Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa
File: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (raw, json)
Hash identifier: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=
Subject key identifier: 30:1F:CA:0F:76:F1:78:CE:CA:F8:EC:6E:20:80:33:42:A7:D5:B6:6A
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 01953C68E744D4EFB94CE57A8FC784FDA161
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa
Signing time: Tue 25 Feb 2025 09:21:02 +0000
ROA not before: Tue 25 Feb 2025 09:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 89.40.210.0/24 maxlen: 24
91.205.43.0/24 maxlen: 24
185.109.254.0/24 maxlen: 24
2a06:c900::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:68:e7:44:d4:ef:b9:4c:e5:7a:8f:c7:84:fd:a1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Feb 25 09:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=301fca0f76f178cecaf8ec6e20803342a7d5b66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:44:9c:6e:af:d6:4f:2d:5f:37:d8:ba:d1:
ef:43:19:25:d0:9f:9d:68:30:e2:66:d7:b7:6e:79:
3c:07:60:27:95:40:74:c5:da:3e:eb:07:7f:7d:60:
48:94:bd:d0:77:0f:e7:72:41:ee:4e:71:af:71:33:
11:34:e7:ce:1e:2e:10:21:a7:e5:80:d8:8f:af:a8:
6f:7c:f9:4f:e8:1a:ab:cd:64:57:6c:0d:71:af:11:
44:ea:49:13:d0:f6:fa:21:1c:3d:a3:85:40:b7:60:
d1:61:6b:8f:82:47:e0:7f:09:37:62:f2:ff:60:fc:
59:83:4f:73:5f:3b:9a:dd:0c:82:44:bd:84:c0:e0:
fa:96:f5:d7:c4:09:2a:bb:38:b0:22:c7:1a:72:a3:
6a:f4:7f:a3:95:45:1f:79:8c:c2:44:bb:ff:c1:ce:
d9:bf:c3:8e:3c:ca:cc:71:87:87:f7:db:54:f7:47:
ff:a6:e3:db:cc:1f:48:f1:65:de:ef:8d:2e:57:d4:
16:4e:00:5a:f0:05:68:b2:2d:82:2d:10:0b:87:22:
1b:47:db:40:06:39:2f:ba:02:57:8c:ef:4d:b0:92:
1a:de:9f:43:a9:d3:b3:15:6a:b9:e9:82:4a:d8:73:
1b:36:89:49:67:f5:80:22:b1:7d:ff:e6:eb:b2:35:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:CA:0F:76:F1:78:CE:CA:F8:EC:6E:20:80:33:42:A7:D5:B6:6A
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.210.0/24
91.205.43.0/24
185.109.254.0/24
IPv6:
2a06:c900::/29
Signature Algorithm: sha256WithRSAEncryption
2f:c2:d1:73:8b:b8:e0:d4:15:27:08:df:72:8c:98:71:3e:de:
aa:50:a4:47:ef:6d:12:02:b9:8c:13:72:82:70:14:ea:9a:02:
e5:8f:27:be:ef:e9:3a:69:57:6a:de:3e:82:72:5a:e6:05:50:
49:d6:f0:c2:12:83:cf:74:8a:6b:bd:b1:3f:99:85:f1:c1:15:
c2:ac:8e:2e:b5:09:aa:f0:30:64:a1:e6:fa:12:e4:90:f8:ac:
13:fd:42:05:b0:63:4d:91:99:39:ad:af:a8:26:f3:c3:b5:c5:
de:e5:28:a6:10:9e:35:f3:ad:66:71:ae:79:0d:35:e0:5f:7c:
c7:87:be:3d:cc:5d:4d:31:54:80:eb:ad:43:4d:56:d1:b6:50:
90:77:cd:84:0a:36:f3:0b:87:2f:06:37:fb:21:0e:93:01:59:
3b:47:c8:64:3f:40:90:3f:5d:53:93:43:0c:05:46:9e:cc:1f:
ad:69:e3:11:0b:f7:38:5c:7a:71:e3:14:57:1e:ef:5c:d6:0f:
99:3f:c0:61:b6:ba:62:44:37:9c:90:81:d4:fb:a0:63:bb:bd:
bf:22:1e:a1:db:a5:3a:97:50:60:e6:24:f0:91:fe:55:89:81:
8d:79:f4:fd:95:6e:9c:be:46:7d:f1:ef:37:3f:70:87:54:e6:
ef:41:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:57:25 2025 by rpki-client