Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MNamUZCYqQdFWw9w_it4xBJQr64.roa
File: MNamUZCYqQdFWw9w_it4xBJQr64.roa (raw, json)
Hash identifier: TpVreUAYeyR1Peo8xeqq7r0L/O5Z6PIyehd9gPqsYhs=
Subject key identifier: 30:D6:A6:51:90:98:A9:07:45:5B:0F:70:FE:2B:78:C4:12:50:AF:AE
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01942220022D32F1427D309871C5D8D5A80E
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MNamUZCYqQdFWw9w_it4xBJQr64.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 185.78.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:02:2d:32:f1:42:7d:30:98:71:c5:d8:d5:a8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30d6a6519098a907455b0f70fe2b78c41250afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:e8:ea:9b:93:2b:e3:bd:15:16:d7:d0:67:
76:28:3f:71:eb:e7:97:03:63:3a:58:29:98:e5:bf:
9c:dc:c0:8b:0e:c7:c9:0b:6a:7a:4a:fe:78:f4:64:
bf:57:f7:30:5e:de:38:d5:74:01:72:90:67:f5:48:
f9:81:d9:37:a4:27:2c:6a:0a:00:df:58:8b:a3:46:
65:6b:cc:f0:ea:bf:42:df:9f:41:56:c7:a6:e7:21:
ac:41:8c:7c:fc:0d:de:16:e0:a5:4b:09:55:c6:a3:
0b:27:07:ef:4e:a1:31:28:da:ca:52:db:6b:6e:92:
05:8c:31:be:e3:62:76:09:34:3e:e2:3b:0e:de:cb:
fe:4a:ad:1e:1e:8f:14:63:f3:05:72:a1:05:91:bd:
e0:c7:14:75:5b:65:8a:1e:e9:59:10:ea:7a:3b:f9:
39:d0:22:0d:41:48:e2:1a:80:65:b4:ca:85:f8:ba:
b6:8e:67:3a:16:a8:16:bf:31:68:8a:0f:52:90:8b:
c5:bf:3f:16:b0:7e:73:50:c8:9f:77:18:2b:f5:1d:
0e:c2:e8:4a:4e:2d:93:fb:7e:be:3b:01:fe:6a:46:
7c:88:17:07:dd:1d:e6:5f:5c:f3:c2:dc:7c:1a:ce:
03:6c:69:17:b8:0a:72:a1:b7:42:f7:5e:04:17:86:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D6:A6:51:90:98:A9:07:45:5B:0F:70:FE:2B:78:C4:12:50:AF:AE
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MNamUZCYqQdFWw9w_it4xBJQr64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.76.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f6:c1:2f:20:3a:e9:6d:d7:2a:f6:6c:40:4e:be:60:51:29:
94:55:b1:1e:dd:17:c3:b5:49:a5:94:08:36:2c:0e:f0:5e:b8:
f6:d6:4d:cc:90:3d:a3:57:d9:39:ba:4e:56:5b:28:2b:fd:22:
6c:78:93:39:ab:ff:9f:60:fb:e2:03:67:b1:5c:ef:ce:29:3c:
34:4e:fa:ee:8a:b0:97:61:4a:38:f3:f3:08:91:34:bd:68:0b:
da:4f:b1:84:09:4c:9e:71:46:cf:75:06:59:3b:63:73:b4:c6:
14:ff:3d:f8:c8:87:10:34:18:ad:69:29:f0:67:9f:cc:e5:6b:
31:88:96:1b:6f:a3:a6:b7:83:11:e0:da:c4:13:a9:47:e1:bf:
11:35:ec:2b:d9:e0:45:1c:64:67:4a:8c:ff:80:cd:49:75:01:
cb:b4:6e:6d:20:c3:5d:3f:bb:c9:b7:28:38:64:c5:87:47:10:
2c:7d:7d:46:d8:56:f0:0b:95:9f:2e:35:6f:ad:27:1a:08:92:
1d:93:8c:d2:54:36:34:41:44:2d:be:c9:19:9e:01:40:14:1f:
eb:23:c0:ed:d4:b4:68:5d:92:a7:2c:a8:25:23:eb:bb:fb:12:
62:5c:9d:b9:ac:83:60:a2:ea:c6:55:34:4c:ff:19:e1:24:43:
8c:b0:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:53:47 2025 by rpki-client