Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa
File: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (raw, json)
Hash identifier: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=
Subject key identifier: 30:7A:FC:3C:66:4F:E1:67:42:25:54:64:D4:00:70:9F:11:7B:15:C8
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 019421441DEE003266F655A4B6475226B7BE
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 83.138.0.0/21 maxlen: 24
212.25.192.0/20 maxlen: 24
212.25.208.0/23 maxlen: 24
212.25.212.0/23 maxlen: 24
212.159.192.0/19 maxlen: 24
212.159.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1d:ee:00:32:66:f6:55:a4:b6:47:52:26:b7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=307afc3c664fe16742255464d400709f117b15c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:9b:34:e8:7a:bb:c4:d8:dc:0d:af:1b:a5:
97:21:e1:5b:6f:c6:7a:89:ac:f7:6c:c2:56:d6:73:
0f:cf:63:76:1a:a0:a7:8e:8c:e9:d5:08:43:22:e9:
be:f1:0f:24:36:46:4d:86:56:e2:3e:f0:18:96:e3:
b0:ae:a4:50:82:33:bb:66:a7:47:5e:a7:c7:7e:29:
30:82:9d:42:0c:19:59:a5:18:62:eb:d8:6d:c5:24:
ed:e2:a9:35:99:53:1a:74:0b:b1:f1:69:70:26:d3:
cc:ce:42:d7:3f:9c:92:36:05:30:9c:2e:11:e3:43:
dd:de:9c:35:9d:13:b3:3d:fc:29:57:aa:0c:c3:b8:
5f:77:13:cd:47:ab:84:e8:ec:b2:8c:43:7b:ad:a3:
80:25:b7:cb:0c:92:56:62:50:e7:60:7b:42:dd:7a:
b3:61:6a:a5:aa:79:6c:33:21:86:3b:54:a7:ef:e4:
d4:de:2a:98:eb:dd:2c:a0:8a:f5:d8:37:3c:7c:f1:
7c:95:60:b0:ba:8c:40:b3:e1:cd:38:03:86:8f:69:
95:be:37:e1:2d:a7:d6:bf:a1:47:e5:53:b7:99:5d:
9c:21:44:fe:e6:51:43:9f:33:2a:9c:7e:67:46:89:
ac:f1:42:6e:1b:9f:0f:e1:fd:42:38:9c:53:b7:a9:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:FC:3C:66:4F:E1:67:42:25:54:64:D4:00:70:9F:11:7B:15:C8
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.0.0/21
212.25.192.0-212.25.209.255
212.25.212.0/23
212.159.192.0/18
Signature Algorithm: sha256WithRSAEncryption
73:01:77:0f:00:de:4f:a9:52:70:19:b6:3b:6b:ee:a9:a6:38:
51:cb:3d:74:02:22:85:d9:d9:97:4b:de:0e:63:81:a2:3c:51:
1d:21:18:2a:82:d4:ae:40:a3:54:a6:bd:17:6d:f1:07:d9:37:
83:24:de:bd:b3:6a:c1:c1:79:d1:54:bf:fa:6a:96:10:db:67:
a6:36:46:f0:a0:41:95:95:f2:3d:b7:e9:28:51:a0:7c:df:4e:
36:e9:48:32:88:bc:92:1d:4a:66:02:a3:9a:d5:bf:2a:4e:90:
b7:60:09:7d:dd:8a:af:59:b0:19:b3:85:67:7a:fe:28:dc:78:
4a:47:db:eb:0d:c0:4b:b4:55:f9:2b:29:91:61:29:d8:a0:38:
37:5f:97:ef:a4:1e:ce:95:02:b8:e9:fe:a1:aa:86:34:14:2d:
ca:4f:d5:46:c1:49:80:b6:76:42:e3:21:e6:c5:08:c8:04:c2:
b4:e8:d2:91:73:dd:c7:ff:24:33:47:01:99:c8:d2:ef:30:d5:
88:6d:d6:f2:a1:9a:b1:89:08:45:e8:02:f4:5d:e4:fe:7d:bc:
2f:44:0b:34:66:22:4c:20:43:4f:03:5e:ff:23:51:e5:90:13:
b7:51:0e:ad:cb:0e:58:f5:6e:4f:eb:b9:3f:f8:13:29:2a:e6:
d3:cf:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:28 2025 by rpki-client