Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/MjbQUPMNLIheZBDkrI8N0W9Uzh8.roa
File: MjbQUPMNLIheZBDkrI8N0W9Uzh8.roa (raw, json)
Hash identifier: 4Iv06Vc4XP2DcLEHGwIUaAZcm9hUIsAMlBV/dIzvxtA=
Subject key identifier: 32:36:D0:50:F3:0D:2C:88:5E:64:10:E4:AC:8F:0D:D1:6F:54:CE:1F
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 019503CDF027EF743EA43C87AC5A0968E9D2
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/MjbQUPMNLIheZBDkrI8N0W9Uzh8.roa
Signing time: Fri 14 Feb 2025 09:33:02 +0000
ROA not before: Fri 14 Feb 2025 09:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200736
IP address blocks: 45.66.40.0/22 maxlen: 24
195.20.114.0/24 maxlen: 24
195.214.208.0/22 maxlen: 24
2a10:9300::/29 maxlen: 36
2a10:9300::/36 maxlen: 42
2a10:9300:b00::/42 maxlen: 42
2a10:9301::/36 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:cd:f0:27:ef:74:3e:a4:3c:87:ac:5a:09:68:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Feb 14 09:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3236d050f30d2c885e6410e4ac8f0dd16f54ce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:22:f2:0f:ad:41:94:53:9f:e0:12:99:68:
45:16:1d:79:92:37:df:9c:22:40:24:ee:3c:65:2f:
41:28:10:c0:15:06:1e:7f:1e:da:a8:a6:d0:80:45:
a2:fa:f7:9a:0c:96:1c:41:a4:29:b1:a7:d5:96:b3:
8b:ec:cb:b5:96:b4:44:e2:a4:9a:d9:cb:f1:5d:4a:
8e:16:2e:e7:66:31:71:91:5a:8a:df:d0:ff:bf:14:
d5:f2:68:e2:30:8c:39:b0:6f:88:0e:7f:23:e1:07:
df:63:be:d3:d4:04:a3:d1:13:0c:f2:08:9b:21:32:
9e:1b:a7:d1:0a:fa:32:cf:2d:d3:6c:3f:d5:51:b5:
27:3d:5f:34:23:2c:bb:05:ae:fc:94:9d:97:e1:26:
61:a9:bf:c3:f3:d8:44:83:1d:b6:77:e1:a2:be:68:
d4:c3:52:61:68:6d:de:c2:7a:fc:18:88:b1:b1:bc:
12:98:a5:2c:4a:55:b5:c9:ad:26:3b:5a:d7:48:0f:
39:41:ea:8e:d1:a9:61:38:d9:12:02:1d:12:0c:2e:
dc:3a:bd:61:ef:c1:21:21:a0:ad:c6:e3:e8:63:24:
a2:f6:f5:b3:ba:e8:42:1a:b4:ad:3d:9b:24:4b:9f:
d6:34:ab:dd:7c:9e:02:f5:32:db:dc:28:4d:b8:a1:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:36:D0:50:F3:0D:2C:88:5E:64:10:E4:AC:8F:0D:D1:6F:54:CE:1F
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/MjbQUPMNLIheZBDkrI8N0W9Uzh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.40.0/22
195.20.114.0/24
195.214.208.0/22
IPv6:
2a10:9300::/29
Signature Algorithm: sha256WithRSAEncryption
71:03:28:20:dd:a1:e5:91:ef:e1:c4:9c:4c:65:e5:ae:02:32:
7e:31:84:0d:1b:8a:49:8f:33:73:a1:db:7b:76:75:74:8e:44:
29:9f:aa:2a:91:9c:0f:25:b7:50:19:2e:e7:f5:4b:eb:b4:c9:
1e:21:76:9c:79:66:52:17:7c:ac:b2:60:e4:27:3a:bd:2b:6a:
d5:14:9d:79:47:f7:c9:99:b4:1a:31:05:58:1b:9c:7a:1b:c7:
0a:3c:55:ab:f7:6a:80:f1:8c:10:e4:fc:0c:93:e0:b0:51:60:
6f:e2:98:f7:39:e4:81:84:41:62:08:2b:99:a9:6a:1b:c5:af:
15:3c:20:91:a2:a0:5a:a8:c7:f8:89:af:4e:a9:6c:55:4d:8b:
0d:52:fc:87:26:22:ef:93:4f:cd:ce:3a:2d:de:0e:23:77:fd:
2e:c5:23:68:5c:31:7a:bf:a8:07:40:5e:1b:b3:3d:b2:67:4c:
e4:dd:4a:fc:64:f4:42:46:98:7b:45:1b:05:48:d3:9c:e8:bc:
2f:a0:82:68:66:fe:8c:93:7d:56:c7:c7:d5:f3:dc:51:cd:5a:
1e:61:1f:4a:db:71:21:77:3f:78:16:eb:03:b2:80:be:44:df:
e0:77:60:e7:33:95:d4:80:65:56:7a:f7:7b:59:74:b4:08:3d:
2f:f4:ea:b9
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZUDzfAn73Q+pDyHrFoJaOnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm
YTg3NGUwHhcNMjUwMjE0MDkzMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjM2ZDA1MGYzMGQyYzg4NWU2NDEwZTRhYzhmMGRkMTZmNTRjZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDki8g+tQZRTn+ASmWhFFh15kjff
nCJAJO48ZS9BKBDAFQYefx7aqKbQgEWi+veaDJYcQaQpsafVlrOL7Mu1lrRE4qSa
2cvxXUqOFi7nZjFxkVqK39D/vxTV8mjiMIw5sG+IDn8j4QffY77T1ASj0RMM8gib
ITKeG6fRCvoyzy3TbD/VUbUnPV80Iyy7Ba78lJ2X4SZhqb/D89hEgx22d+GivmjU
w1JhaG3ewnr8GIixsbwSmKUsSlW1ya0mO1rXSA85QeqO0alhONkSAh0SDC7cOr1h
78EhIaCtxuPoYySi9vWzuuhCGrStPZskS5/WNKvdfJ4C9TLb3ChNuKG4/QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDI20FDzDSyIXmQQ5KyPDdFvVM4fMB8GA1UdIwQY
MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt
ZThhZGE1MWVlOGZmLzEvTWpiUVVQTU5MSWhlWkJEa3JJOE4wVzlVemg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm
LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLUIoAwQA
wxRyAwQCw9bQMA0EAgACMAcDBQMqEJMAMA0GCSqGSIb3DQEBCwUAA4IBAQBxAygg
3aHlke/hxJxMZeWuAjJ+MYQNG4pJjzNzodt7dnV0jkQpn6oqkZwPJbdQGS7n9Uvr
tMkeIXaceWZSF3yssmDkJzq9K2rVFJ15R/fJmbQaMQVYG5x6G8cKPFWr92qA8YwQ
5PwMk+CwUWBv4pj3OeSBhEFiCCuZqWobxa8VPCCRoqBaqMf4ia9OqWxVTYsNUvyH
JiLvk0/Nzjot3g4jd/0uxSNoXDF6v6gHQF4bsz2yZ0zk3Ur8ZPRCRph7RRsFSNOc
6LwvoIJoZv6Mk31Wx8fV89xRzVoeYR9K23Ehdz94FusDsoC+RN/gd2DnM5XUgGVW
evd7WXS0CD0v9Oq5
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:00:17 2025 by rpki-client