Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa
File: mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa (raw, json)
Hash identifier: A++zVXL1KytgjPo0U8Uvn5ms+5UtCdFa04StDMBXv54=
Subject key identifier: 98:30:69:D6:80:64:75:2F:51:D6:45:90:69:E2:3C:64:C3:C3:A1:7F
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 019425FDBA64D2427C45425B6D73BAB34D2D
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59701
IP address blocks: 79.171.144.0/21 maxlen: 21
185.147.72.0/22 maxlen: 22
195.5.160.0/24 maxlen: 24
2a06:d480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ba:64:d2:42:7c:45:42:5b:6d:73:ba:b3:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983069d68064752f51d6459069e23c64c3c3a17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:b9:87:90:a8:19:a9:2e:e2:53:56:99:85:
09:48:37:27:ce:f5:e9:6d:b1:32:b2:f3:01:2d:0e:
3d:c0:98:fc:ed:d0:d0:7f:cd:7d:09:bf:cf:5e:eb:
af:fc:88:79:0d:80:ce:e1:5f:3c:a3:59:9f:9a:75:
7d:ed:96:c6:d4:a4:9b:a5:2e:20:a0:3c:7c:d3:20:
dd:d5:70:20:72:23:f1:6e:db:29:45:5c:ad:ce:3d:
5e:86:da:50:e6:97:30:36:37:16:4e:83:32:b2:70:
56:f7:6f:3b:88:b4:c6:53:bb:73:78:19:7a:ed:ed:
3b:7b:6c:d8:89:bd:07:ba:48:5c:63:ab:8c:9f:b6:
9b:04:c9:54:22:54:52:e4:98:ca:70:5f:a5:95:39:
43:8b:96:f0:08:fb:17:9b:17:00:8f:3a:10:b6:90:
d7:0f:8f:3f:7d:a5:7b:4f:60:c4:bf:d3:95:df:56:
49:d0:83:5a:8b:b4:c1:7b:73:f1:2c:95:f5:89:a8:
90:16:3b:f1:6a:64:82:cf:08:4c:51:a7:e5:0e:72:
14:3e:33:1f:c4:ee:be:76:c7:80:d3:2e:03:5d:d9:
e0:14:15:56:c9:a0:4e:f7:3a:f0:6c:de:1c:65:ff:
48:72:0d:9b:67:2c:e0:f7:c6:75:3a:3d:1b:6a:e2:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:69:D6:80:64:75:2F:51:D6:45:90:69:E2:3C:64:C3:C3:A1:7F
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.144.0/21
185.147.72.0/22
195.5.160.0/24
IPv6:
2a06:d480::/29
Signature Algorithm: sha256WithRSAEncryption
47:8d:36:47:58:52:be:eb:ca:05:91:9c:6d:85:82:4a:b8:37:
c6:53:50:c6:fa:39:8c:6c:f2:32:5b:48:ad:29:34:74:cb:5d:
19:1c:8a:97:ab:0b:f1:a3:46:af:9c:82:e7:57:6a:31:44:81:
b6:f5:21:ce:63:03:86:fd:4b:19:2c:7f:fa:01:93:85:03:aa:
36:b7:2d:43:20:c1:3d:3f:2f:f5:3c:34:df:b3:ba:65:58:15:
4f:8d:86:09:ab:dc:01:9c:ae:f4:67:c9:a8:fa:be:13:a5:97:
cb:09:14:21:c7:d4:88:85:05:b3:33:b5:80:89:47:b8:ff:20:
f4:9a:37:20:49:84:dc:0a:88:98:40:5b:6e:d4:94:69:07:58:
7c:6f:54:43:31:c5:d1:37:52:30:ee:a7:54:3d:c7:50:0b:d8:
e4:42:75:55:52:f2:b9:d0:f4:69:e3:58:52:d3:f5:22:9e:65:
d0:8a:cb:7d:9c:1c:3d:82:c8:88:1f:eb:25:ec:67:b6:17:46:
85:69:5f:74:23:fe:ce:53:66:38:33:14:63:29:68:b5:25:0f:
3b:46:81:94:a1:7e:0e:09:56:c4:0b:ae:e8:2c:fc:af:be:5c:
18:74:6d:36:0d:4f:bc:9b:33:ed:12:f6:0a:2b:9e:99:57:34:
d8:27:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:58 2025 by rpki-client