Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/mXcskRJTzyB3nxmoygHfU8qKFgw.roa
File: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (raw, json)
Hash identifier: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=
Subject key identifier: 99:77:2C:91:12:53:CF:20:77:9F:19:A8:CA:01:DF:53:CA:8A:16:0C
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 0194228DECBCF6ADADB823E863539AFB63B3
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/mXcskRJTzyB3nxmoygHfU8qKFgw.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28929
IP address blocks: 37.77.208.0/20 maxlen: 20
78.26.64.0/18 maxlen: 18
78.26.111.0/24 maxlen: 24
94.73.64.0/18 maxlen: 18
94.73.127.0/24 maxlen: 24
185.29.104.0/22 maxlen: 22
188.228.128.0/17 maxlen: 17
193.25.178.0/23 maxlen: 23
195.47.199.0/24 maxlen: 24
2a02:f8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ec:bc:f6:ad:ad:b8:23:e8:63:53:9a:fb:63:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99772c911253cf20779f19a8ca01df53ca8a160c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:47:c4:72:32:12:a4:ff:10:47:17:a8:7b:
4d:c9:1d:62:66:66:e3:be:15:59:67:52:4f:81:9e:
e4:23:16:1a:00:84:4c:3b:ad:73:5a:48:32:b5:66:
77:ca:d7:79:16:0b:73:6b:31:68:e1:fc:ad:87:07:
ad:fd:59:f3:89:1d:d8:a9:b4:ce:98:79:d0:f2:ac:
2d:ef:e5:e5:91:f3:72:ff:69:2d:a8:50:4e:4f:b7:
dd:61:60:c7:0d:88:d2:69:ca:23:9c:6f:51:66:36:
75:7c:f7:60:ed:c7:63:27:96:3f:5d:1f:97:e6:05:
22:88:46:d2:af:56:df:dd:39:fb:33:4e:b6:de:46:
5e:ec:06:27:3a:e5:70:f9:f7:6a:c6:c7:89:4f:10:
1b:42:6b:61:62:84:ec:97:3a:9a:77:af:4e:fb:0b:
da:18:d6:a2:3b:b8:95:cf:fd:09:a8:c0:69:54:f4:
89:0d:e6:1c:68:83:73:7f:ac:38:f2:02:fe:5c:e3:
0d:30:b4:77:5f:08:1d:e1:73:b1:a3:37:83:69:a1:
42:a6:83:a9:6d:49:3a:dc:87:dd:c9:6f:98:91:11:
71:bb:43:c2:8c:0d:7a:ef:a0:a5:19:a4:b6:ba:e6:
3d:83:42:98:6a:91:b7:eb:9a:ab:cb:64:32:8a:5f:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:2C:91:12:53:CF:20:77:9F:19:A8:CA:01:DF:53:CA:8A:16:0C
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/mXcskRJTzyB3nxmoygHfU8qKFgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.208.0/20
78.26.64.0/18
94.73.64.0/18
185.29.104.0/22
188.228.128.0/17
193.25.178.0/23
195.47.199.0/24
IPv6:
2a02:f8::/32
Signature Algorithm: sha256WithRSAEncryption
d0:02:e0:17:dc:1f:47:c9:9e:e1:42:1f:ba:1d:51:8c:c4:cd:
da:15:9d:49:4a:ed:59:68:c3:0f:ad:34:4b:b4:cb:51:34:20:
74:75:db:96:01:d9:ac:35:51:26:b7:a6:36:ba:2b:79:24:89:
2b:42:ec:fe:97:7d:f5:0c:69:b9:b8:21:6a:50:8d:90:c8:b8:
7a:97:d8:a5:f7:9f:b2:71:a5:92:16:b3:1c:05:45:c3:d2:3f:
bd:4b:e4:57:1a:67:fc:40:39:09:90:f7:8a:5e:72:0b:b8:0c:
d2:1c:b4:2a:db:e7:cf:ae:62:76:ac:a9:39:49:8a:5b:14:82:
2d:a8:89:24:08:7c:c6:4d:f5:1f:58:a4:46:69:fe:4f:8e:ba:
ca:c4:c5:ee:66:e4:b4:9c:60:35:45:21:ff:62:bb:c7:3a:1b:
03:c0:37:c5:fa:07:32:19:ff:e5:90:55:4d:b7:c2:de:f0:83:
1d:b7:cf:f4:47:8c:ac:ab:90:bb:e3:79:7b:54:2b:5a:65:92:
7d:f1:f8:59:c7:72:42:e1:19:1c:77:89:af:50:b0:31:5b:b4:
5a:79:ed:4a:83:be:fb:27:e1:40:fe:2d:96:38:eb:12:28:2a:
64:d8:52:1f:19:42:69:b9:b1:26:59:00:48:11:5a:19:b1:b4:
17:d5:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:02 2025 by rpki-client