Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa
File: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (raw, json)
Hash identifier: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=
Subject key identifier: 9A:02:52:DD:6E:D0:D7:3E:E8:40:A9:97:E6:52:59:7E:F0:12:7D:D5
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 0194282382A10B3651045EB7529902D5A924
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200508
IP address blocks: 91.149.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:82:a1:0b:36:51:04:5e:b7:52:99:02:d5:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a0252dd6ed0d73ee840a997e652597ef0127dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:1f:42:d5:55:85:bf:a2:68:70:d6:e9:14:
8b:5f:b3:83:04:22:e7:86:ea:f8:f2:b9:38:af:bb:
da:3f:0f:4a:2c:49:6b:c3:de:a5:5f:a4:7e:b1:bf:
ea:c8:e9:a2:75:5d:92:7b:86:03:d6:50:76:58:24:
8a:40:ad:dc:ab:0b:e3:06:61:eb:b4:41:41:cc:38:
f1:d4:88:07:91:b6:33:72:67:63:76:e3:c6:b0:3b:
75:f1:c4:ba:19:bf:ef:15:f6:2d:5f:14:a3:40:ae:
80:8c:d7:5e:a7:53:11:28:02:0d:1e:36:1e:9a:39:
51:de:45:46:81:4a:06:2e:b6:c6:93:62:d3:a6:86:
e6:c0:82:11:8b:f2:04:55:07:bf:d9:a5:70:f8:fc:
a7:f1:fd:7c:ca:22:e6:9f:1b:4f:36:c3:a2:12:6f:
58:5a:d7:cd:28:c3:fe:24:13:3e:20:ca:47:38:23:
6b:21:96:7e:81:fd:47:f5:6f:11:df:73:28:ea:13:
25:bc:1c:0d:fc:a4:34:4f:b5:34:75:04:c7:7a:84:
e3:28:b5:99:0d:01:6c:58:a0:60:dc:ff:cb:e2:47:
41:35:14:e5:e1:45:8a:9c:b6:71:88:8a:0c:2d:99:
af:b4:52:20:7b:ca:ff:c5:95:3e:14:e9:56:2c:22:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:02:52:DD:6E:D0:D7:3E:E8:40:A9:97:E6:52:59:7E:F0:12:7D:D5
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cd:aa:5a:28:b9:14:22:dc:18:28:83:67:0a:04:9a:86:37:
14:1e:ea:b8:a0:7f:c1:2f:27:7a:c3:e0:49:ef:bc:e3:fa:bf:
10:0a:7b:c9:1e:73:83:55:44:84:82:5a:f1:cc:f0:18:9b:60:
07:53:16:91:53:36:cf:76:02:f6:0f:bb:ba:df:75:31:87:fd:
e0:58:bb:bc:95:53:48:aa:39:9c:90:ea:4c:19:6e:dc:bc:df:
73:e0:b4:2f:ef:f9:2d:06:cf:81:3e:2d:e4:fb:5c:ba:2a:b0:
fc:c1:78:0f:af:c3:92:9c:dd:c3:1f:75:b2:4a:f8:fa:b7:c0:
fb:5f:d1:93:a7:bb:27:f6:05:3b:3d:9e:60:28:aa:4b:ef:1b:
79:7f:06:dc:5d:b5:da:64:83:27:ef:86:9d:79:76:1d:4b:f3:
20:8d:fb:cf:9c:88:b6:96:24:3d:8a:70:ce:dd:d7:89:22:88:
35:6f:ae:04:df:c6:44:8a:01:07:cc:f7:fc:d5:38:ca:d9:9f:
34:75:db:aa:30:45:97:85:12:3c:a5:7c:de:e2:7f:81:aa:fa:
84:d7:c7:f8:01:e7:ac:85:93:8f:32:b3:9e:90:2a:98:09:75:
b1:31:7b:32:f3:f9:61:06:a7:c4:a5:a6:d1:47:f1:db:bc:4f:
f0:de:ce:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI4KhCzZRBF63UpkC1akkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjUwMTAyMTc1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTAyNTJkZDZlZDBkNzNlZTg0MGE5OTdlNjUyNTk3ZWYwMTI3ZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm18fQtVVhb+iaHDW6RSLX7ODBCLn
hur48rk4r7vaPw9KLElrw96lX6R+sb/qyOmidV2Se4YD1lB2WCSKQK3cqwvjBmHr
tEFBzDjx1IgHkbYzcmdjduPGsDt18cS6Gb/vFfYtXxSjQK6AjNdep1MRKAINHjYe
mjlR3kVGgUoGLrbGk2LTpobmwIIRi/IEVQe/2aVw+Pyn8f18yiLmnxtPNsOiEm9Y
WtfNKMP+JBM+IMpHOCNrIZZ+gf1H9W8R33Mo6hMlvBwN/KQ0T7U0dQTHeoTjKLWZ
DQFsWKBg3P/L4kdBNRTl4UWKnLZxiIoMLZmvtFIge8r/xZU+FOlWLCLS9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJoCUt1u0Nc+6ECpl+ZSWX7wEn3VMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvbWdKUzNXN1ExejdvUUttWDVsSlpmdkFTZmRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XjMA0G
CSqGSIb3DQEBCwUAA4IBAQCbzapaKLkUItwYKINnCgSahjcUHuq4oH/BLyd6w+BJ
77zj+r8QCnvJHnODVUSEglrxzPAYm2AHUxaRUzbPdgL2D7u633Uxh/3gWLu8lVNI
qjmckOpMGW7cvN9z4LQv7/ktBs+BPi3k+1y6KrD8wXgPr8OSnN3DH3WySvj6t8D7
X9GTp7sn9gU7PZ5gKKpL7xt5fwbcXbXaZIMn74adeXYdS/MgjfvPnIi2liQ9inDO
3deJIog1b64E38ZEigEHzPf81TjK2Z80dduqMEWXhRI8pXze4n+BqvqE18f4Aees
hZOPMrOekCqYCXWxMXsy8/lhBqfEpabRR/HbvE/w3s4m
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:20:39 2025 by rpki-client