Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/mMGXQdchjm-1k_0cqBgKyEDxRR4.roa
File: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (raw, json)
Hash identifier: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=
Subject key identifier: 98:C1:97:41:D7:21:8E:6F:B5:93:FD:1C:A8:18:0A:C8:40:F1:45:1E
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B20C30BDBFB8C72CF37E5712711D22
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/mMGXQdchjm-1k_0cqBgKyEDxRR4.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210993
IP address blocks: 95.181.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0c:30:bd:bf:b8:c7:2c:f3:7e:57:12:71:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98c19741d7218e6fb593fd1ca8180ac840f1451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:23:d0:a5:31:ec:01:b5:97:5a:e5:1a:7d:
e3:44:7e:b6:24:e1:d0:6e:1e:9c:ee:ab:06:4f:b3:
d1:6d:5c:a2:9f:60:c7:7d:87:c4:b4:ad:e7:f1:e7:
6d:4e:0e:9a:f3:62:c6:6a:71:76:2b:3d:d5:e1:14:
e2:b8:11:07:6e:8b:90:75:35:95:8d:50:91:dd:ee:
6f:b0:de:84:ba:5a:d8:91:9e:44:78:ae:20:12:ca:
8d:86:2d:c5:46:b5:7f:e9:94:46:1b:a5:29:10:80:
12:09:55:60:95:64:4b:52:bc:30:d7:7c:13:6d:1b:
ab:b8:f3:2a:ba:5d:de:5b:ba:26:58:fd:44:b4:f8:
9e:cc:58:85:6d:63:4e:4e:4f:64:47:52:c7:66:2c:
9d:75:ae:14:cb:af:58:87:3b:b8:7f:1d:8b:e7:0f:
09:61:bb:87:0c:42:eb:a7:92:6a:d4:a2:09:be:68:
2b:fc:33:e4:ec:e4:a5:dc:84:0f:3e:91:ff:7d:8d:
59:2a:67:98:c6:fb:68:16:26:6e:21:9e:07:6e:0f:
79:86:53:00:52:b1:26:8e:35:85:91:5f:7d:8d:9f:
c6:40:d6:de:3e:60:c5:13:b8:c4:6c:1c:b3:b6:1d:
1d:39:15:f0:0a:d1:68:0e:60:79:57:67:0a:2f:d2:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:97:41:D7:21:8E:6F:B5:93:FD:1C:A8:18:0A:C8:40:F1:45:1E
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/mMGXQdchjm-1k_0cqBgKyEDxRR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:19:ae:8b:55:05:49:a2:93:81:97:6b:b9:9a:fb:db:3c:6b:
8c:8d:78:ff:1f:71:0f:7a:15:70:43:3d:93:59:2d:fa:6c:25:
bc:0e:21:47:16:18:cb:05:64:4b:5d:63:cf:79:9f:3d:6e:d0:
92:e3:32:3a:0f:ba:bc:54:fe:76:66:4a:73:5f:96:a6:ca:ec:
8b:ec:9d:f9:e8:78:b9:ff:92:0e:6d:7f:22:56:ca:ad:09:e8:
3d:21:37:f3:f6:3a:2d:85:9e:a0:97:2e:ea:36:d3:16:f7:35:
53:c8:23:ea:5b:b2:09:94:5f:cd:f5:b8:22:3f:fe:3c:00:37:
60:b3:57:fc:44:6f:07:25:b6:a2:6c:99:e6:7c:e4:27:d8:e3:
14:6d:a8:f0:55:46:fc:03:8f:fd:21:df:c7:2e:e2:47:ee:98:
b7:85:a0:1c:a5:80:3d:2d:e8:85:fd:2e:8e:09:5e:34:6b:f1:
3f:25:7e:dd:b7:54:54:4f:a6:70:9e:1e:41:67:8e:ce:f0:62:
db:ee:b8:eb:c7:43:0d:80:99:a6:8c:0c:69:ef:7e:99:f2:81:
b0:ba:42:b7:20:fa:ff:22:8a:6f:b5:34:34:60:6c:2f:1a:13:
a9:5a:29:f2:e5:a3:8a:1c:e9:10:0e:bc:06:09:e4:08:3e:8b:
53:1c:59:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:23 2025 by rpki-client