Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/mVXDsutnAgycmKCU0s0vqiIrWkg.roa
File: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (raw, json)
Hash identifier: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=
Subject key identifier: 99:55:C3:B2:EB:67:02:0C:9C:98:A0:94:D2:CD:2F:AA:22:2B:5A:48
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDA898F20D122EA4F1B438971CFFD2
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/mVXDsutnAgycmKCU0s0vqiIrWkg.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57246
IP address blocks: 91.108.41.0/24 maxlen: 24
95.140.84.0/22 maxlen: 22
95.140.84.0/24 maxlen: 24
95.140.85.0/24 maxlen: 24
95.140.86.0/24 maxlen: 24
95.140.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a8:98:f2:0d:12:2e:a4:f1:b4:38:97:1c:ff:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9955c3b2eb67020c9c98a094d2cd2faa222b5a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:d7:78:c6:61:f0:55:a3:46:51:5c:1c:88:
ab:ee:96:ee:9d:12:73:01:c3:5f:3a:83:b6:a0:a9:
8f:fb:9b:08:06:8a:53:8d:52:de:d1:6d:ea:f0:aa:
54:f8:0a:7a:27:84:ac:1e:9e:c3:4f:a7:1e:c6:86:
88:19:c4:5d:d6:b7:55:e9:1c:1c:fd:d4:57:d1:09:
30:fc:e4:0f:9b:97:be:30:f5:91:81:a1:92:af:24:
34:97:0c:a4:a8:7f:46:a2:26:ef:4b:95:f1:b1:32:
2b:69:8e:8d:dc:77:36:d5:94:38:59:bf:26:20:23:
ba:69:aa:b7:ee:26:07:1b:d4:21:3b:34:2e:38:f5:
61:ee:36:37:ee:95:0d:0d:c0:2e:5c:7d:07:b2:aa:
5b:f7:61:84:db:5a:e6:f6:f2:2d:2e:c6:c6:99:24:
7f:69:e7:ff:79:e7:d8:42:71:f6:dd:42:80:5d:f6:
06:53:ac:9c:54:08:31:86:7c:d1:ab:88:d7:4e:a4:
61:5d:7d:ef:3e:95:29:ae:ad:7c:87:a5:78:ab:74:
63:a6:2f:d3:02:95:84:dc:b5:57:f0:38:7f:59:27:
32:c9:f5:51:d1:2a:ae:40:10:7a:55:17:fb:ca:5d:
b7:e5:99:64:22:ed:46:63:6a:80:4a:79:ac:70:e4:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:55:C3:B2:EB:67:02:0C:9C:98:A0:94:D2:CD:2F:AA:22:2B:5A:48
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/mVXDsutnAgycmKCU0s0vqiIrWkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.41.0/24
95.140.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:fc:c9:4c:8e:f8:8c:b9:eb:50:b0:14:01:96:5a:66:90:de:
5f:75:d1:48:6b:1f:8d:25:d2:53:74:22:cd:2e:f5:75:9d:54:
94:e7:47:4f:61:f3:c6:3c:b7:3b:5b:6d:73:29:ce:3c:5b:6c:
d4:0e:cd:42:9a:aa:8c:88:96:fd:40:68:07:a3:1e:7a:b3:24:
c4:80:86:25:d8:aa:bb:18:5e:cc:b6:28:b0:2c:1d:f3:03:3d:
10:74:0f:da:55:77:e0:68:df:ab:78:53:93:2e:06:47:e2:4d:
40:df:e9:66:b0:d8:32:a7:6c:d6:3f:2a:bf:ed:55:4b:ee:f8:
f6:29:46:de:73:1a:3a:e5:ff:9f:ff:db:be:9d:95:f8:81:78:
25:33:04:b1:b1:5d:9b:88:a3:29:9d:95:8e:61:c1:5e:fa:1c:
e0:88:ba:d1:e0:81:8e:3d:12:91:0d:e3:09:1e:69:a1:87:67:
aa:7e:68:2f:0b:46:b6:c3:d8:cc:ec:6d:5e:0c:c7:1d:d2:e5:
a0:44:5d:b5:50:5c:94:e0:f6:4c:a2:40:aa:2b:58:cf:8a:c3:
4b:2e:58:2b:b8:02:b4:45:4a:2c:7b:86:89:2e:02:fa:08:b7:
77:da:4c:a9:d7:f4:50:7b:d2:e9:e6:88:c4:0b:04:87:27:5b:
b8:ea:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:33:00 2025 by rpki-client