Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa
File: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (raw, json)
Hash identifier: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=
Subject key identifier: 33:62:83:47:C7:6B:EF:EE:D9:CA:14:88:0F:2C:F0:10:B2:98:51:D3
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 01942067D2D831262F2D87BB7EB11005B6E8
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 185.69.44.0/22 maxlen: 24
2a05:2000::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d2:d8:31:26:2f:2d:87:bb:7e:b1:10:05:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33628347c76befeed9ca14880f2cf010b29851d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:4f:25:1b:b4:46:67:8c:16:f8:f7:7a:be:
da:1d:d8:07:da:55:cd:27:6e:06:1e:f0:f9:14:2b:
f2:ca:fe:20:0b:27:fc:bb:ef:7c:5b:64:69:bd:d0:
1c:81:79:7e:fa:62:23:d6:15:21:33:5f:06:0d:2c:
74:0a:5a:d9:b1:2e:2f:9c:86:d2:eb:e3:70:8e:5d:
9e:41:27:a7:ca:e5:0d:35:88:9d:a7:f0:73:cf:65:
55:8a:63:c8:63:54:7a:a9:1e:ff:34:9a:56:5a:0e:
4c:5a:18:94:f2:42:b6:e8:13:35:c7:d4:54:de:61:
2a:b3:47:73:1f:9f:f4:a0:41:ed:33:ee:b9:d2:e8:
8e:89:4e:be:96:bd:eb:bc:3e:76:84:78:e9:f8:59:
56:31:f8:d5:7b:cf:3d:0a:87:32:5f:59:88:72:7c:
d5:e1:4c:a5:1c:21:83:1f:72:ff:83:7d:32:9e:8f:
42:99:ff:d7:0b:67:1d:cb:66:54:11:75:c5:1c:8b:
5b:6c:a2:e4:e3:5b:98:11:c6:ed:01:8c:9d:b0:6d:
cc:83:24:25:ba:4d:24:ed:74:37:62:34:2a:be:1f:
ba:42:d2:d7:27:87:5c:28:01:eb:b7:81:93:dc:13:
79:b0:b7:14:b5:c1:18:41:d5:15:12:bd:48:ce:10:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:83:47:C7:6B:EF:EE:D9:CA:14:88:0F:2C:F0:10:B2:98:51:D3
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.44.0/22
IPv6:
2a05:2000::/29
Signature Algorithm: sha256WithRSAEncryption
4e:62:79:25:95:a1:d1:5e:ee:a2:fb:9f:03:b1:f8:55:2d:88:
df:5b:65:d3:04:e7:6b:98:0c:d8:13:9a:27:28:77:d8:ec:77:
ec:40:d7:05:f1:1c:67:01:e8:d8:86:6d:8a:f5:e7:00:fd:7d:
0a:24:72:23:11:67:fa:f7:b1:8f:04:4f:d5:b6:7b:b1:64:01:
8f:ff:d8:06:95:74:9f:2b:fa:72:7c:ec:8b:3f:72:0f:1a:2a:
ec:4a:9f:00:5c:ae:e9:58:07:48:30:a5:bd:00:7f:95:ce:9a:
88:d8:8f:12:77:d7:c1:35:52:03:1f:f3:3f:55:68:a6:2a:c2:
c8:ca:ad:74:de:8b:7a:6a:f8:ad:a9:b5:65:9a:5a:66:ef:72:
5b:45:21:a1:80:80:ef:f4:e9:dc:c0:3a:47:9e:b7:29:78:37:
d7:15:95:1c:c5:a0:e8:ee:37:9e:d5:28:36:1f:0e:9f:72:0e:
07:cd:86:33:f9:cd:cc:40:b2:4f:1d:88:08:25:38:80:68:60:
96:23:9a:54:6f:c7:17:65:cb:11:87:c4:25:ee:a0:01:88:31:
aa:a0:25:06:98:5a:06:b5:94:22:9f:47:85:a2:48:29:92:98:
99:da:ea:db:2f:82:11:33:77:32:0c:d9:45:78:a9:68:42:f6:
d8:a0:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:16:10 2025 by rpki-client