Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/MJiykAn66BwFdDhRkjnr3vy7VBE.roa
File: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (raw, json)
Hash identifier: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=
Subject key identifier: 30:98:B2:90:09:FA:E8:1C:05:74:38:51:92:39:EB:DE:FC:BB:54:11
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 019423696C52841DB43FD5C8FD76EDD09D73
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/MJiykAn66BwFdDhRkjnr3vy7VBE.roa
Signing time: Wed 01 Jan 2025 19:48:19 +0000
ROA not before: Wed 01 Jan 2025 19:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 91.203.116.0/22 maxlen: 22
195.5.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:6c:52:84:1d:b4:3f:d5:c8:fd:76:ed:d0:9d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Jan 1 19:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3098b29009fae81c057438519239ebdefcbb5411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:1b:7f:f1:da:f4:39:61:70:39:2a:6c:30:
44:e4:30:03:75:3f:d6:9b:52:93:47:df:6c:41:eb:
39:84:6b:51:1a:97:d9:27:d2:18:f9:9b:57:3a:14:
dc:97:e6:3f:7f:77:43:e7:fe:a7:f2:35:d4:0d:6d:
92:67:e5:91:38:f5:28:f7:59:ec:78:09:79:7f:ba:
e0:4b:c5:09:13:1c:d4:9e:63:3a:17:75:d9:83:65:
47:25:60:ca:ff:c2:2c:54:e5:ac:49:29:10:77:56:
f0:bd:d2:8a:d7:ab:17:2a:b0:50:4f:f2:f9:fc:91:
c0:7e:26:38:24:c4:a9:4f:d5:c5:13:74:70:02:ad:
76:7e:a3:00:13:b3:99:e8:73:4a:95:56:ba:0c:af:
19:bc:8d:20:f2:e5:17:50:f0:b4:43:4a:12:2c:7b:
76:dd:3d:d6:f2:91:03:54:bb:ec:7d:11:d5:ef:eb:
a7:23:cd:0e:b1:c1:3f:73:47:35:64:11:64:87:ce:
8d:72:8d:b7:86:ca:06:17:23:b2:ec:5e:b5:94:be:
79:8c:b5:fa:a0:f2:42:e0:6a:12:73:af:30:13:07:
4a:70:62:71:34:5f:56:40:45:cc:93:0b:8b:bb:ba:
62:b5:ac:95:28:ea:5a:a7:37:51:fe:3e:44:e5:ef:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:98:B2:90:09:FA:E8:1C:05:74:38:51:92:39:EB:DE:FC:BB:54:11
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/MJiykAn66BwFdDhRkjnr3vy7VBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.116.0/22
195.5.174.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8a:ea:7c:ec:a7:e8:46:78:f6:f9:f0:50:f3:36:0d:96:be:
5d:02:a3:be:ba:29:4a:f3:41:48:21:e3:18:e0:4b:29:9c:ea:
c4:26:d1:4a:39:31:3e:34:b3:24:4e:8f:21:3e:ea:4b:13:bd:
f7:96:72:11:44:ee:94:f5:93:f5:1b:47:bd:2f:76:70:c1:9d:
a2:2b:14:86:33:5c:fd:b4:06:9e:f8:60:e0:7b:be:29:a6:ae:
8e:91:fb:30:24:2c:75:47:87:8f:7d:e4:db:e2:a3:cf:52:8b:
3f:a6:91:37:37:b3:98:a2:37:37:99:f7:09:cf:b8:b3:f8:61:
c8:10:3a:4c:98:4f:b3:77:c7:9f:15:e1:23:17:34:f4:aa:37:
b3:c3:bc:bf:52:ec:78:49:5d:30:ae:cc:09:0f:3f:ed:f0:29:
8a:bd:6b:9a:d7:ac:00:d2:91:5c:42:1d:5c:17:b3:e7:e4:95:
8c:1b:e9:f4:6a:a0:ba:69:83:84:e6:0b:5e:b3:06:b3:cc:54:
d5:32:d2:dc:8b:d3:45:f1:03:af:98:b6:6c:96:e4:59:52:08:
51:8d:c8:b9:93:c6:a1:7e:68:b6:84:0e:fd:d8:1e:4b:b3:d3:
c9:64:e1:d1:a8:b7:73:f7:62:4e:51:28:f0:3b:63:4b:79:39:
52:c9:73:fe
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjaWxShB20P9XI/Xbt0J1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjBiNjAxMTM5YmUwMTM1NjllYmY4ZTFiZWI1YTY5NGI5
Yzg3ZWMwHhcNMjUwMTAxMTk0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDk4YjI5MDA5ZmFlODFjMDU3NDM4NTE5MjM5ZWJkZWZjYmI1NDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDUbf/Ha9DlhcDkqbDBE5DADdT/W
m1KTR99sQes5hGtRGpfZJ9IY+ZtXOhTcl+Y/f3dD5/6n8jXUDW2SZ+WROPUo91ns
eAl5f7rgS8UJExzUnmM6F3XZg2VHJWDK/8IsVOWsSSkQd1bwvdKK16sXKrBQT/L5
/JHAfiY4JMSpT9XFE3RwAq12fqMAE7OZ6HNKlVa6DK8ZvI0g8uUXUPC0Q0oSLHt2
3T3W8pEDVLvsfRHV7+unI80OscE/c0c1ZBFkh86Nco23hsoGFyOy7F61lL55jLX6
oPJC4GoSc68wEwdKcGJxNF9WQEXMkwuLu7pitayVKOpapzdR/j5E5e9aZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDCYspAJ+ugcBXQ4UZI56978u1QRMB8GA1UdIwQY
MBaAFGJgtgETm+ATVp6/jhvrWmlLnIfsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEt
MjliYjZhYjJjZjVjLzEvTUppeWtBbjY2QndGZERoUmtqbnIzdnk3VkJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEtMjliYjZhYjJjZjVj
LzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8t0AwQA
wwWuMA0GCSqGSIb3DQEBCwUAA4IBAQB0iup87KfoRnj2+fBQ8zYNlr5dAqO+uilK
80FIIeMY4EspnOrEJtFKOTE+NLMkTo8hPupLE733lnIRRO6U9ZP1G0e9L3ZwwZ2i
KxSGM1z9tAae+GDge74ppq6OkfswJCx1R4ePfeTb4qPPUos/ppE3N7OYojc3mfcJ
z7iz+GHIEDpMmE+zd8efFeEjFzT0qjezw7y/Uux4SV0wrswJDz/t8CmKvWua16wA
0pFcQh1cF7Pn5JWMG+n0aqC6aYOE5gteswazzFTVMtLci9NF8QOvmLZsluRZUghR
jci5k8ahfmi2hA792B5Ls9PJZOHRqLdz92JOUSjwO2NLeTlSyXP+
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:46 2025 by rpki-client