Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/MLfn1YOL41jf_jxhYVmNtYMo6UI.roa
File: MLfn1YOL41jf_jxhYVmNtYMo6UI.roa (raw, json)
Hash identifier: Rc+RrvU5X1JONVLCHy+aTfK3D2oQUU5dYj6tePTJUyE=
Subject key identifier: 30:B7:E7:D5:83:8B:E3:58:DF:FE:3C:61:61:59:8D:B5:83:28:E9:42
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E79CA4AC0B8959DD24F85557A929
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/MLfn1YOL41jf_jxhYVmNtYMo6UI.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214061
IP address blocks: 83.142.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e7:9c:a4:ac:0b:89:59:dd:24:f8:55:57:a9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b7e7d5838be358dffe3c6161598db58328e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:4b:30:01:9b:29:e4:cd:b0:aa:82:1c:28:
fc:38:44:25:95:df:10:1d:31:5f:b4:0c:45:b3:1a:
06:44:a5:b5:15:37:56:5f:5b:18:9e:41:44:2c:a7:
d3:64:2d:c4:00:3e:e4:6c:68:58:ab:e4:6a:9e:88:
47:a6:43:87:9f:e8:90:e0:34:a3:d5:fa:bf:5f:9d:
56:49:f0:8d:f0:b9:c5:ae:3c:56:92:e5:ee:39:bd:
9d:18:e1:d5:f9:19:4a:98:59:dd:63:c7:90:d2:aa:
1d:1b:f7:45:9f:86:26:2d:ba:7d:20:de:08:42:f6:
f0:61:78:df:80:59:6f:2a:b6:a4:a2:bc:a1:6d:fa:
22:3e:13:b0:30:f8:83:b2:63:a3:a5:9f:b7:0a:df:
97:9f:ec:f7:2b:12:d0:4a:d6:6c:d2:8a:55:4b:8c:
9e:9c:9e:c3:88:32:b3:84:9b:6c:c1:80:a8:f5:4b:
b3:3f:6b:f7:b3:1c:7b:72:5d:67:17:62:76:76:02:
03:84:00:59:91:7f:b6:1c:df:7e:ed:f0:db:8a:37:
86:5e:43:b6:d6:e6:77:54:85:a8:fb:07:a3:66:1f:
dc:b1:9d:7b:47:e5:14:a4:2c:d8:85:ba:78:24:8e:
fc:f6:a9:d1:b7:5d:ea:51:3e:1e:c8:9c:e6:67:7f:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B7:E7:D5:83:8B:E3:58:DF:FE:3C:61:61:59:8D:B5:83:28:E9:42
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/MLfn1YOL41jf_jxhYVmNtYMo6UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.213.0/24
Signature Algorithm: sha256WithRSAEncryption
73:66:1e:2d:56:01:e5:3d:b7:2d:68:70:8e:9b:b3:5c:5f:70:
54:b1:d7:e0:80:67:e9:9e:83:b9:bd:10:62:3a:45:ab:f2:4e:
57:bd:c0:92:2a:f3:a5:ae:22:55:13:da:9b:f7:92:d2:b6:b7:
98:01:2b:b2:05:22:62:47:43:89:df:db:3a:f6:c0:fb:db:18:
ab:fc:0c:62:88:58:b9:4f:29:27:78:f6:38:6d:01:46:98:7b:
62:cb:70:03:c9:26:2a:77:e9:f9:61:b3:30:ce:41:cb:0c:0e:
d4:f5:32:12:59:a9:7a:22:e7:22:0d:62:79:7f:a9:8e:b1:a2:
31:5a:a9:85:36:a4:bd:40:a4:36:48:70:83:44:e9:71:5c:7d:
57:84:36:ed:04:85:f4:22:06:cd:fb:01:55:0d:ab:13:b0:1c:
11:a9:78:d4:3a:c4:36:e8:2d:0c:04:a0:ab:25:a4:f1:ee:b0:
dd:c7:37:cf:d4:48:3e:a3:75:fb:7b:8a:34:5c:3a:75:b7:03:
e3:46:77:e3:cd:07:95:45:75:20:c6:91:57:cd:89:49:c1:ec:
3a:ab:60:7e:e3:55:54:db:c4:6d:b4:8a:22:e9:f3:db:c3:76:
94:d4:e3:c6:a9:84:60:e7:2e:b1:ba:ab:fa:88:ff:4f:ff:5f:
bc:14:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:17 2025 by rpki-client