Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/mUymegp4IR9xYnPFjz3cMX5BkMI.roa
File: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (raw, json)
Hash identifier: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=
Subject key identifier: 99:4C:A6:7A:0A:78:21:1F:71:62:73:C5:8F:3D:DC:31:7E:41:90:C2
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 01942444DDBEE158CE0AB0D37BEA809552A0
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/mUymegp4IR9xYnPFjz3cMX5BkMI.roa
Signing time: Wed 01 Jan 2025 23:48:00 +0000
ROA not before: Wed 01 Jan 2025 23:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59545
IP address blocks: 93.157.0.0/21 maxlen: 32
195.5.163.0/24 maxlen: 32
2001:67c:54::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:dd:be:e1:58:ce:0a:b0:d3:7b:ea:80:95:52:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=994ca67a0a78211f716273c58f3ddc317e4190c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:6c:e9:9e:48:ca:f5:f0:26:8d:34:a0:53:
85:b6:5b:f4:b6:91:4c:50:04:04:46:35:93:a7:14:
af:ac:c6:26:07:2e:b2:0b:ed:5f:06:31:ea:f2:6f:
3d:6e:a4:fa:3f:52:c8:09:6a:89:27:cd:4a:f2:b2:
a0:0e:6f:bb:94:e1:d2:71:d9:14:3e:9e:0e:ee:d5:
67:35:6a:0e:7e:c6:ab:69:e3:a0:31:8f:fd:b3:08:
58:e2:e8:b7:2d:0d:18:6c:df:ee:0c:01:4f:28:6c:
4d:b9:8b:c5:c2:ab:e8:c0:61:ea:e9:34:4c:32:07:
75:c6:7c:97:f8:44:39:34:33:97:59:8d:5c:e5:1e:
89:4c:6f:b1:78:68:6b:4a:ba:49:8b:9d:61:ad:a3:
52:68:50:64:a0:2b:88:f9:c6:a8:03:b9:ca:77:ce:
cc:aa:db:95:9a:ae:d4:fa:b7:7b:6f:7c:21:cc:39:
97:7f:63:19:1f:0d:90:84:03:96:69:29:1a:8e:92:
f0:70:9a:a5:82:42:46:da:6a:9f:d0:20:01:dd:f3:
5a:e5:a1:b0:50:1b:cf:e1:e5:d3:42:10:1b:49:9b:
cc:a5:b8:c4:ab:54:1d:84:90:db:54:33:b2:94:16:
12:d4:af:6a:e4:ce:c2:a4:60:b0:14:f7:2c:7b:88:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:A6:7A:0A:78:21:1F:71:62:73:C5:8F:3D:DC:31:7E:41:90:C2
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/mUymegp4IR9xYnPFjz3cMX5BkMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.0.0/21
195.5.163.0/24
IPv6:
2001:67c:54::/48
Signature Algorithm: sha256WithRSAEncryption
ac:f5:ec:a5:94:29:c8:54:57:75:b3:11:e1:bf:29:54:2c:df:
54:84:08:f5:d6:2f:75:09:c5:18:17:e6:3f:d2:b0:c8:d7:f9:
db:c3:1b:8c:ee:9d:dd:e4:17:a9:87:7f:34:88:85:3f:8e:14:
98:4a:be:c0:c5:1e:a3:5e:34:66:ab:d6:f9:1f:39:b0:87:11:
e2:37:c9:15:7b:fc:5b:36:24:a0:91:74:a9:bc:d1:92:99:1d:
41:7c:81:70:2c:81:86:c8:40:2a:4a:9b:48:a2:a3:78:36:96:
48:b1:d4:9e:14:1f:03:e4:97:b4:3f:15:14:03:80:89:90:55:
d1:d2:7d:3e:21:c8:ae:10:23:5c:56:e6:90:c2:94:04:b1:d7:
06:74:4b:81:30:e3:8f:54:b2:f3:20:f9:f5:8a:2d:e2:39:fc:
d7:1b:d5:6e:05:05:f9:ed:b3:79:92:4a:46:5d:ad:be:57:9b:
85:e6:06:66:01:69:81:16:02:5c:39:28:78:57:84:50:4d:96:
3f:31:e2:6a:f3:4b:3d:b4:f1:6c:24:80:5a:26:95:0b:30:70:
63:8a:82:24:4f:4d:e9:13:5e:21:4c:31:d3:bc:15:55:39:55:
67:ce:2b:0f:c3:f1:f3:4b:a0:f6:49:09:e3:f5:8d:66:78:7c:
c4:8b:a4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:15:29 2025 by rpki-client