Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/MYuqoMzDVi1acZcNDb9FA7d3gCM.roa
File: MYuqoMzDVi1acZcNDb9FA7d3gCM.roa (raw, json)
Hash identifier: tUaun7mhti9TK8aJqqe0a+bLVD50ReQW/RjSFMudsMM=
Subject key identifier: 31:8B:AA:A0:CC:C3:56:2D:5A:71:97:0D:0D:BF:45:03:B7:77:80:23
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 0194214425E1A4870A98795DDD2833A66FAE
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/MYuqoMzDVi1acZcNDb9FA7d3gCM.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62282
IP address blocks: 37.156.216.0/21 maxlen: 21
37.156.217.0/24 maxlen: 24
37.156.219.0/24 maxlen: 24
37.156.220.0/24 maxlen: 24
37.156.221.0/24 maxlen: 24
37.156.222.0/24 maxlen: 24
185.38.164.0/22 maxlen: 22
185.38.166.0/24 maxlen: 24
185.79.244.0/22 maxlen: 22
185.79.244.0/24 maxlen: 24
185.79.245.0/24 maxlen: 24
185.79.246.0/24 maxlen: 24
185.79.247.0/24 maxlen: 24
185.193.24.0/22 maxlen: 22
185.193.25.0/24 maxlen: 24
185.193.26.0/24 maxlen: 24
185.193.27.0/24 maxlen: 24
2a01:41a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:25:e1:a4:87:0a:98:79:5d:dd:28:33:a6:6f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=318baaa0ccc3562d5a71970d0dbf4503b7778023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:e8:5a:56:80:a5:a6:ba:7e:3c:58:4c:c2:
83:d1:88:ec:4f:9e:28:fb:9e:40:47:43:f9:28:ae:
ad:83:6d:1b:16:38:0b:26:e6:7f:09:c6:96:f6:30:
b3:aa:08:bc:fb:05:ae:fe:0c:2b:16:2f:15:e8:c8:
1e:3e:d6:5c:f3:1e:e1:b5:91:65:c5:cf:c7:29:68:
8b:07:fa:91:cf:ff:43:ef:c7:a4:16:2c:4e:a3:3e:
50:da:55:d7:c4:df:74:e7:10:51:aa:6e:e7:58:77:
2c:14:13:70:73:80:39:b4:0c:6b:69:36:cb:91:f3:
8a:1a:46:e4:0e:67:52:d2:7f:06:b7:f4:85:fc:47:
74:88:26:9a:64:a6:f9:a4:9a:e2:4d:0f:5e:42:11:
f4:29:cb:0d:2a:78:72:09:08:9a:14:1a:fd:5d:b0:
92:62:0e:c9:a4:eb:db:d9:b5:6a:c9:23:61:40:02:
63:0b:f9:1a:a1:44:7a:d1:cd:c5:21:f0:19:71:cc:
d2:e2:14:56:8c:e2:a3:e8:2d:3f:cf:93:25:fc:a6:
5a:69:33:85:d8:29:65:eb:54:24:2d:0f:7e:37:6e:
d6:0d:70:55:fa:2d:37:c6:04:d6:6c:d1:14:5a:dd:
3d:ee:ae:ea:f3:11:81:a0:02:59:db:10:ff:0b:a0:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8B:AA:A0:CC:C3:56:2D:5A:71:97:0D:0D:BF:45:03:B7:77:80:23
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/MYuqoMzDVi1acZcNDb9FA7d3gCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.216.0/21
185.38.164.0/22
185.79.244.0/22
185.193.24.0/22
IPv6:
2a01:41a0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:ff:d5:22:74:2d:c2:77:8c:bb:e7:b0:15:1f:1f:6a:11:6c:
2b:67:3a:da:24:06:30:1c:72:f7:5e:11:12:32:33:af:30:fa:
78:33:b1:7d:e8:c4:14:77:2c:18:4e:f2:f5:d5:cd:54:7c:44:
f8:12:08:db:ef:92:6e:6c:6e:16:fc:1a:51:8a:1a:88:e9:2b:
fa:43:ff:9a:fe:58:fd:e5:cb:6f:76:48:11:98:a3:69:4d:c1:
91:af:ea:5f:fc:7b:19:e5:8b:e5:0d:1e:59:d4:3a:83:c9:63:
64:37:4f:29:fa:ae:14:7c:60:35:3e:94:2f:ed:6e:8b:12:69:
cd:28:f3:4e:72:75:9c:03:06:a2:5e:67:a4:1f:4c:48:5a:f5:
78:5f:e5:9b:25:40:07:51:37:57:9b:da:e6:54:36:d6:b4:08:
ff:bb:d6:35:4c:d2:85:62:61:db:61:15:1c:12:d7:2f:43:c7:
35:85:df:af:6e:07:42:a6:fd:7e:fc:0f:d5:e1:76:17:2e:68:
f4:88:f4:03:60:62:08:44:fd:43:26:9e:81:dc:77:25:0a:7b:
45:8e:d3:9d:37:d1:b2:8f:96:c8:4f:71:89:d1:18:d7:cf:5c:
37:cf:7e:82:e6:38:3f:8e:d2:6d:e1:54:0d:ee:48:25:78:c1:
6c:e4:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:25 2025 by rpki-client