Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MjDsJvHhPYcNJ1i6i4FRI6GSr34.roa
File: MjDsJvHhPYcNJ1i6i4FRI6GSr34.roa (raw, json)
Hash identifier: SriE0lZpbT0sWXfNJ3zvNyPQTD9e4OC4IjIZNlZrcBA=
Subject key identifier: 32:30:EC:26:F1:E1:3D:87:0D:27:58:BA:8B:81:51:23:A1:92:AF:7E
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC13B0FD03444358F241ABCA59512A
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MjDsJvHhPYcNJ1i6i4FRI6GSr34.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198636
IP address blocks: 2.57.152.0/22 maxlen: 24
2.59.204.0/22 maxlen: 24
45.88.124.0/22 maxlen: 24
45.150.44.0/22 maxlen: 24
171.22.52.0/22 maxlen: 24
194.50.184.0/23 maxlen: 24
194.50.188.0/23 maxlen: 24
195.216.156.0/22 maxlen: 24
212.90.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:13:b0:fd:03:44:43:58:f2:41:ab:ca:59:51:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3230ec26f1e13d870d2758ba8b815123a192af7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:af:37:70:25:8e:7d:d4:86:73:48:31:cc:
a7:e5:f6:ba:c8:1a:a0:82:a6:d3:6d:f3:76:58:cb:
67:ee:8b:71:c5:4c:18:c7:44:73:41:20:be:97:19:
58:8f:92:69:7f:2e:dd:75:c1:e6:21:8c:9b:da:72:
c1:83:50:44:4c:bc:d4:98:56:f6:fe:64:7f:a4:73:
f8:1d:43:30:65:a9:be:c0:44:59:97:04:9d:0d:6d:
be:74:48:05:41:18:36:7b:68:b3:75:0f:d3:1a:9c:
35:d9:f4:dc:6a:df:3c:87:f9:41:bd:ce:bc:81:fa:
88:64:fd:c2:53:42:2b:7f:c4:87:63:c0:94:04:8d:
a1:ce:8c:0c:04:46:72:1f:95:a9:90:ed:fd:29:ae:
fc:28:1a:ac:37:fa:66:d7:f5:c1:ac:91:ea:11:93:
64:e6:67:36:d1:37:da:60:e4:41:7c:b8:08:a1:9c:
32:e5:3c:11:ed:51:c3:84:6a:71:39:a7:d0:89:3f:
bc:f2:8c:2b:e7:b4:7c:1a:b8:3c:62:cd:43:80:d8:
b0:81:34:a5:03:b2:fb:16:c2:7e:1a:a2:e4:c9:0a:
b4:22:65:2b:3f:2d:e6:22:d8:1e:96:95:3c:38:01:
52:7e:f9:b3:b1:2b:9b:ba:71:29:99:7c:d4:0b:ff:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:30:EC:26:F1:E1:3D:87:0D:27:58:BA:8B:81:51:23:A1:92:AF:7E
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MjDsJvHhPYcNJ1i6i4FRI6GSr34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.152.0/22
2.59.204.0/22
45.88.124.0/22
45.150.44.0/22
171.22.52.0/22
194.50.184.0/23
194.50.188.0/23
195.216.156.0/22
212.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:b0:3b:60:d9:b2:33:9d:8f:36:f0:85:77:e0:6a:9f:4a:8e:
fb:b6:08:f9:d7:32:0f:48:78:7a:21:17:a1:fe:fb:d3:a1:65:
9b:b7:96:6a:41:17:c7:a2:80:b3:9a:51:e7:77:e4:85:9d:49:
bd:87:d7:c2:47:86:25:f1:5c:85:4b:4b:f3:fc:c5:7e:fe:17:
1d:b3:a2:e4:d2:5a:9e:21:56:68:32:3e:a5:be:87:10:2b:2e:
80:60:70:25:89:8c:2b:41:e1:3b:c5:1b:df:ef:91:e2:33:7c:
d1:8a:35:3f:59:f7:d5:00:63:f6:12:9e:99:99:a7:7f:fd:15:
98:48:aa:f7:d7:b6:d8:7a:6b:56:ca:ac:da:fd:b1:07:62:ea:
80:c1:e2:87:96:06:82:8a:55:f2:37:41:86:ca:46:06:b7:05:
34:b5:21:f3:74:7f:83:c7:14:3c:05:b2:f3:ae:49:02:06:27:
5c:33:0a:33:b0:24:a9:0f:7c:8c:67:9b:88:2a:4b:fb:5a:fc:
fa:6c:b8:cd:83:90:e0:ca:55:9a:e4:81:e5:41:26:b5:b4:f1:
23:80:9e:c8:d8:1e:9b:49:87:de:24:09:0b:d8:c1:d2:2a:9d:
79:9c:ae:58:b5:bb:e4:2a:2f:da:97:ff:92:05:69:fe:bb:3b:
38:b5:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:45 2025 by rpki-client