Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mJxpqxc--vA7_RPIQKUf3sOttPg.roa
File: mJxpqxc--vA7_RPIQKUf3sOttPg.roa (raw, json)
Hash identifier: vQVpM/YW1rlvJH/D3bzuechoRLZPKy9EC76Um/rUIV8=
Subject key identifier: 98:9C:69:AB:17:3E:FA:F0:3B:FD:13:C8:40:A5:1F:DE:C3:AD:B4:F8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01963A6B4531FB8368C14F441706E03AE2B2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mJxpqxc--vA7_RPIQKUf3sOttPg.roa
Signing time: Tue 15 Apr 2025 17:07:10 +0000
ROA not before: Tue 15 Apr 2025 17:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49334
IP address blocks: 31.210.34.0/24 maxlen: 24
31.210.52.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
78.135.65.0/24 maxlen: 24
188.132.131.0/24 maxlen: 24
188.132.173.0/24 maxlen: 24
188.132.181.0/24 maxlen: 24
188.132.182.0/24 maxlen: 24
188.132.187.0/24 maxlen: 24
212.68.53.0/24 maxlen: 24
212.68.54.0/24 maxlen: 24
212.68.62.0/24 maxlen: 24
212.68.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:6b:45:31:fb:83:68:c1:4f:44:17:06:e0:3a:e2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 15 17:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=989c69ab173efaf03bfd13c840a51fdec3adb4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:f3:8d:00:07:86:45:dd:a4:ee:12:4e:32:
9a:5e:5d:39:d5:3a:3d:8b:ed:a3:09:a7:3d:0b:47:
3a:14:a8:44:52:d9:00:d0:56:3a:bd:6e:41:76:36:
97:45:26:2e:fa:69:16:be:ee:a7:68:ed:6f:3c:bf:
ff:d6:71:cf:6a:4c:b3:79:17:f3:8f:eb:29:9d:a4:
4c:29:78:97:93:24:67:37:fa:18:78:df:c5:35:fd:
d8:21:7a:bd:d1:c7:4b:23:f3:22:15:bf:0a:f2:9d:
11:26:eb:36:38:7a:83:cc:7f:1b:9f:fb:e0:21:f2:
53:5f:78:a9:dc:b8:e4:06:0b:0d:57:7f:65:a8:40:
9c:12:ba:dc:10:44:7a:e0:b6:51:7a:6c:67:c1:0c:
af:8e:78:61:96:96:e8:3f:f9:94:49:dd:33:d4:7d:
22:f3:ab:31:06:32:35:67:d3:e1:36:e2:35:e3:8e:
83:47:2c:77:af:f1:9b:3c:9f:77:26:33:4d:90:64:
75:30:bf:6f:e6:09:1d:12:55:f0:1c:e6:eb:dc:bd:
f5:01:71:ec:e4:a3:79:c3:24:3e:55:6e:e8:a0:0f:
55:b0:d4:04:e2:26:30:7f:f9:9c:1c:03:68:a5:c0:
4b:56:61:53:5a:51:e7:e6:88:31:2b:d3:73:e2:d1:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9C:69:AB:17:3E:FA:F0:3B:FD:13:C8:40:A5:1F:DE:C3:AD:B4:F8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mJxpqxc--vA7_RPIQKUf3sOttPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.34.0/24
31.210.52.0/23
78.135.65.0/24
188.132.131.0/24
188.132.173.0/24
188.132.181.0-188.132.182.255
188.132.187.0/24
212.68.53.0-212.68.54.255
212.68.62.0/23
Signature Algorithm: sha256WithRSAEncryption
23:0a:cc:16:af:ab:66:c7:4d:ab:b9:06:ec:29:ab:b5:4a:32:
28:7f:87:bc:83:60:c2:ad:2b:31:ac:fc:0e:28:25:90:47:a4:
01:5a:9f:6a:53:6e:ec:f3:b7:7e:6f:88:6d:f1:97:07:e4:f4:
f6:8f:a3:f9:e3:3e:a9:d3:8f:b7:2a:8a:57:7b:b6:4c:0b:0b:
6f:a9:6a:6c:e0:18:7c:76:9a:b0:bd:9b:56:20:dd:07:12:e8:
40:35:75:3d:1d:a8:48:19:2c:22:ea:a9:ff:7a:8c:58:79:22:
02:37:de:12:8c:09:24:e5:a7:0d:35:ea:0f:0a:d9:4f:0f:a3:
bc:d3:69:76:3d:c8:e5:3b:63:c4:d5:7a:48:a9:42:04:62:60:
93:e7:23:8c:c3:da:28:69:02:a0:d0:cb:f4:76:51:f9:8b:f3:
c9:bf:a2:37:d0:1e:cb:d5:cf:d9:ca:a6:ce:1c:a8:fd:63:59:
26:01:cd:5e:50:1a:13:2b:b3:e2:56:65:3c:aa:ff:25:e8:d1:
9d:4b:9d:f0:94:e6:3e:df:50:f2:44:20:dd:db:09:0f:c0:9c:
83:5d:be:26:aa:91:07:16:0d:63:5c:c0:f2:3f:bb:07:d7:17:
6d:af:5c:83:a0:b4:aa:2c:42:a5:51:45:9a:b4:85:af:de:f7:
fa:0e:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:31 2025 by rpki-client