Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/MGVqJJOFzu2un2swGTuXTTEGsNg.roa
File: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (raw, json)
Hash identifier: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=
Subject key identifier: 30:65:6A:24:93:85:CE:ED:AE:9F:6B:30:19:3B:97:4D:31:06:B0:D8
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 0194D54E4EB88F9618DCDC34DE48C7F7D49A
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/MGVqJJOFzu2un2swGTuXTTEGsNg.roa
Signing time: Wed 05 Feb 2025 08:51:06 +0000
ROA not before: Wed 05 Feb 2025 08:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208930
IP address blocks: 91.215.47.0/24 maxlen: 24
2001:678:f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:4e:4e:b8:8f:96:18:dc:dc:34:de:48:c7:f7:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Feb 5 08:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30656a249385ceedae9f6b30193b974d3106b0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:6b:e3:6d:a7:b8:1f:5f:57:a0:0e:5f:4c:
63:3a:3b:5c:72:9d:0d:5c:1b:92:c7:2e:1b:fd:65:
2a:d8:e7:2f:28:97:1d:e0:b7:a7:86:71:e3:07:f4:
b9:40:53:25:89:16:45:bd:ff:0c:d8:00:dc:16:76:
c3:d8:6d:e6:2f:4e:fb:74:d0:f4:57:14:fc:8a:ec:
a2:59:0c:49:00:6f:d5:fd:c2:fe:d0:2a:d5:6f:37:
7d:3f:72:8e:85:21:a2:8b:88:8c:51:c3:bb:07:e8:
38:9b:94:fa:60:b6:86:32:4b:c3:87:58:99:69:0c:
46:34:dd:0e:40:ad:47:4b:95:bc:d0:00:e3:9e:da:
8b:c3:0e:06:6a:1e:c2:e2:83:50:14:4a:cd:9a:31:
d9:64:9f:7e:76:98:a7:2a:8c:52:60:3a:77:7b:51:
f1:82:d5:28:86:1b:ab:03:f1:98:03:39:70:0a:5d:
30:2e:a5:95:a4:e9:2b:fc:65:11:54:c9:6a:0d:cf:
cf:5a:1b:f4:7a:65:b5:76:8c:b6:e1:c8:20:6e:95:
e3:7d:72:83:c5:af:2c:ff:4c:5a:c1:9a:1b:50:d2:
69:c0:79:59:ce:b9:1a:59:ce:75:07:db:19:2e:c0:
21:70:f2:30:17:71:9c:e7:68:e1:4a:19:1b:51:7b:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:6A:24:93:85:CE:ED:AE:9F:6B:30:19:3B:97:4D:31:06:B0:D8
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/MGVqJJOFzu2un2swGTuXTTEGsNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.47.0/24
IPv6:
2001:678:f00::/48
Signature Algorithm: sha256WithRSAEncryption
9d:f1:5c:49:15:e8:df:98:90:6b:e4:b7:64:69:8b:65:cc:c7:
0f:89:56:dd:25:b8:7e:59:31:19:a3:3e:e6:d4:21:d5:64:76:
3f:f3:29:4c:a5:61:c6:e5:e7:02:4b:6a:b0:77:3f:5f:ef:d3:
60:4d:be:dc:6f:28:89:71:61:ff:bd:01:50:47:2d:32:5c:24:
1e:43:28:0b:c4:8c:88:ac:ff:64:56:50:0b:1b:64:bb:bf:3c:
47:f0:30:32:e7:da:c5:3b:3f:22:ac:a1:ff:1c:ca:06:6a:af:
e7:88:79:5e:7c:91:59:c1:db:62:42:0c:f7:f1:20:19:f5:73:
24:7f:31:27:ee:cd:7b:b3:17:91:23:9a:88:a7:c6:80:ed:85:
02:d8:ba:30:aa:47:00:50:38:cf:e1:da:5b:49:19:1f:16:e9:
b7:ad:4c:d8:e7:c6:ee:db:a3:6b:03:17:20:58:ae:bf:85:90:
d0:ba:8e:2f:33:d8:b0:81:8e:e1:69:d3:99:72:0a:22:21:a9:
80:16:6c:18:ee:94:da:fa:bf:f8:fc:d7:a8:87:c9:5a:fe:b1:
4e:d6:54:d1:9c:e0:64:4a:29:11:1b:a7:1b:dc:de:a5:7d:fb:
42:35:62:75:90:c2:3a:c1:f0:69:7d:05:86:4f:5d:cc:20:1a:
53:7f:2d:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZTVTk64j5YY3Nw03kjH99SaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0
ZDIxYjEwHhcNMjUwMjA1MDg1MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDY1NmEyNDkzODVjZWVkYWU5ZjZiMzAxOTNiOTc0ZDMxMDZiMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt5r422nuB9fV6AOX0xjOjtccp0N
XBuSxy4b/WUq2OcvKJcd4LenhnHjB/S5QFMliRZFvf8M2ADcFnbD2G3mL077dND0
VxT8iuyiWQxJAG/V/cL+0CrVbzd9P3KOhSGii4iMUcO7B+g4m5T6YLaGMkvDh1iZ
aQxGNN0OQK1HS5W80ADjntqLww4Gah7C4oNQFErNmjHZZJ9+dpinKoxSYDp3e1Hx
gtUohhurA/GYAzlwCl0wLqWVpOkr/GURVMlqDc/PWhv0emW1doy24cggbpXjfXKD
xa8s/0xawZobUNJpwHlZzrkaWc51B9sZLsAhcPIwF3Gc52jhShkbUXv85wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDBlaiSThc7trp9rMBk7l00xBrDYMB8GA1UdIwQY
MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct
YjA5ZTc2NTUzODUyLzEvTUdWcUpKT0Z6dTJ1bjJzd0dUdVhUVEVHc05nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy
LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9cvMA8E
AgACMAkDBwAgAQZ4DwAwDQYJKoZIhvcNAQELBQADggEBAJ3xXEkV6N+YkGvkt2Rp
i2XMxw+JVt0luH5ZMRmjPubUIdVkdj/zKUylYcbl5wJLarB3P1/v02BNvtxvKIlx
Yf+9AVBHLTJcJB5DKAvEjIis/2RWUAsbZLu/PEfwMDLn2sU7PyKsof8cygZqr+eI
eV58kVnB22JCDPfxIBn1cyR/MSfuzXuzF5EjmoinxoDthQLYujCqRwBQOM/h2ltJ
GR8W6betTNjnxu7bo2sDFyBYrr+FkNC6ji8z2LCBjuFp05lyCiIhqYAWbBjulNr6
v/j816iHyVr+sU7WVNGc4GRKKREbpxvc3qV9+0I1YnWQwjrB8Gl9BYZPXcwgGlN/
LaA=
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:21:32 2025 by rpki-client