Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MEMpNrkfQWGOuGsoGMPmvUyvb4U.roa
File: MEMpNrkfQWGOuGsoGMPmvUyvb4U.roa (raw, json)
Hash identifier: g2xyALGKWfIoShrz3pHL/Deqkmm8oQhvxAVPtwdYnhQ=
Subject key identifier: 30:43:29:36:B9:1F:41:61:8E:B8:6B:28:18:C3:E6:BD:4C:AF:6F:85
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01946B27A2BDDCEE0332B078B0DF2C2DBBBE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MEMpNrkfQWGOuGsoGMPmvUyvb4U.roa
Signing time: Wed 15 Jan 2025 18:09:07 +0000
ROA not before: Wed 15 Jan 2025 18:09:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:27:a2:bd:dc:ee:03:32:b0:78:b0:df:2c:2d:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 15 18:09:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30432936b91f41618eb86b2818c3e6bd4caf6f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:1e:f3:1d:c6:db:c5:eb:e8:f4:14:19:18:
5a:ae:a6:d2:70:0d:3b:0b:97:f3:81:82:b7:23:77:
71:0c:ba:57:14:c0:bb:8d:32:bb:db:21:ad:6a:d4:
d3:c4:0a:1e:50:23:99:78:4a:d3:26:5a:20:04:1b:
94:d1:1b:dc:1f:80:67:e1:ec:14:9f:5d:22:72:bd:
e5:b1:b4:e0:89:8a:54:af:31:f6:f2:e3:c5:ee:ab:
01:78:6d:04:9f:92:fa:44:0c:d2:c0:f6:1b:2c:ca:
53:dc:0c:93:71:d8:6d:18:f5:c3:be:a0:b7:47:2c:
f0:88:41:b0:3d:9a:ff:99:61:23:f4:5b:04:46:e7:
a2:e5:47:54:bb:20:42:19:4d:60:2a:33:5a:1c:07:
78:a6:bb:9a:c0:b6:75:ca:a6:0a:46:94:18:d8:40:
e7:b0:be:8c:61:1c:c6:d3:d9:c2:a0:78:33:21:45:
18:03:34:00:6e:c8:4e:94:5b:20:f8:0c:d2:da:95:
20:19:95:25:1e:2e:b8:60:9a:ae:88:0f:0c:ee:ea:
d5:4c:59:e3:a6:73:58:6d:6b:80:0e:2f:26:44:0b:
80:cf:bf:22:cf:fa:bd:b6:b5:09:ff:0f:16:35:e8:
6f:23:ac:ab:d7:ea:60:2c:6d:42:fa:13:ae:89:23:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:43:29:36:B9:1F:41:61:8E:B8:6B:28:18:C3:E6:BD:4C:AF:6F:85
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MEMpNrkfQWGOuGsoGMPmvUyvb4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.136.0/22
94.177.122.0/24
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
7a:c7:71:f8:6b:03:8b:58:5d:7c:51:56:ea:ff:91:5f:cb:4a:
ab:cd:7e:49:2b:3f:e8:ac:09:1c:1a:2e:b3:09:d4:86:3e:ab:
aa:4c:78:55:10:fa:ad:9b:fe:7d:56:91:84:30:6d:6a:14:c4:
66:30:d7:1c:f9:5d:ab:58:b8:02:6a:d2:bd:bc:d9:51:16:29:
ec:95:87:f0:6a:1f:91:7f:a8:85:56:0d:17:73:97:5b:9d:85:
26:68:c7:b5:cd:70:c0:d1:1e:ce:9f:96:3b:fe:80:54:67:ef:
d8:9b:26:bc:9d:43:59:38:d4:5e:fd:e0:20:ba:35:57:ca:90:
67:57:1a:59:47:e0:ca:95:59:4d:71:f3:b0:1c:32:13:c8:b5:
6a:7b:2e:88:d4:1c:bf:81:3a:5c:ff:df:56:96:8e:b6:13:84:
07:c6:f0:fd:a5:47:b0:24:46:6b:8d:b9:3c:1b:2a:27:4d:bd:
1d:c1:68:27:9a:e9:dd:a9:9c:cd:fe:ed:e2:be:58:00:4f:56:
8b:6f:27:85:78:fb:4c:aa:9a:d5:56:a6:79:c9:7e:25:f6:57:
f8:a0:08:f3:9a:0e:ca:97:f9:a4:0b:1d:c4:41:a7:42:99:50:
20:01:f0:f7:12:3d:6c:b3:1d:57:f1:60:4c:37:d7:3b:b0:e1:
b9:2d:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:47:09 2025 by rpki-client