Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MgnuWkf6_TFENIc9Sd1lujLOh3I.roa
File: MgnuWkf6_TFENIc9Sd1lujLOh3I.roa (raw, json)
Hash identifier: IWb28F+8iqz8aRGXYayD4E7uQCoOl1cf1SrIx0dpKc4=
Subject key identifier: 32:09:EE:5A:47:FA:FD:31:44:34:87:3D:49:DD:65:BA:32:CE:87:72
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369AB7DA82ADB71CBF0632203C9256B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MgnuWkf6_TFENIc9Sd1lujLOh3I.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59910
IP address blocks: 86.107.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ab:7d:a8:2a:db:71:cb:f0:63:22:03:c9:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3209ee5a47fafd314434873d49dd65ba32ce8772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:f8:d4:cc:33:e0:15:c1:32:fe:5d:ef:ce:
c3:c3:dc:b7:ad:29:87:22:31:4b:99:0f:f3:46:07:
f3:1e:8c:c1:d8:a7:4f:71:9a:e9:2f:91:78:6f:30:
7b:21:94:cd:79:b5:b1:a5:c2:80:0d:1d:f9:09:b0:
96:01:42:00:36:ce:83:ee:1c:3d:b4:9d:a5:4e:e3:
dd:0e:90:db:b0:54:66:16:c8:ef:19:60:1e:d0:20:
d0:60:35:a6:71:92:a4:7c:22:71:90:b1:a5:aa:9a:
63:22:c7:82:ae:8b:c9:5e:19:ea:36:07:8a:15:a2:
87:56:ec:55:ac:78:6d:f0:0c:a0:32:52:e4:40:18:
f6:8f:2e:45:c0:6b:7c:27:65:90:d7:3c:04:21:5e:
bb:f9:b2:ab:4a:7a:e8:34:01:66:2e:95:0e:e7:48:
ca:75:a1:9d:7b:a7:ac:a2:7f:a5:7a:25:a9:bc:f4:
90:d1:ba:3e:8b:80:4e:e8:f9:56:48:d1:39:96:1e:
19:40:d6:8a:d1:23:a9:27:4c:66:dc:3f:2a:8a:40:
e5:02:6e:ef:a1:41:70:79:56:c1:82:81:e9:03:a6:
55:71:ce:b7:5e:54:9d:be:69:41:fc:8e:fb:49:7c:
1b:b7:0d:c6:71:48:24:4a:95:98:d2:f1:8e:49:c8:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:EE:5A:47:FA:FD:31:44:34:87:3D:49:DD:65:BA:32:CE:87:72
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MgnuWkf6_TFENIc9Sd1lujLOh3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.111.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:09:7d:91:90:b0:2e:7f:2b:6e:bc:5f:6f:b7:81:ee:3a:03:
fa:02:31:12:a7:bc:8f:c1:ef:9a:73:b1:68:b6:aa:10:bd:34:
e9:29:6b:f9:4e:d7:53:da:2e:ea:b0:b3:78:12:82:3e:4e:bc:
33:a7:7a:c9:69:66:88:b8:cb:4f:39:e7:9f:07:40:d1:49:8b:
11:3e:90:d3:10:be:02:04:77:d8:d3:21:78:d8:fb:d0:ed:5e:
9a:92:05:fd:97:f4:c4:18:a6:04:51:5a:2c:ef:db:8c:19:5c:
38:f4:bd:9d:27:63:a3:c1:8a:9c:ae:7c:07:9b:1b:23:4e:62:
22:0a:89:6d:69:f7:9c:0e:96:14:8f:5c:17:9c:ac:7f:de:2b:
e8:be:88:5e:b7:e4:7b:8e:d9:10:75:15:0f:65:8d:ad:fe:73:
48:60:36:b8:64:21:5a:48:4d:f1:a6:2d:0b:0d:15:19:d8:4e:
ab:fb:27:f7:fd:42:30:e1:ea:81:80:7c:9a:6f:1e:18:73:b8:
93:f9:9e:3c:17:24:34:b3:31:71:f4:02:25:d0:da:d5:26:40:
84:f3:44:59:ad:b9:08:97:3b:73:66:32:b5:61:be:17:20:6c:
9b:f1:7d:53:a3:3c:0a:94:b0:9a:00:3a:b2:fc:c3:9d:4b:15:
0a:30:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:04 2025 by rpki-client