Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Mk8KYt2G3egKSdt0jzQVPmKCVkw.roa
File: Mk8KYt2G3egKSdt0jzQVPmKCVkw.roa (raw, json)
Hash identifier: cbkefvTY+ExyUo66CALX+XiVOUGydzynhYnpl1eVmus=
Subject key identifier: 32:4F:0A:62:DD:86:DD:E8:0A:49:DB:74:8F:34:15:3E:62:82:56:4C
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C9A68A4EB233D19C08D9063D04C3
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Mk8KYt2G3egKSdt0jzQVPmKCVkw.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398395
IP address blocks: 185.121.26.0/23 maxlen: 32
185.187.155.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c9:a6:8a:4e:b2:33:d1:9c:08:d9:06:3d:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=324f0a62dd86dde80a49db748f34153e6282564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:48:a0:c1:f3:d8:c9:08:a8:3e:37:ff:fc:
22:62:6d:91:7c:cd:b0:a8:3c:f6:ee:39:26:f3:a3:
05:95:c2:f7:01:7b:c2:79:55:62:02:ae:42:2b:10:
ea:f8:91:e0:ac:0d:49:5f:e9:5a:4b:bf:8d:e8:3d:
69:a2:7f:8a:3d:7b:d6:1a:25:d5:8a:29:52:33:58:
8e:a8:81:04:fe:bf:ea:db:d7:3f:ff:02:88:63:e1:
a0:55:d2:1b:18:ae:6d:d8:c0:21:be:99:c8:36:4b:
6e:00:bb:1f:82:eb:57:1d:24:2a:90:d7:db:12:41:
42:e3:ac:75:c8:08:c2:1b:9c:1e:28:5e:55:78:bc:
f8:8a:be:71:05:78:5d:77:80:58:e8:e7:f7:03:de:
a0:db:89:60:ef:6d:e5:1b:20:76:47:5a:c8:ee:20:
ea:51:13:d5:44:19:bb:d0:ab:4c:44:52:b9:0a:d4:
11:2f:bc:07:d7:7f:a8:03:83:9a:95:7d:95:d2:23:
6a:ed:ac:86:30:bd:6a:df:8c:c0:17:e1:86:23:19:
cb:df:36:f2:14:e6:ad:72:c4:ee:1d:35:d9:a4:24:
d1:22:c1:ae:b2:c3:cb:30:8c:fb:01:57:c0:44:3b:
08:06:30:57:e8:3b:ab:d9:e1:4c:f6:5b:80:60:43:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:0A:62:DD:86:DD:E8:0A:49:DB:74:8F:34:15:3E:62:82:56:4C
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Mk8KYt2G3egKSdt0jzQVPmKCVkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.26.0/23
185.187.155.0/24
Signature Algorithm: sha256WithRSAEncryption
97:eb:63:69:33:73:61:a2:9b:fd:48:54:ff:f5:5b:e4:ad:9a:
fa:5c:b9:2c:5d:25:e8:08:bd:ea:55:8d:f3:f0:52:40:c8:5f:
c2:28:79:49:b3:73:d5:2c:dd:f1:2a:c7:81:52:94:33:83:59:
25:86:48:0b:92:52:85:9c:22:a5:8e:95:76:77:f4:ef:96:06:
70:b3:f1:e0:bd:e2:bf:e1:53:b8:47:5d:01:c4:9c:a3:eb:b8:
a3:f3:ed:56:4a:aa:64:34:ea:03:e7:e2:72:44:7c:5c:14:52:
da:a4:a7:1f:27:36:b1:fb:42:cf:b9:91:8d:f2:23:71:ec:58:
86:93:2e:04:ee:dd:3a:31:61:e9:a2:c7:dd:76:5c:1e:63:2c:
5b:c7:ec:51:5b:36:90:92:c4:78:a0:90:a6:27:39:47:9b:d2:
6e:d5:b9:10:67:44:71:6c:ae:e0:41:20:d3:1d:ed:76:12:b7:
b6:28:9d:e5:26:83:42:4f:33:40:b3:74:dc:a3:83:02:21:c9:
a4:2e:bb:f4:00:71:fd:81:d6:85:91:db:ec:ac:ee:83:49:8f:
2f:85:84:5e:2a:fb:3a:1b:3d:12:78:1d:c4:c2:9c:c1:cf:e7:
c5:25:65:6c:66:80:58:90:da:fa:38:0b:c7:7c:89:ba:32:fa:
44:23:fb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:39:47 2025 by rpki-client