Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MjKZrafSIm7TV8yanRgSfGhY2pU.roa
File: MjKZrafSIm7TV8yanRgSfGhY2pU.roa (raw, json)
Hash identifier: Yww0N6pTISvOfcVEdc2oFg30SKebG8XeTy8TeW7OZiY=
Subject key identifier: 32:32:99:AD:A7:D2:22:6E:D3:57:CC:9A:9D:18:12:7C:68:58:DA:95
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBBA2B3F2A40F968E90CF38D571C2
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MjKZrafSIm7TV8yanRgSfGhY2pU.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 193.93.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bb:a2:b3:f2:a4:0f:96:8e:90:cf:38:d5:71:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=323299ada7d2226ed357cc9a9d18127c6858da95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:d1:3f:9f:5e:36:74:3e:ad:b4:1f:dd:7d:
fd:fc:35:04:ab:ca:5e:a8:61:4b:c3:73:7c:77:91:
62:01:21:09:c4:4a:18:f1:78:e9:d4:8b:70:84:d9:
aa:c0:c9:29:70:50:56:8d:ba:c3:77:d0:fa:06:15:
93:e3:fb:bd:42:33:8c:8b:4a:56:fb:0b:b3:c7:45:
76:24:5c:66:3b:90:03:14:b2:38:5c:d1:ac:47:42:
5e:4d:4c:1a:8a:36:f9:1c:72:75:91:71:82:28:8a:
0b:ae:33:6c:c5:72:d4:10:bd:c7:9a:3e:89:c5:8d:
ed:ee:ee:78:16:15:2f:e9:3d:1b:af:a7:f2:7e:a1:
20:fe:9f:80:9b:7b:03:6b:4c:1f:01:8e:75:88:ce:
6c:6d:07:8d:eb:67:98:b5:e9:dc:d5:32:5f:e3:3c:
7f:6c:6e:79:d6:3e:f4:b5:4c:1e:65:e7:07:5b:25:
32:c5:81:a1:22:90:37:c2:e1:12:af:fd:39:05:f5:
b1:03:4d:7f:89:75:fd:62:09:06:c0:2a:fa:ec:17:
bf:55:1b:29:b8:ee:4b:8c:c1:b8:69:ef:dd:1c:0c:
1e:44:97:0d:db:75:64:09:d5:e6:69:89:20:54:64:
32:0e:59:89:81:6f:bf:09:90:b5:0c:53:6b:a8:27:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:32:99:AD:A7:D2:22:6E:D3:57:CC:9A:9D:18:12:7C:68:58:DA:95
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MjKZrafSIm7TV8yanRgSfGhY2pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
31:93:63:52:22:04:23:ef:65:6c:cf:c1:66:4e:49:c8:35:1c:
c2:e3:7e:37:34:59:5b:77:09:ae:c3:e1:f9:b4:51:9d:09:80:
e2:dc:e3:68:be:b6:7f:3d:ff:64:0c:73:46:9e:36:62:1a:23:
cb:20:6e:87:37:ce:fe:f1:7a:b2:bd:1e:9d:37:2e:3f:b1:76:
32:dd:e6:c0:93:76:27:7f:f8:bb:15:a4:51:28:6f:58:b2:30:
3a:ab:f1:5c:65:76:30:7e:b1:b7:34:6a:6f:4f:06:2e:b0:4b:
4a:4c:a2:96:cb:3e:42:53:2e:32:35:f1:22:3c:d7:cb:87:ae:
c9:eb:4f:5f:4f:d5:bb:b8:cb:47:67:d0:5b:6b:87:2a:68:68:
e6:db:c6:d6:e1:c2:00:b6:a5:6b:29:3e:ce:05:cc:47:69:13:
4a:72:0b:93:d2:4f:a7:56:62:65:c7:72:e5:69:72:e6:71:cf:
17:bf:43:5c:48:71:81:d1:65:b9:f0:7f:70:41:d9:13:9b:53:
5d:1c:d9:52:32:d1:c9:63:5c:05:d6:95:ec:f3:3e:36:9c:1c:
a8:f5:91:85:db:db:5e:bc:7b:48:98:98:c0:b1:1f:de:e2:b5:
40:c8:b5:a4:e1:89:4e:aa:b5:49:54:ad:e6:a8:2e:d4:06:b8:
ce:42:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:41:30 2025 by rpki-client