Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/MLMPGj8H9Pi_UwBtlTfByiigjfM.roa
File: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (raw, json)
Hash identifier: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=
Subject key identifier: 30:B3:0F:1A:3F:07:F4:F8:BF:53:00:6D:95:37:C1:CA:28:A0:8D:F3
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 0194228E0D9EC16A5FD9FA3691C85D3A4A8C
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/MLMPGj8H9Pi_UwBtlTfByiigjfM.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44877
IP address blocks: 139.45.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0d:9e:c1:6a:5f:d9:fa:36:91:c8:5d:3a:4a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b30f1a3f07f4f8bf53006d9537c1ca28a08df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:1e:ad:87:e9:f8:c3:6d:a0:f9:de:45:60:
7f:0e:07:07:a6:74:01:44:d9:aa:12:c8:96:72:d7:
4c:73:1f:dc:ee:91:cf:2a:08:cf:57:8d:0a:99:60:
4a:b3:cb:51:e5:ba:e1:c5:79:0d:99:d0:83:e7:c4:
d0:65:8f:8c:61:a9:f5:20:c9:24:e4:e6:35:0a:27:
cb:97:74:9b:91:40:e0:dd:da:dd:c5:20:7d:8e:fc:
33:ba:77:f7:c3:9f:ba:b6:ec:67:c9:5b:bb:9b:c7:
ba:a3:58:0b:c9:a6:30:16:2b:96:20:fd:73:b4:2a:
c4:9f:cc:d6:ec:ca:4c:a1:84:39:13:52:5b:6d:54:
ef:1c:b2:42:a4:11:3d:b9:6c:32:a2:0d:9b:37:63:
10:dc:ce:e3:b6:0f:29:2e:7e:22:57:52:15:92:11:
6e:7a:92:dd:e2:ec:bd:a0:91:cb:b4:92:1c:fa:81:
56:61:f4:13:22:64:00:51:8c:75:ff:13:4d:b0:ac:
a0:fd:9a:f7:2b:e0:da:26:82:bf:0b:0e:cb:53:d2:
e7:7a:78:48:6f:10:40:29:2d:20:fe:31:8c:7c:62:
15:8e:be:ea:8c:28:50:fc:e4:ba:32:3d:c7:1b:9a:
5b:3f:b2:29:6a:cc:c6:6a:77:19:2d:33:03:35:26:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:0F:1A:3F:07:F4:F8:BF:53:00:6D:95:37:C1:CA:28:A0:8D:F3
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/MLMPGj8H9Pi_UwBtlTfByiigjfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.45.211.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9c:0c:c1:9b:bd:e4:21:09:64:66:fd:1f:e7:9c:f1:6b:4e:
e2:de:be:8e:a1:e5:4f:92:65:e4:f0:03:c9:ba:70:1f:82:0d:
d5:aa:96:d4:ea:23:83:ef:58:3d:5b:33:fa:c0:d0:87:c5:37:
2b:7f:2d:a2:5c:a0:cb:54:40:56:39:19:1d:39:08:2a:b7:2d:
ed:c5:6a:62:ef:c7:85:33:9f:f3:0d:f1:9f:5c:5a:c2:c2:ea:
50:02:99:73:3e:36:0f:93:94:4c:0d:62:25:70:a2:c9:69:3b:
1d:f3:a7:19:9d:46:4d:94:53:ef:8b:f8:94:7d:75:7c:7c:e2:
7f:07:ec:bc:95:2d:ad:01:e5:92:e9:fe:28:6e:bc:a0:c8:1e:
73:b4:2a:94:89:35:12:af:8f:bf:13:c1:64:a8:15:62:1f:3e:
6c:08:0f:e3:6d:4f:20:c6:82:8a:ed:46:25:92:ff:87:85:df:
a4:fe:51:12:ae:e3:5e:fe:10:04:62:aa:34:63:0e:b0:f4:02:
06:c1:43:c4:97:1d:d5:88:6a:b5:d2:35:08:65:57:09:ca:54:
78:bb:d6:b3:34:36:ad:90:d8:7f:82:95:a2:dc:a0:33:5b:6b:
ea:5c:30:46:46:4d:ef:21:45:62:d8:33:41:3c:76:d7:a5:1c:
c1:d6:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:17:42 2025 by rpki-client