Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/mM8VTopJZmHymxZODgrdAS9tCB0.roa
File: mM8VTopJZmHymxZODgrdAS9tCB0.roa (raw, json)
Hash identifier: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=
Subject key identifier: 98:CF:15:4E:8A:49:66:61:F2:9B:16:4E:0E:0A:DD:01:2F:6D:08:1D
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 01941F8C033D1547C7FD1303DB677C87C254
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/mM8VTopJZmHymxZODgrdAS9tCB0.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197991
IP address blocks: 5.144.144.0/21 maxlen: 24
149.126.32.0/20 maxlen: 24
178.132.59.0/24 maxlen: 24
178.132.60.0/22 maxlen: 24
2a0d:a5c0::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:03:3d:15:47:c7:fd:13:03:db:67:7c:87:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98cf154e8a496661f29b164e0e0add012f6d081d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:aa:21:15:be:c4:2a:97:a8:0e:f2:cb:0a:
2c:a2:80:bd:26:48:06:cd:4f:75:34:ee:40:22:e8:
cf:de:9a:c7:dc:09:ea:de:ab:38:31:e0:bf:cc:79:
2c:31:83:23:63:94:8b:71:c2:04:f3:43:44:85:0f:
71:cb:6b:75:27:88:9b:22:26:79:68:9a:18:1c:20:
9b:67:be:12:ca:bd:33:dc:a4:b6:f1:98:f7:3f:ce:
8d:1f:15:82:d4:70:7b:f6:cf:d8:79:86:9c:8d:47:
81:b7:8a:ff:ce:5d:f8:d4:bb:30:c3:2f:8b:30:9f:
3d:78:00:3b:e7:a6:7f:0b:ac:ee:1d:e0:ad:93:cc:
5a:4b:13:48:45:6c:53:20:55:e8:c5:b2:06:b3:96:
50:a2:5e:1a:33:f0:89:f6:ad:d1:06:bc:4a:ee:b2:
41:aa:a3:7d:c7:23:d1:bb:0b:7f:8e:1d:d0:35:88:
bc:08:09:08:4b:53:d9:9e:86:9f:55:83:b7:87:23:
c3:b6:72:db:4d:e6:5d:81:84:1c:33:d2:6b:a3:13:
28:3a:2f:33:3a:29:9f:db:67:1a:ee:9b:3e:21:81:
66:16:df:f2:f9:d3:f6:35:64:76:7d:b1:b6:e5:e0:
68:70:8c:ef:2c:3d:90:28:97:29:f6:8d:fd:11:c0:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:15:4E:8A:49:66:61:F2:9B:16:4E:0E:0A:DD:01:2F:6D:08:1D
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/mM8VTopJZmHymxZODgrdAS9tCB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.144.0/21
149.126.32.0/20
178.132.59.0-178.132.63.255
IPv6:
2a0d:a5c0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:49:e4:79:ae:bb:29:62:2c:25:47:e3:70:b1:c2:2c:69:70:
c0:04:26:56:ee:41:f8:00:c9:52:4e:eb:2c:04:4f:21:98:f0:
22:07:5c:e6:fb:c8:2e:94:c3:13:61:80:b1:bb:50:d2:66:90:
d8:1c:54:60:e8:30:9e:ea:d7:22:68:0c:d4:d8:a5:dd:6b:88:
04:d3:9c:6b:1f:a9:1f:46:e9:81:61:69:f3:c8:db:8a:89:63:
ae:3f:4f:df:14:d9:ee:f0:94:64:ac:2e:16:3a:3f:fb:c1:36:
eb:85:8d:10:27:42:41:c0:83:13:c3:f1:e5:ce:aa:27:b5:53:
3a:91:fd:56:fe:d0:64:a4:5c:be:77:17:98:7a:9e:04:9f:4c:
4b:52:c8:ac:3e:29:88:e6:19:ee:0a:de:e0:aa:3c:99:46:e0:
ce:39:41:ae:21:65:99:b8:23:6f:75:d6:22:b8:b8:c9:e6:e9:
ce:94:92:08:ba:fa:dd:a0:48:c3:65:08:33:ad:38:c8:49:4d:
22:b3:f6:61:fb:70:ca:96:70:6c:9c:79:0e:5d:f6:ad:f2:19:
8d:4e:07:e4:60:ac:98:3d:55:b5:39:94:78:03:c6:e2:9d:6c:
ad:a7:58:e1:6f:10:da:6b:02:3b:d8:95:e1:58:d2:bf:0d:80:
6e:39:34:e6
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQfjAM9FUfH/RMD22d8h8JUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx
MTE4YjcwHhcNMjUwMTAxMDE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGNmMTU0ZThhNDk2NjYxZjI5YjE2NGUwZTBhZGQwMTJmNmQwODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZWqIRW+xCqXqA7yywosooC9JkgG
zU91NO5AIujP3prH3Anq3qs4MeC/zHksMYMjY5SLccIE80NEhQ9xy2t1J4ibIiZ5
aJoYHCCbZ74Syr0z3KS28Zj3P86NHxWC1HB79s/YeYacjUeBt4r/zl341Lswwy+L
MJ89eAA756Z/C6zuHeCtk8xaSxNIRWxTIFXoxbIGs5ZQol4aM/CJ9q3RBrxK7rJB
qqN9xyPRuwt/jh3QNYi8CAkIS1PZnoafVYO3hyPDtnLbTeZdgYQcM9JroxMoOi8z
Oimf22ca7ps+IYFmFt/y+dP2NWR2fbG25eBocIzvLD2QKJcp9o39EcB+iwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFJjPFU6KSWZh8psWTg4K3QEvbQgdMB8GA1UdIwQY
MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt
ZWI5NDE1ZWM1NDhhLzEvbU04VlRvcEpabUh5bXhaT0RncmRBUzl0Q0IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh
LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQDBZCQAwQE
lX4gMAwDBACyhDsDBAayhAAwDQQCAAIwBwMFAyoNpcAwDQYJKoZIhvcNAQELBQAD
ggEBAJ1J5HmuuyliLCVH43CxwixpcMAEJlbuQfgAyVJO6ywETyGY8CIHXOb7yC6U
wxNhgLG7UNJmkNgcVGDoMJ7q1yJoDNTYpd1riATTnGsfqR9G6YFhafPI24qJY64/
T98U2e7wlGSsLhY6P/vBNuuFjRAnQkHAgxPD8eXOqie1UzqR/Vb+0GSkXL53F5h6
ngSfTEtSyKw+KYjmGe4K3uCqPJlG4M45Qa4hZZm4I2911iK4uMnm6c6Ukgi6+t2g
SMNlCDOtOMhJTSKz9mH7cMqWcGyceQ5d9q3yGY1OB+RgrJg9VbU5lHgDxuKdbK2n
WOFvENprAjvYleFY0r8NgG45NOY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:20 2025 by rpki-client