Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MQPkg4fcsbUIIvUzQbhomNCnDd8.roa
File: MQPkg4fcsbUIIvUzQbhomNCnDd8.roa (raw, json)
Hash identifier: bwlP8ughKwIIp9fgJoYO6vRzb9jE784W1bSyioSjudI=
Subject key identifier: 31:03:E4:83:87:DC:B1:B5:08:22:F5:33:41:B8:68:98:D0:A7:0D:DF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9B0F4689650B2FCEB3C431138855
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MQPkg4fcsbUIIvUzQbhomNCnDd8.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42489
IP address blocks: 146.120.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:0f:46:89:65:0b:2f:ce:b3:c4:31:13:88:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3103e48387dcb1b50822f53341b86898d0a70ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:70:b9:15:72:31:34:e4:fb:84:1c:c8:b0:
b9:ef:a6:b5:f7:71:3a:58:98:32:28:aa:be:60:ee:
a1:93:87:18:69:8c:c7:3d:29:45:9e:37:01:fe:47:
b8:81:41:ac:3b:9a:10:c8:d4:90:8d:40:a9:8a:fd:
ba:d7:52:59:de:a8:da:2d:36:d7:a8:4e:4b:89:02:
57:d2:28:cc:66:ee:4c:df:46:6a:cc:e4:9c:45:97:
ea:17:b3:c1:75:5b:5e:f9:4d:b1:42:0e:15:2a:ba:
bd:d6:21:2b:6c:05:0b:49:53:03:9e:3e:2b:9e:9c:
e0:38:6d:9e:2c:f5:d2:8e:09:05:45:f2:f9:69:ad:
49:0b:48:4c:a4:4f:12:8a:1d:8b:d1:00:9a:ea:54:
12:1a:f3:1b:fa:13:a7:13:73:94:de:81:95:7d:d4:
ae:d6:3e:2b:be:89:06:0e:cc:10:12:db:83:02:08:
0a:3e:7a:3d:ca:f3:33:f7:b0:25:1f:06:74:15:18:
81:6b:ab:8c:b2:65:f2:0d:e7:fd:5a:bc:16:86:ef:
64:a2:79:78:d7:59:a2:bb:2e:b3:43:7c:91:11:a5:
8c:6f:fb:31:6b:9e:27:92:8c:8f:7c:1b:b6:10:57:
bf:98:3c:08:d7:db:65:ba:bf:f1:5c:d0:ed:d6:cb:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:03:E4:83:87:DC:B1:B5:08:22:F5:33:41:B8:68:98:D0:A7:0D:DF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MQPkg4fcsbUIIvUzQbhomNCnDd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.222.0/24
Signature Algorithm: sha256WithRSAEncryption
60:de:be:c2:cb:c4:99:e0:b0:27:86:82:51:e7:4e:71:e0:a2:
1d:a0:7b:65:db:af:56:37:84:3b:37:fb:f8:a8:39:64:8d:3a:
72:fb:84:8b:f0:ba:68:71:4e:4e:50:47:18:ff:c0:23:04:c6:
f8:3f:07:c1:4a:a1:68:c0:c8:c9:c8:38:f5:f7:a7:a5:98:b1:
32:39:e6:71:f4:2c:f0:fc:56:a9:76:72:f6:26:55:bf:91:08:
86:9a:ca:80:69:b8:ae:bd:71:08:4a:7b:a9:fb:7a:78:37:98:
58:b7:1c:b6:b8:cf:78:97:b5:86:58:d1:74:8d:a5:d8:7c:32:
8b:40:63:96:77:a0:94:6d:b5:63:b5:bf:ea:ad:3d:69:73:58:
04:f8:8a:e6:05:d8:e6:87:92:4b:d4:0c:c1:77:28:cd:58:61:
50:0f:8c:db:44:ab:e6:ed:72:2c:6b:c7:69:13:7c:44:a1:5e:
c7:19:18:a5:63:bd:28:7c:fd:37:31:6c:ff:c6:26:5c:ed:49:
cd:b7:1a:94:22:d1:b9:4f:d2:f4:1c:66:3e:85:20:0f:7b:15:
87:db:d4:3e:6b:23:dc:57:7f:b1:26:83:08:30:72:0b:88:81:
bc:20:eb:01:a3:8e:76:6d:c4:9f:0a:4f:f3:94:3f:f8:f1:c1:
c2:41:ac:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:38 2025 by rpki-client