Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/00MgoZoYQtZGwQrOezTGMFJxBeQ.roa
File: 00MgoZoYQtZGwQrOezTGMFJxBeQ.roa (raw, json)
Hash identifier: yEhoJZzpLJl/SN7s0GnAIUxYjWxoW/1J4yfFxR29F7o=
Subject key identifier: D3:43:20:A1:9A:18:42:D6:46:C1:0A:CE:7B:34:C6:30:52:71:05:E4
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01969F6702A0449DC9364DFBE3A54B1A58C2
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/00MgoZoYQtZGwQrOezTGMFJxBeQ.roa
Signing time: Mon 05 May 2025 07:44:10 +0000
ROA not before: Mon 05 May 2025 07:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43647
IP address blocks: 62.122.216.0/22 maxlen: 24
82.148.0.0/21 maxlen: 24
89.232.184.0/22 maxlen: 24
94.154.128.0/22 maxlen: 24
185.76.12.0/22 maxlen: 24
185.228.88.0/22 maxlen: 24
213.232.225.0/24 maxlen: 24
213.232.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:67:02:a0:44:9d:c9:36:4d:fb:e3:a5:4b:1a:58:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: May 5 07:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34320a19a1842d646c10ace7b34c630527105e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:e0:56:6b:6c:36:20:77:e2:1b:da:ab:e9:
3f:85:1c:ea:69:fb:51:6d:1c:bd:13:55:68:b0:67:
1f:9a:0e:12:03:11:4b:67:ba:ab:df:e7:63:53:b5:
d6:ca:3a:2f:89:27:fc:73:49:eb:d9:20:ad:b9:0d:
de:73:c8:20:c6:ad:d1:c1:2a:20:42:f7:1d:45:3f:
bf:4f:06:37:f9:f9:4e:e7:22:7c:0e:d5:0a:af:1f:
b3:b0:08:c0:78:89:6b:a1:70:bb:c2:f1:d4:18:e5:
17:f4:73:ac:e2:75:1b:52:1b:95:27:f5:b7:88:cb:
a4:f2:5b:15:a9:a7:42:40:d8:5e:c3:43:39:90:94:
b7:02:7d:bd:8f:09:03:11:5b:9d:c8:a7:87:eb:c5:
19:5e:55:da:a0:1a:72:ba:9b:b6:d3:42:c1:13:d4:
65:9a:5c:2f:27:ae:ed:36:c3:e9:45:86:28:16:d2:
86:27:ce:4b:33:01:41:dd:06:23:4e:04:9b:23:1b:
93:bb:41:28:b7:08:d8:8c:d8:1e:c9:81:3c:ef:48:
a8:0d:83:77:1f:9d:39:61:fc:b6:57:fc:0a:cc:58:
7b:e3:b6:85:29:5c:0f:56:b3:1d:6a:2c:b2:ae:a9:
51:56:d6:bc:79:59:77:5a:24:77:f1:e6:88:43:a2:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:20:A1:9A:18:42:D6:46:C1:0A:CE:7B:34:C6:30:52:71:05:E4
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/00MgoZoYQtZGwQrOezTGMFJxBeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.216.0/22
82.148.0.0/21
89.232.184.0/22
94.154.128.0/22
185.76.12.0/22
185.228.88.0/22
213.232.225.0/24
213.232.245.0/24
Signature Algorithm: sha256WithRSAEncryption
29:00:16:f6:a3:32:93:50:7f:a5:67:76:8e:09:cd:c1:76:fb:
a4:8f:b5:56:ff:2e:d5:43:8f:d3:cf:77:34:9a:b4:f3:f0:2b:
0f:c4:d1:77:88:c7:33:30:9b:93:ff:ab:4b:a8:e7:b9:63:dd:
32:84:bb:27:89:48:65:3d:58:f1:8e:83:32:17:3b:58:64:93:
22:8b:35:f4:0d:f1:97:74:d2:b9:70:79:3d:b9:79:89:a6:e3:
73:fb:7c:88:0c:21:f8:56:3d:8e:b5:9e:d4:67:7d:a8:ab:5c:
0e:67:d6:9a:30:e9:c5:0d:ba:1e:b4:f1:80:42:40:17:e6:cf:
d7:97:15:ca:43:3e:ea:3b:0a:36:d4:97:69:b8:b0:31:b2:c0:
34:d5:57:48:81:e2:c9:81:5d:ce:fd:ee:68:13:09:bd:43:9f:
e0:50:08:18:f2:1d:8f:c9:12:8e:42:55:f3:4a:21:d7:d9:6b:
7d:0f:c3:5c:93:47:36:ee:3d:f2:de:2f:60:20:ea:52:5f:7b:
85:f0:7b:1c:18:84:97:07:4d:f7:1e:32:3d:47:52:67:42:e7:
d0:5a:22:c9:74:8f:20:70:c9:0c:fc:a9:d3:e6:95:de:16:9a:
a7:b7:66:fa:4a:8c:0f:fd:29:f3:f9:d2:d0:de:f0:68:1f:a1:
bb:4e:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:16:14 2025 by rpki-client