Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mOjHMHlJNxxJBysxWsOSgCfJbsA.roa
File: mOjHMHlJNxxJBysxWsOSgCfJbsA.roa (raw, json)
Hash identifier: VQ2RDJHlSUvA0D8d5A3JuXxTffzuCIHvTqw3n6jvJDg=
Subject key identifier: 98:E8:C7:30:79:49:37:1C:49:07:2B:31:5A:C3:92:80:27:C9:6E:C0
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F977ED5A6BEEE790623CA0914861
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mOjHMHlJNxxJBysxWsOSgCfJbsA.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 185.242.108.0/22 maxlen: 22
194.15.150.0/24 maxlen: 24
212.52.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f9:77:ed:5a:6b:ee:e7:90:62:3c:a0:91:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98e8c7307949371c49072b315ac3928027c96ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:cd:67:24:d0:42:c2:98:1e:03:77:6d:dc:
63:65:37:49:33:c5:c8:01:42:28:67:eb:18:da:2b:
bf:fd:c2:8b:ae:fa:8a:62:0a:cc:91:48:1d:51:5f:
6f:db:b9:d5:6d:c3:80:68:92:68:79:c5:8e:d3:9b:
57:d2:0e:16:9b:7a:42:a1:09:3c:85:24:aa:87:84:
36:b0:85:d3:2b:0b:ee:dc:a8:4c:2e:7a:7d:c1:0b:
c7:54:5f:7c:1a:8b:e4:8c:16:0e:25:08:83:c1:62:
11:6a:c9:1c:73:b3:e3:ea:7b:a1:ee:9e:97:80:88:
b7:24:e9:61:69:e1:4a:a8:99:84:29:37:9d:87:83:
96:4a:6d:98:f7:b4:3f:30:e5:6b:8e:28:2f:63:44:
8d:8b:27:5c:18:c1:2e:39:56:de:e9:7c:e2:f8:b7:
6a:49:a9:8c:01:3e:87:27:b2:df:92:bb:51:6c:82:
02:a1:6c:1e:13:7a:cd:7a:73:f7:a1:cf:a9:f7:c2:
fe:05:9a:e6:42:35:3d:cb:c5:1c:1b:61:d7:a0:53:
f1:f4:bb:8c:a7:93:3a:25:29:64:8c:84:94:9d:1f:
11:dc:6b:0f:4b:37:de:22:96:54:22:88:f5:d7:8d:
0b:eb:4f:63:64:0f:cc:1e:09:aa:14:ee:4f:be:63:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E8:C7:30:79:49:37:1C:49:07:2B:31:5A:C3:92:80:27:C9:6E:C0
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mOjHMHlJNxxJBysxWsOSgCfJbsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.108.0/22
194.15.150.0/24
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f6:a5:f2:db:c2:86:1f:7a:b5:b3:f9:f0:67:09:91:cd:c1:
fb:9d:33:48:3d:31:fc:74:22:29:e0:73:b4:91:c7:bc:d0:f2:
86:83:9c:22:89:70:af:92:4b:ae:de:0a:b3:23:56:81:7b:1b:
07:72:c3:16:b1:10:fd:cc:38:47:e9:4e:20:e8:e2:94:85:84:
bf:79:9d:18:49:35:1b:d7:07:ea:aa:16:97:d0:48:ef:47:7c:
d4:d0:04:4b:b2:ab:fc:a3:1d:a8:d8:05:5c:50:7e:87:e5:e2:
58:a4:e3:44:90:9f:71:f2:c2:ea:6a:87:8a:b5:a5:ea:af:bd:
c8:97:bb:7c:f7:b4:58:88:92:c4:d6:96:48:08:f3:0e:c6:1c:
5e:56:06:f0:1b:d9:49:0e:73:bc:23:55:71:dc:37:3f:e0:94:
95:c8:1c:5b:11:81:16:4c:a8:8d:e9:30:90:e9:3e:21:4b:9a:
05:d9:d6:65:b5:fa:67:2b:3c:58:49:0d:2d:71:50:ad:88:bd:
7e:12:7c:6b:a8:b0:f2:1e:3a:e1:b2:fb:40:a8:4f:fb:27:36:
7e:2b:c0:c7:32:27:b3:fc:35:4e:3f:37:c9:74:5c:21:07:29:
fa:a7:e3:9d:cd:a8:25:95:44:e9:f4:f9:36:21:f2:f8:15:ca:
f9:94:ce:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:55:56 2025 by rpki-client