Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa
File: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (raw, json)
Hash identifier: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=
Subject key identifier: 32:7C:EB:15:FC:82:33:AF:E6:DB:80:64:C1:7A:59:FD:1B:28:D5:14
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019420D5CEBDCB62CF5EC4F87969B228E1B6
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60492
IP address blocks: 213.167.75.0/24 maxlen: 24
213.167.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ce:bd:cb:62:cf:5e:c4:f8:79:69:b2:28:e1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=327ceb15fc8233afe6db8064c17a59fd1b28d514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:e7:a1:91:02:f1:c5:1d:ea:0d:95:f7:2d:
6e:70:45:67:8c:18:28:69:39:e8:43:d0:fa:df:d9:
b6:3e:81:bc:39:0a:66:6e:af:a1:df:77:96:6d:33:
4f:01:55:de:57:28:2a:f7:e0:d2:5b:37:8f:d4:53:
d8:f1:99:13:b4:43:34:39:1a:dc:c1:aa:dd:6e:b2:
b9:3b:c8:d9:80:dc:38:28:9e:1d:ae:13:18:ce:f2:
6a:ae:e2:52:19:27:e6:1d:2b:a8:e4:1c:b3:1f:dc:
ed:0e:73:dd:99:a5:af:22:df:04:c5:31:0b:ac:91:
a5:75:04:17:f7:77:ea:e7:af:36:db:ed:f8:40:76:
12:f1:58:65:83:04:83:f9:d2:09:1b:2e:5b:d0:19:
b3:99:9d:da:fc:ad:4a:fc:b0:12:f6:a3:7f:59:06:
48:8b:1a:0a:96:38:79:83:a2:b4:14:a7:fa:e9:16:
ae:0b:19:ee:31:0d:35:57:2f:5b:7f:cc:03:52:1e:
ce:62:65:cc:b7:a1:00:d9:f6:c9:8d:b6:76:81:b2:
ad:7d:53:87:9c:cb:05:85:e3:0b:ad:01:07:26:21:
7e:e1:62:24:f7:aa:16:82:4e:ec:80:7f:6e:36:bd:
43:65:35:96:34:cd:d7:00:aa:b9:76:3f:63:e4:32:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7C:EB:15:FC:82:33:AF:E6:DB:80:64:C1:7A:59:FD:1B:28:D5:14
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.75.0/24
213.167.81.0/24
Signature Algorithm: sha256WithRSAEncryption
42:eb:4d:6d:b1:c2:98:c6:14:42:98:fd:5b:9a:c4:b0:d0:72:
41:1e:7e:fc:64:bd:da:72:79:c0:0f:15:6f:1e:9a:e3:08:94:
21:12:58:e3:bb:ca:57:eb:01:97:4c:a6:f1:17:94:93:1f:cc:
ad:5d:84:c0:48:b2:fe:86:e2:15:c1:e7:ec:e2:e6:fe:cc:51:
db:15:12:fe:51:5d:de:5e:2b:3e:ae:35:84:e4:c4:52:2b:c9:
45:0d:ce:e0:79:da:93:c0:f8:fd:82:69:fb:92:a0:a9:33:5e:
35:c6:48:23:ab:b4:2c:09:99:8a:f9:06:1d:07:3b:0a:f4:e1:
a7:ae:d9:d5:ef:06:47:de:76:86:54:dc:c8:91:2a:aa:75:f7:
20:4f:56:c7:9d:a3:57:ea:17:1c:46:dc:47:7c:98:33:a2:88:
b0:cd:e8:c6:04:98:88:2d:2b:51:ac:e3:0e:a6:2c:2d:6c:54:
f3:8a:9c:e0:a8:f7:28:ba:1b:2a:dd:f8:59:93:02:d4:e9:90:
b5:68:23:d8:f0:63:1e:f2:0d:d5:9b:bb:ff:e9:74:0c:e5:86:
79:81:15:4d:39:64:e5:26:2b:1a:ca:73:99:9f:8d:01:a8:6e:
cd:6b:1a:3a:51:6f:00:41:a5:3f:4b:ca:f0:9d:5c:f0:4f:da:
b8:c7:19:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:35 2025 by rpki-client