Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa
File: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (raw, json)
Hash identifier: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=
Subject key identifier: 98:83:E3:1F:21:E0:C7:B1:09:7A:2A:0E:13:84:38:3F:83:2A:6E:DF
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01951969C8EAD428D3986247744C71FCCC55
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa
Signing time: Tue 18 Feb 2025 14:15:17 +0000
ROA not before: Tue 18 Feb 2025 14:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 84.252.100.0/23 maxlen: 24
85.8.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:69:c8:ea:d4:28:d3:98:62:47:74:4c:71:fc:cc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Feb 18 14:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9883e31f21e0c7b1097a2a0e1384383f832a6edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:2d:8e:a8:da:fa:dc:93:a7:79:71:ad:47:
2f:68:c9:97:45:cb:b9:9a:a4:8b:0c:1b:2f:73:15:
9b:08:0a:08:a7:e5:94:10:16:3d:48:38:e1:09:9d:
62:46:d3:64:02:d1:19:a8:cf:be:99:30:73:bf:1f:
25:7f:b8:9f:42:fb:46:08:d5:4a:65:58:7b:af:d1:
62:d9:c2:52:e4:a7:7c:3e:54:3c:74:94:66:1e:f3:
b9:b4:dd:84:ce:3b:01:00:8f:ce:f4:d7:0d:9d:db:
d6:ae:db:b6:02:a6:96:c5:79:36:e9:a5:06:1a:3b:
12:93:d1:f0:1e:dc:1b:cc:a7:1d:19:1b:95:a1:38:
3e:91:5c:b6:44:f1:78:08:68:76:0a:9a:26:52:9c:
da:98:87:a9:14:94:77:b3:d4:43:ff:05:8b:93:1e:
ec:8f:64:ac:53:6c:9c:52:38:8d:60:21:fd:ac:e7:
fb:67:78:48:fd:65:49:a6:06:f3:a1:4e:7e:4d:55:
09:49:16:bb:9f:12:7b:1d:ae:26:27:e6:a0:35:b1:
39:06:1e:c4:aa:0c:0d:07:6d:ad:8c:c5:be:75:40:
63:92:dd:61:2a:b7:03:55:de:0c:cd:84:fc:9c:49:
e8:8e:73:55:0a:e9:54:f3:83:a4:1c:e1:b6:b4:cc:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:E3:1F:21:E0:C7:B1:09:7A:2A:0E:13:84:38:3F:83:2A:6E:DF
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.100.0/23
85.8.182.0/23
Signature Algorithm: sha256WithRSAEncryption
46:32:82:cd:f0:46:07:b4:e3:89:88:97:be:9e:75:f4:01:c5:
9b:ec:59:c6:70:26:eb:6f:b1:c2:b8:ec:00:e2:50:cb:93:4c:
03:7a:00:6c:a2:a6:31:e7:75:83:5a:14:9e:06:ca:30:16:19:
81:f2:c3:2b:0c:14:b2:92:d9:00:95:cd:71:a5:f3:bf:c2:1e:
37:36:4c:5d:03:2d:9a:d4:a7:7f:c6:be:43:f8:4d:9c:f2:82:
a9:5d:ec:b5:15:d1:50:cf:96:13:a4:da:08:ff:9f:8f:c9:e6:
24:79:b6:47:a1:83:c6:1c:92:92:99:1a:36:1f:29:06:5f:07:
d6:df:2f:15:22:5b:17:99:c1:35:e5:fe:29:e4:a7:83:08:78:
47:7d:6b:f7:05:f0:fb:b7:fd:56:eb:1e:83:05:62:51:c6:b4:
9b:dc:1e:af:f1:57:89:fb:de:39:f5:d7:a9:05:83:fa:81:47:
89:3f:da:ad:07:f8:91:0c:79:29:d0:3d:16:b5:74:d5:e9:e1:
9d:70:9c:01:8e:b7:09:59:4b:8a:49:96:e7:18:3b:0a:81:fe:
6b:83:2e:4a:bb:d3:de:5b:a4:6f:05:bf:36:8b:e3:da:62:55:
9e:a3:f6:05:a9:da:fa:80:ae:1f:d6:0c:d8:21:b6:ef:85:a6:
7b:1e:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:11 2025 by rpki-client