Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa
File: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (raw, json)
Hash identifier: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=
Subject key identifier: 31:95:F5:B1:0F:8D:A6:08:74:3E:E7:7E:21:C1:8A:35:22:F2:A3:49
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 019422FB67ACD798765E4E0978718B157744
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 192.108.34.0/24 maxlen: 24
193.22.112.0/23 maxlen: 24
193.22.112.0/24 maxlen: 24
193.22.113.0/24 maxlen: 24
193.22.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:67:ac:d7:98:76:5e:4e:09:78:71:8b:15:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3195f5b10f8da608743ee77e21c18a3522f2a349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:da:d0:b8:11:5b:f1:54:44:08:22:be:3e:
9d:f3:8b:37:dc:85:df:d0:ab:33:a1:a8:67:62:54:
47:18:da:88:c8:8b:b5:69:2d:1c:81:64:4b:3f:48:
7c:de:d8:cd:79:c0:7d:62:68:9f:5f:81:71:2a:f7:
95:70:55:b8:7a:d1:f0:f8:15:62:9b:fc:28:c7:be:
ba:ae:9d:eb:ed:46:cc:51:23:b3:87:93:94:47:8e:
65:64:5f:38:f0:38:47:38:e6:31:6f:3f:dd:36:a4:
ed:2c:fd:6c:0a:e5:75:43:6d:6e:5a:0d:2b:9e:70:
81:7b:87:4f:e7:00:8f:fb:23:14:15:f0:3e:a9:98:
83:4c:e6:87:b0:e4:fc:04:9f:59:50:49:66:61:cb:
7c:3a:14:45:73:8f:f0:5c:70:d8:15:b4:5c:36:49:
75:ce:12:34:52:30:2f:44:88:6e:1e:4d:24:0e:5e:
69:57:75:64:30:be:e5:81:03:6d:c1:98:e8:b4:be:
34:9b:de:17:ab:eb:49:23:c4:61:3e:98:4d:12:b6:
8b:68:7b:b3:c4:9d:73:dc:df:a0:e4:21:06:be:21:
df:84:78:68:a6:89:34:16:61:b2:98:34:99:b7:f6:
26:ab:0e:ac:de:a0:a5:17:fb:d7:35:8a:fa:ae:e8:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:95:F5:B1:0F:8D:A6:08:74:3E:E7:7E:21:C1:8A:35:22:F2:A3:49
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.34.0/24
193.22.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:ea:16:84:9a:86:e5:0d:57:ac:5b:97:75:b5:16:2a:b0:b4:
43:89:d2:03:23:a6:3a:2e:a4:8d:99:dd:f4:a8:a9:96:14:90:
fa:c0:39:5d:71:ac:7c:b1:32:74:f2:1a:48:24:ab:c7:0b:f1:
24:05:2e:34:6b:85:3a:cb:d6:6b:a4:d3:bf:d5:2f:60:75:86:
16:75:ad:d4:da:1d:e8:7a:41:3e:ae:a6:47:79:0f:77:42:5c:
c9:08:f8:0c:60:f1:12:0c:45:64:df:57:4b:22:f3:07:4f:76:
15:4e:54:8c:77:8d:9c:2c:13:14:13:28:58:2d:e5:ec:c8:63:
e7:fc:1c:2f:31:76:da:f7:44:b9:33:b4:e6:95:fd:91:9b:0c:
95:0c:a3:60:79:39:df:91:d8:70:a1:c5:35:5b:8a:9b:26:f9:
99:b3:58:84:15:f0:af:54:1a:b9:1a:f3:1b:ed:41:e5:6b:45:
3a:11:d3:ab:30:e5:cb:2c:2e:b5:d9:88:19:ff:af:05:f8:c4:
7a:9d:9a:54:50:db:2e:01:f4:e6:1f:ee:b5:b9:0d:53:47:36:
4e:55:4f:70:8a:bf:2b:9e:a6:cb:04:3d:42:be:a0:e3:a0:65:
54:86:1c:33:6b:78:df:5a:22:58:05:65:07:77:6d:1b:68:1a:
4a:8b:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:22:24 2025 by rpki-client