Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/MJMdhZnjDE7HHdif7jOifgXeBWw.roa
File: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (raw, json)
Hash identifier: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=
Subject key identifier: 30:93:1D:85:99:E3:0C:4E:C7:1D:D8:9F:EE:33:A2:7E:05:DE:05:6C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 0194258F0F37425910B2D13FC626D3BBE8A1
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/MJMdhZnjDE7HHdif7jOifgXeBWw.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1942
IP address blocks: 45.149.140.0/22 maxlen: 22
160.103.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0f:37:42:59:10:b2:d1:3f:c6:26:d3:bb:e8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30931d8599e30c4ec71dd89fee33a27e05de056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:fb:bc:ca:92:65:76:7c:33:6f:15:c1:22:
0d:ff:e1:e0:af:35:6e:0d:10:07:50:c2:e0:4e:fd:
02:47:7f:e6:ab:ce:56:4c:c2:b6:b2:e3:0c:d7:6c:
5a:c8:41:f4:f2:11:66:28:87:c5:76:4c:88:f3:f5:
38:54:29:2d:57:0f:47:db:40:4d:27:62:ba:0e:ff:
8f:67:83:6a:0f:bb:59:4e:96:58:0b:c0:76:02:3b:
6f:26:1d:49:c3:99:29:6d:c1:95:b2:6b:83:32:48:
fc:64:2e:2c:e7:d8:dc:dc:75:e3:3d:9e:f1:6b:4c:
9f:22:08:52:00:0a:1b:be:f4:22:31:3e:8e:90:45:
f9:d6:3b:0c:d8:f8:e3:94:5a:27:7b:60:c2:33:08:
12:a5:9e:dd:39:b3:c8:4a:fa:b1:b8:07:97:f4:61:
7f:aa:4a:c3:4d:e6:95:a4:49:ea:54:0f:f8:f4:b0:
f3:09:42:45:fb:96:ae:92:39:13:c6:94:43:c8:d1:
a5:c9:ab:3c:df:08:86:4d:6a:c3:50:67:d4:55:97:
5e:2a:31:99:63:72:73:87:fe:d9:c0:4c:af:2f:32:
0a:46:cb:85:ef:bb:d2:73:f3:cb:c0:a6:16:90:21:
b8:7d:de:35:12:26:39:1c:a0:17:cc:c6:b2:9e:fd:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:1D:85:99:E3:0C:4E:C7:1D:D8:9F:EE:33:A2:7E:05:DE:05:6C
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/MJMdhZnjDE7HHdif7jOifgXeBWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.140.0/22
160.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:e7:91:f6:73:09:af:ab:99:46:61:c4:bf:bb:18:91:85:71:
14:71:a3:1c:8e:2d:b6:20:2c:eb:52:b8:99:9e:75:33:da:a9:
04:0d:32:96:39:0c:7b:d2:2c:e5:00:89:9a:3e:51:30:3b:22:
50:04:78:70:a9:f4:67:2f:20:86:c8:73:ef:4e:cd:3f:ec:74:
65:08:84:15:fc:79:8d:ed:fd:b3:73:d6:53:e5:dc:60:db:c0:
05:9c:35:8b:29:f8:7e:8c:02:80:0a:bf:2f:3d:a9:bc:9b:c9:
ea:6e:bd:75:97:07:77:18:81:64:1b:0c:cb:83:ec:0b:24:76:
3c:4f:83:8d:03:f3:02:75:66:64:d8:23:55:48:77:68:20:ae:
7d:b3:6d:7b:4c:61:36:d0:4f:b6:55:38:a5:ed:24:e3:12:1c:
96:1c:fe:b6:9f:45:9e:2e:a5:a7:b8:09:c8:69:25:2d:8a:6d:
d0:fd:70:83:ad:f8:26:2a:60:ed:4a:c0:80:af:c3:b8:b3:08:
d7:37:4a:a8:d8:dc:20:e1:33:25:e3:75:bb:64:78:22:d6:40:
58:a7:19:42:66:f3:5f:db:94:ab:bb:88:d5:a5:75:25:f2:12:
0f:85:a4:39:18:2d:1a:99:d1:d9:97:23:f4:87:de:1e:98:02:
98:a8:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:16:08 2025 by rpki-client