Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Mw6puSDNclBq3OPBLwAFkUR1Guo.roa
File: Mw6puSDNclBq3OPBLwAFkUR1Guo.roa (raw, json)
Hash identifier: FO8kslqFGXW+WtSegOn0Dh9VKSdI0BOFNgaEbftbIUY=
Subject key identifier: 33:0E:A9:B9:20:CD:72:50:6A:DC:E3:C1:2F:00:05:91:44:75:1A:EA
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683F69BFD40ECBBC588652CB6C9AA8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Mw6puSDNclBq3OPBLwAFkUR1Guo.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47418
IP address blocks: 147.45.35.0/24 maxlen: 24
193.233.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3f:69:bf:d4:0e:cb:bc:58:86:52:cb:6c:9a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=330ea9b920cd72506adce3c12f00059144751aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:33:5a:b7:f9:82:39:b8:df:ac:d0:4d:f7:24:
61:ce:d7:b7:78:97:8d:4e:79:56:43:ad:50:68:11:
14:24:90:3b:08:c7:50:d4:a3:fb:57:db:b8:ca:af:
b2:57:1e:45:8c:13:78:86:f0:42:db:2e:5b:8b:6e:
39:04:12:a5:68:8e:f5:30:04:59:42:2e:73:cf:53:
e8:da:42:6a:b2:b9:a0:95:ee:41:ac:30:9a:ff:77:
d2:67:d6:ed:a1:23:67:e4:ff:81:b4:99:a2:f8:96:
3a:4c:f6:b8:d8:95:6a:af:04:b2:6b:90:e4:a7:46:
cd:95:64:df:ff:3b:bd:1f:5b:24:28:c7:62:d4:12:
3e:a8:f0:6e:0b:e2:02:e5:3b:80:33:21:8b:07:ac:
ab:ae:27:a9:71:49:57:4b:54:78:aa:85:22:94:c2:
4f:30:ca:71:03:ea:b2:61:dc:ba:0a:bc:38:61:6a:
e2:8b:5c:2f:08:5a:ef:2a:6a:b3:e5:0b:6e:d9:1d:
64:d6:c5:e0:d5:04:31:fe:24:18:ca:5e:cd:8c:64:
b5:35:fa:60:27:13:5d:1c:53:f1:89:bd:ac:1a:ae:
39:3f:5d:a7:95:3a:0e:ee:06:22:84:5a:7c:00:d0:
d3:d3:44:d2:6f:f1:ef:6e:1a:0e:92:b4:db:e9:18:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0E:A9:B9:20:CD:72:50:6A:DC:E3:C1:2F:00:05:91:44:75:1A:EA
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Mw6puSDNclBq3OPBLwAFkUR1Guo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.35.0/24
193.233.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6f:70:cb:4f:45:e2:6b:bf:e8:20:bf:13:46:10:b2:aa:d3:
e5:a6:be:fc:d5:ec:6e:61:22:83:2b:2e:d0:97:5c:ff:13:e2:
b6:f8:21:24:98:87:d0:c9:86:2b:d7:49:34:da:57:6f:aa:92:
ba:7c:d8:b1:58:4a:28:4c:90:1c:21:f8:7c:0e:65:38:d9:86:
a0:68:4f:67:2e:34:0a:de:96:bd:4d:41:d5:ee:3c:65:19:fe:
c0:26:8d:27:ad:67:9c:39:34:0e:e3:27:3f:80:35:84:95:30:
12:e7:ca:53:ec:fb:df:53:90:7a:37:da:e6:a4:94:89:7c:55:
3a:37:70:d5:2c:03:46:5a:4a:b1:8d:c2:22:82:b7:e4:ba:61:
f6:bc:2b:e2:77:d3:ab:d7:bf:5d:53:1b:d7:3a:19:ba:c7:92:
61:cb:20:e1:79:d4:c7:27:66:ac:a4:c8:42:f5:07:ed:45:12:
c4:c8:b5:89:1c:60:10:a3:7e:4a:c6:a5:ad:25:03:68:18:30:
95:6f:b4:b2:45:89:4b:d9:1f:fa:88:2c:92:48:cd:d4:57:c2:
58:11:b9:de:f7:d0:e4:cb:12:53:28:67:35:d0:a4:57:f9:5b:
4b:fd:a5:86:08:87:28:91:f1:ee:95:64:b0:5c:49:af:8b:a5:
d5:44:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:21 2025 by rpki-client