Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mpPMLB1z0Y_AO5QfrniqGlCQzCI.roa
File: mpPMLB1z0Y_AO5QfrniqGlCQzCI.roa (raw, json)
Hash identifier: dOjT8Od0bBPEaUyU+BXVNVXuGQaWItlElEC0sVbHfKw=
Subject key identifier: 9A:93:CC:2C:1D:73:D1:8F:C0:3B:94:1F:AE:78:AA:1A:50:90:CC:22
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A655216EF65AA0E900397F321261
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mpPMLB1z0Y_AO5QfrniqGlCQzCI.roa
Signing time: Thu 02 Jan 2025 13:48:49 +0000
ROA not before: Thu 02 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200673
IP address blocks: 78.135.64.0/24 maxlen: 24
188.132.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a6:55:21:6e:f6:5a:a0:e9:00:39:7f:32:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a93cc2c1d73d18fc03b941fae78aa1a5090cc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:e6:fd:25:d1:c2:c4:e5:ff:86:df:b8:97:
51:7d:7c:a5:85:c5:77:4d:38:67:b5:2c:c6:30:c9:
9a:0a:11:27:0e:64:ce:63:e4:cc:7e:11:2d:2f:fe:
ab:e1:de:56:7b:2a:2b:19:af:32:6e:d9:9f:86:03:
e1:27:38:c9:92:96:06:79:dc:65:0b:ba:24:c7:63:
4a:e8:ec:51:9c:fe:db:da:2b:4a:06:a5:a6:85:33:
0b:9e:d1:bf:9a:bf:7d:fd:25:97:78:92:82:91:97:
67:de:c3:ea:f7:39:a7:53:e8:77:b2:25:c8:55:9c:
b5:ac:b4:e2:15:eb:7c:b0:c9:c0:83:69:8f:f5:85:
8f:57:b0:1a:28:7f:e2:56:75:fb:84:ba:2e:24:4d:
fe:2a:2d:b2:54:9e:d7:12:35:dc:b5:03:1a:9a:a6:
61:52:c5:8b:c8:bf:24:6b:e9:bf:fd:95:32:24:41:
7f:13:21:ec:d7:04:16:c3:ff:13:57:b9:f4:4a:ab:
38:c5:1f:d9:a7:86:2a:77:84:a2:9c:fd:d6:25:4e:
d4:e7:ec:0c:bb:f4:fa:b1:54:13:6a:4e:8b:98:cd:
a6:20:70:11:26:7e:5d:df:f0:d5:b4:9f:dd:11:af:
12:db:b4:58:2e:2f:73:20:5e:81:34:ae:ca:ac:18:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:93:CC:2C:1D:73:D1:8F:C0:3B:94:1F:AE:78:AA:1A:50:90:CC:22
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mpPMLB1z0Y_AO5QfrniqGlCQzCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.64.0/24
188.132.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ab:4e:47:5c:97:e3:6f:0c:bf:2d:16:26:25:6b:57:67:9b:
92:1f:4a:f4:64:08:78:3e:02:d2:66:45:59:4d:67:ff:dd:0d:
65:90:c1:2b:da:0b:d4:87:6d:81:f5:2d:98:c3:45:42:93:23:
e3:c1:dc:2c:ef:16:49:46:6a:91:5a:48:98:b3:c4:81:47:1a:
5a:eb:e1:cf:df:79:03:ca:ed:69:aa:3e:6d:a3:b5:00:74:7e:
8d:e7:f7:46:69:1a:d4:ca:1c:e3:e8:55:b4:39:6b:e1:e0:6d:
24:86:e5:9f:e1:f1:89:ce:32:56:4d:66:6c:0a:d4:e6:45:5f:
e9:d0:9b:59:ef:b6:76:53:a2:6b:ed:e2:5a:9d:03:fe:d8:df:
33:35:ac:c9:32:74:69:d7:c6:9e:d9:59:b4:68:e0:2d:1e:a0:
a2:5b:fc:74:26:c3:91:13:52:d2:e9:9e:34:c5:4f:cd:8e:02:
aa:41:d3:0f:92:ac:44:02:e2:e4:e5:dc:8c:bb:4e:1b:8e:78:
2f:f8:b1:38:b6:4d:51:ca:e0:0e:ac:4f:56:c8:90:80:bc:8a:
cb:0e:ba:42:d7:30:67:3d:a2:3c:cb:91:71:49:c6:6b:b9:e4:
a0:f0:ce:f6:cd:d0:64:bf:eb:fb:1d:48:ec:32:ae:6f:4f:9a:
f3:05:70:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:50 2025 by rpki-client