Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Mk19CM13YMFH7WXY4rkQd2VVD9M.roa
File: Mk19CM13YMFH7WXY4rkQd2VVD9M.roa (raw, json)
Hash identifier: ocRMjh+08/tYyEQx7PGNN6c6//DGSHJpqiQu69+SvEU=
Subject key identifier: 32:4D:7D:08:CD:77:60:C1:47:ED:65:D8:E2:B9:10:77:65:55:0F:D3
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E6776CE4F326FE746B2F17CBD77F
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Mk19CM13YMFH7WXY4rkQd2VVD9M.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208405
IP address blocks: 213.139.212.0/23 maxlen: 23
213.139.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e6:77:6c:e4:f3:26:fe:74:6b:2f:17:cb:d7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=324d7d08cd7760c147ed65d8e2b9107765550fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:5d:ce:e5:fd:54:f4:a7:e5:3e:d1:ed:82:
9d:90:70:9c:0a:52:11:a1:62:f0:21:31:60:b9:47:
2d:e1:ba:33:f6:a9:43:73:64:2c:8d:5b:f3:54:fd:
ce:93:9b:d9:3e:95:f9:7e:44:b7:69:cd:f1:b8:2a:
e1:55:99:05:92:a8:ba:18:d3:0c:db:a8:43:df:7d:
5a:84:8a:b6:a3:1b:a8:6b:14:b0:1a:d0:a2:00:5c:
b5:78:15:92:4c:96:18:7e:d9:ed:99:64:62:5f:28:
ba:13:4f:ce:5d:40:ab:b0:a2:c9:18:04:c3:47:92:
05:38:d9:87:e2:41:77:d9:08:72:8d:2c:7e:74:e7:
08:08:b0:15:40:bb:97:e4:97:61:52:4f:4e:16:d0:
82:9f:ff:34:2b:3f:13:20:a0:3a:21:0f:b8:ea:75:
41:cf:39:3c:b4:c4:c5:9b:ba:08:fa:32:15:9a:14:
9b:5c:37:3e:fe:cd:e8:dd:77:3a:4c:86:83:ea:64:
3d:be:e9:73:7e:2d:95:9a:fc:8a:bf:3b:b9:69:5c:
3d:51:35:95:71:ed:9b:9e:2e:b2:64:ac:67:ed:de:
f0:d9:50:a9:ab:ef:7c:5c:5d:fc:95:a8:1b:ff:5e:
af:95:f6:cd:99:15:d8:31:9e:85:39:fb:40:ff:08:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:7D:08:CD:77:60:C1:47:ED:65:D8:E2:B9:10:77:65:55:0F:D3
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Mk19CM13YMFH7WXY4rkQd2VVD9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.212.0/22
Signature Algorithm: sha256WithRSAEncryption
34:85:44:92:3c:8d:23:fd:8a:96:3e:eb:17:b5:93:7b:99:ae:
99:5d:76:8b:92:fd:99:81:0c:0d:76:23:67:41:b6:28:b7:81:
8d:bc:3a:44:d0:4e:eb:e1:14:62:2b:fc:1a:7e:02:37:99:e1:
5f:b4:31:32:21:55:4f:03:8a:9d:ca:65:5b:cf:80:eb:74:fb:
c9:3b:9b:48:31:f0:a1:32:d8:e8:f3:06:89:fb:d5:e6:e5:21:
1b:17:f2:15:bb:9e:6f:cd:8d:9e:62:10:7c:36:dd:8e:db:49:
26:c0:ea:59:ac:b9:d8:c3:2b:86:37:96:d6:84:f3:c8:99:64:
6b:19:28:69:0a:a8:0c:ea:b4:98:ab:c3:80:23:7e:32:dd:4f:
06:a1:1c:7c:0a:42:fc:65:b1:22:1e:94:68:b5:4e:aa:96:0f:
6f:41:28:09:72:f5:f9:d8:60:b3:71:aa:6a:c6:54:ac:81:aa:
0b:8f:08:0f:c9:a9:21:18:7e:61:df:5f:5e:01:a1:f4:15:8b:
de:99:89:15:32:ac:88:7b:f8:20:bb:fc:8d:e2:71:d2:5a:f0:
9b:ef:09:2d:c9:c9:8b:8e:5b:fe:88:8f:f5:89:84:ad:96:a2:
bf:84:3b:ec:13:22:c6:c9:2b:79:b7:38:2e:be:e5:85:8a:48:
9a:f3:4b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:19:27 2025 by rpki-client