Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/mRxjUMb4A19WEoG031-D-jh94lo.roa
File: mRxjUMb4A19WEoG031-D-jh94lo.roa (raw, json)
Hash identifier: 9BtlaBZl/GFPVYBxNJXRqsP0IZiStCfXW61EzbYDKj8=
Subject key identifier: 99:1C:63:50:C6:F8:03:5F:56:12:81:B4:DF:5F:83:FA:38:7D:E2:5A
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019428233D2EF171FDCD605547549F9B926F
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/mRxjUMb4A19WEoG031-D-jh94lo.roa
Signing time: Thu 02 Jan 2025 17:49:45 +0000
ROA not before: Thu 02 Jan 2025 17:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216050
IP address blocks: 89.38.41.0/24 maxlen: 24
89.38.43.0/24 maxlen: 24
89.38.44.0/24 maxlen: 24
89.38.46.0/24 maxlen: 24
89.38.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3d:2e:f1:71:fd:cd:60:55:47:54:9f:9b:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 2 17:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=991c6350c6f8035f561281b4df5f83fa387de25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:65:85:9a:69:0b:2e:4f:b4:3c:ff:76:2b:
8c:31:36:7b:e1:98:56:69:b9:0e:5d:ea:92:c2:95:
38:86:f4:f7:88:fc:4a:4a:c6:40:a4:60:6f:3d:c8:
6b:ac:47:89:cf:96:28:00:c5:7f:ef:b8:21:f3:15:
00:75:5d:50:3e:82:a4:a1:c1:26:ac:92:79:13:41:
7a:69:c5:a2:ea:31:9b:3c:a9:10:1c:9d:fe:4a:28:
36:34:04:75:9f:5a:95:26:ce:8a:93:2d:0a:84:42:
ec:3c:3a:50:d5:b3:4e:6f:19:75:17:c4:c2:49:72:
d5:8c:c5:76:89:cd:08:90:62:8c:8e:bf:ce:9e:b7:
a0:af:7c:5b:50:5a:64:51:94:c8:09:54:40:04:76:
2e:7c:de:04:d3:e5:6a:9d:34:aa:43:a2:0b:8a:96:
19:66:6f:7f:84:08:2a:8d:ea:e3:91:b9:c0:da:cb:
6d:7f:75:65:93:3e:12:e7:aa:aa:4c:7d:ee:13:50:
3b:c1:c4:47:46:86:54:c7:96:2b:b3:43:28:40:12:
d0:b8:53:0d:5d:68:77:95:fc:78:5b:e3:fb:b1:0a:
4b:4a:e2:18:8f:e7:f8:5d:3b:a0:60:78:c1:b0:d0:
2f:ca:7b:43:89:02:b7:28:9d:92:44:0b:93:97:58:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1C:63:50:C6:F8:03:5F:56:12:81:B4:DF:5F:83:FA:38:7D:E2:5A
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/mRxjUMb4A19WEoG031-D-jh94lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.41.0/24
89.38.43.0-89.38.44.255
89.38.46.0/23
Signature Algorithm: sha256WithRSAEncryption
49:87:b6:e6:79:de:0f:d3:69:a0:d1:13:76:57:87:54:29:57:
75:4c:0c:46:eb:52:ff:a8:3d:b1:c5:42:61:86:9f:dc:f4:c2:
3d:ac:f0:09:2f:b2:3d:83:f8:21:3b:85:1d:92:88:8a:0e:f6:
b8:5f:0d:ed:d3:7e:6a:93:73:1a:1d:c4:4b:75:f7:3b:05:08:
89:20:27:d6:91:ee:6f:32:8e:a0:6a:73:ae:6a:d7:9c:8a:95:
df:4c:3a:22:1f:77:38:ab:4d:4d:30:6a:14:f2:eb:04:bc:32:
ce:bf:64:02:bb:69:f8:9a:79:ba:85:89:9f:4d:11:9b:ce:d0:
83:b1:f8:7f:c6:c2:81:c6:0c:c3:41:24:38:ab:be:61:d9:48:
56:f1:3e:61:70:1e:1f:eb:97:7a:1e:1f:84:5c:b3:f8:53:88:
f0:7a:7b:96:c9:2d:88:48:18:62:80:38:2d:bf:26:a6:80:ba:
c9:02:b9:b6:e3:cc:df:57:6b:ee:f8:fb:ef:1d:41:12:6b:01:
55:ac:1c:ee:9d:b9:86:31:4f:ad:da:69:d8:86:f4:3c:e9:01:
da:7a:15:84:d7:bb:22:ca:07:cc:a7:c8:cd:80:35:ca:0a:d0:
5d:1d:49:a6:69:2e:76:ef:b6:7e:ec:92:14:65:5e:4b:89:a2:
72:9b:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:45:51 2025 by rpki-client