Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Mm3qACzHvHra68ZyXMFoFn0n-bY.roa
File: Mm3qACzHvHra68ZyXMFoFn0n-bY.roa (raw, json)
Hash identifier: 2rWmxjojx2Jl5ARyoSNvPBcDTa/acXYa85wGh+VMkUY=
Subject key identifier: 32:6D:EA:00:2C:C7:BC:7A:DA:EB:C6:72:5C:C1:68:16:7D:27:F9:B6
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB7C1553541856B6E8806320BB0A0
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Mm3qACzHvHra68ZyXMFoFn0n-bY.roa
Signing time: Thu 02 Jan 2025 07:48:26 +0000
ROA not before: Thu 02 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205074
IP address blocks: 212.91.16.0/24 maxlen: 24
212.91.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b7:c1:55:35:41:85:6b:6e:88:06:32:0b:b0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=326dea002cc7bc7adaebc6725cc168167d27f9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:9b:90:2d:e5:5d:e7:e5:d7:5b:49:11:ad:
74:a8:1a:f7:3e:e4:2b:53:2c:0b:ac:9a:bc:08:ee:
5f:d3:80:25:b2:71:8a:29:ce:39:c5:8e:77:ba:9e:
43:bb:4b:7e:5d:3f:88:28:74:15:40:9d:9a:70:7a:
2e:36:38:9c:66:2f:2f:ce:bb:8b:e3:cf:98:4c:14:
23:4c:d9:3e:b9:7f:98:c5:da:ca:f6:53:fc:15:87:
d5:43:d9:b6:81:41:c9:e6:7f:b0:aa:fc:d3:51:a6:
d3:20:03:5e:d7:68:3d:f8:39:42:22:8a:52:56:bd:
ea:0f:82:cb:4f:fd:2c:98:92:60:58:ee:33:56:85:
4f:f5:66:b2:ca:8a:e9:cc:03:65:29:79:68:a9:5a:
a7:f4:61:6c:f8:4d:47:f8:45:86:0f:ad:c8:e2:45:
49:57:92:2b:65:6c:45:8d:0f:e1:bf:31:1e:39:64:
2d:87:af:b7:d8:6a:6e:26:22:6e:bf:ea:f2:d7:d3:
7a:30:be:11:27:c4:83:08:9f:58:38:67:3e:2b:a5:
91:80:fe:52:05:68:74:9d:aa:44:df:a4:33:f6:fc:
4d:6c:15:9a:65:69:44:d9:12:5e:3b:b3:d6:a4:0f:
3a:d0:ad:92:c0:d7:9a:2f:21:7e:c2:86:a6:ae:87:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:EA:00:2C:C7:BC:7A:DA:EB:C6:72:5C:C1:68:16:7D:27:F9:B6
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Mm3qACzHvHra68ZyXMFoFn0n-bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.16.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:af:07:1e:51:ba:e9:7d:7b:65:ee:30:f3:bc:27:4a:98:41:
de:8f:2e:f7:f3:a8:ab:73:36:b7:f8:7f:fd:32:e7:df:59:a5:
c3:c1:f5:d3:16:18:7f:d6:fa:93:99:8d:cd:0e:96:74:b8:31:
db:af:87:64:b0:0f:b9:2e:8a:a4:bd:d7:7f:44:99:58:00:f1:
9b:ba:03:77:a2:73:e2:2c:d8:6f:84:6f:7f:c5:71:c5:44:7b:
8b:80:d6:e7:57:84:a1:6e:93:a5:15:ce:52:9b:cf:fd:4c:57:
8b:98:75:d3:a8:be:ea:f6:f4:47:2e:d5:1a:f8:d0:1e:a5:24:
e5:a1:fc:a9:9b:21:11:eb:e6:ba:ef:4a:4b:9a:2c:8b:f5:03:
c8:84:ef:13:e4:63:30:d8:d6:56:4d:84:20:ee:a0:2b:64:14:
f5:3d:fd:0e:c3:fa:47:1f:db:02:66:8c:55:ca:cd:77:e9:8b:
e4:9b:97:32:0c:0a:c8:91:3c:c8:86:07:55:92:7e:0e:17:e7:
5f:25:c2:af:2a:eb:46:d1:63:1d:57:dc:22:5c:17:d4:bd:72:
b1:86:de:fa:0b:f4:60:23:58:3b:80:c9:c4:8b:b3:f7:35:89:
86:1e:5c:7a:0d:b8:d0:62:e7:ce:c1:ef:80:8c:ec:8e:30:f4:
f1:73:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:41 2025 by rpki-client