a:53:79:72:12:ee:
98:c5:56:26:89:42:46:0c:66:de:c9:d9:ad:ec:83:5b:46:e0:
1e:d1:d5:b3:60:85:09:33:b1:46:67:fd:a4:11:d1:4f:78:2d:
b8:16:68:22:ac:06:78:cd:9c:e0:6a:8b:df:45:be:6d:09:4c:
a7:7d:25:4e:b8:de:80:a8:99:91:a7:bd:ca:7c:d7:ff:4c:78:
f2:6c:7c:db:d1:d8:41:3d:2b:05:f0:4d:56:69:10:3d:41:62:
5d:6d:cb:5c:91:e1:8d:c2:73:0f:bf:f9:6f:71:5b:e1:d1:1e:
92:cb:20:68:11:4a:87:2e:94:54:cb:b4:26:a8:34:99:29:d0:
9c:05:0c:70:4f:ad:6b:1e:3b:fa:bd:fc:5e:9d:0c:d9:ea:01:
b7:a4:b1:2b:5c:33:9f:9b:be:7e:75:4a:2a:5b:e4:37:f1:f3:
3e:b5:e3:c0:1b:53:7f:79:c9:1c:f3:71:85:82:37:d6:0d:ec:
d2:0f:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:48 2025 by rpki-client