Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/MjmfS5cTYPFTUPe00TnZUNL6DqI.roa
File: MjmfS5cTYPFTUPe00TnZUNL6DqI.roa (raw, json)
Hash identifier: dUsSPNiBI9LFVTaHfbwiPMCUHJKB3vQFwQiAaxpm1VA=
Subject key identifier: 32:39:9F:4B:97:13:60:F1:53:50:F7:B4:D1:39:D9:50:D2:FA:0E:A2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5ACAB810E566FFAE67FA71413BFC3
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/MjmfS5cTYPFTUPe00TnZUNL6DqI.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 5.8.18.0/24 maxlen: 24
46.161.0.0/24 maxlen: 24
146.185.233.0/24 maxlen: 24
146.185.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ac:ab:81:0e:56:6f:fa:e6:7f:a7:14:13:bf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32399f4b971360f15350f7b4d139d950d2fa0ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:d1:99:59:54:95:e8:9c:a9:05:25:32:b3:
16:fd:0b:13:2e:ab:6e:f2:50:5a:a3:10:17:e3:bd:
37:95:aa:76:2d:0a:ff:21:56:20:9e:94:10:e5:6a:
a0:80:d6:30:b7:2f:9d:28:5e:ad:68:92:99:4b:bf:
88:eb:e7:87:96:45:fd:c3:7a:9a:1f:f0:cc:2c:84:
c5:b5:c4:c8:bc:86:0a:8c:61:33:6f:33:b9:91:36:
c9:a8:65:d9:af:74:47:91:09:3b:79:63:ef:63:d6:
ee:00:4f:8e:fd:71:bb:e9:ef:df:35:c4:5b:6a:d9:
47:1c:fb:32:48:fc:8f:07:e6:1a:10:26:fd:24:f9:
68:97:9a:6a:85:26:64:a2:15:ab:d8:34:5a:93:51:
5d:15:09:e0:8d:0f:32:3d:b4:36:b0:23:66:39:18:
8a:af:53:0f:07:df:0f:e4:69:c9:b4:8a:e4:4a:67:
09:de:43:5b:d2:eb:80:0b:1a:95:a5:57:f5:6f:64:
2e:76:1b:42:65:96:46:a6:25:95:58:82:dd:3a:57:
b0:eb:9d:25:7a:65:ab:1b:ed:cb:80:d4:f0:bd:f1:
8c:8b:30:f0:87:e8:d4:d6:3a:15:b5:8d:3f:e3:f1:
4a:88:ee:d0:53:62:2c:d2:78:54:49:cf:37:cb:52:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:39:9F:4B:97:13:60:F1:53:50:F7:B4:D1:39:D9:50:D2:FA:0E:A2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/MjmfS5cTYPFTUPe00TnZUNL6DqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.18.0/24
46.161.0.0/24
146.185.233.0/24
146.185.239.0/24
Signature Algorithm: sha256WithRSAEncryption
68:df:ae:ec:86:8a:51:4c:7a:d7:90:1b:c6:70:b3:ee:31:18:
ee:92:c5:fc:76:0f:9f:c6:90:ca:7c:58:7e:b3:12:ef:62:bb:
5e:d9:a7:71:63:a7:c2:59:0f:ff:90:9a:d1:30:7a:01:1f:f8:
f1:93:de:0b:dc:3a:0c:67:2a:21:9b:a3:62:c9:fd:5a:e8:71:
24:a5:af:7f:b1:b3:92:b6:fc:b3:4b:f1:33:42:05:e2:68:eb:
7f:70:9c:65:43:07:69:18:31:e0:5b:cd:e7:64:cf:fb:01:d6:
a3:ad:3f:29:ce:90:7e:1c:8e:cd:fe:72:e6:d7:5a:c4:77:4f:
62:99:3e:ac:8a:e5:d7:50:f0:70:62:4e:68:66:18:1f:12:75:
aa:ca:b1:ce:e3:60:15:1b:9a:87:03:1f:8d:11:fe:fd:8c:ec:
03:d3:ef:b0:de:3f:e5:16:8a:60:3f:ae:9d:9b:cd:66:73:b2:
1c:b3:ed:e3:0a:b3:bb:c7:4e:10:15:f7:a3:ec:58:36:fd:ad:
ae:34:dc:8c:9f:85:4b:38:c2:3d:cc:61:43:2e:fb:72:e3:a6:
ef:6e:61:39:b4:db:aa:b4:a1:99:e3:9d:fc:63:19:f6:f2:56:
77:0b:5d:d7:10:a2:45:ff:d8:27:3b:3b:ff:b2:42:63:8b:f0:
7e:93:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:34:00 2025 by rpki-client