Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MGvbmBfwDfOzZMHpM-hsuXHJOJs.roa
File: MGvbmBfwDfOzZMHpM-hsuXHJOJs.roa (raw, json)
Hash identifier: 7nckgY7lsEwHKrMcLvgTUMfgXQAP6tooa/Q/lLk0MXk=
Subject key identifier: 30:6B:DB:98:17:F0:0D:F3:B3:64:C1:E9:33:E8:6C:B9:71:C9:38:9B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194EF4FF046C602AF00AAEA5D49612F21E4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MGvbmBfwDfOzZMHpM-hsuXHJOJs.roa
Signing time: Mon 10 Feb 2025 10:03:00 +0000
ROA not before: Mon 10 Feb 2025 10:03:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 89.213.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:4f:f0:46:c6:02:af:00:aa:ea:5d:49:61:2f:21:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 10 10:03:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=306bdb9817f00df3b364c1e933e86cb971c9389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:f9:3f:f1:57:cf:f5:ce:15:c5:4e:82:0b:
d2:c7:fe:9c:74:d6:0f:67:6c:8b:b8:e7:c5:ea:90:
26:47:04:ab:52:97:e6:5d:22:8a:13:9b:fa:70:f9:
ef:88:86:70:11:9f:e1:f6:e5:50:8b:d2:a2:c6:3d:
01:32:ab:77:b8:6a:75:4a:8a:3f:40:b3:11:ce:55:
ee:6a:2c:84:40:bc:75:b2:71:7c:1e:b8:51:a5:02:
e8:58:ad:81:a6:2c:b5:b7:ea:42:1a:96:13:01:b7:
b4:f2:cb:2c:cf:a0:89:32:85:90:bc:01:1c:04:f2:
bb:24:44:62:cf:13:32:cb:f5:92:b0:7d:20:fc:94:
f0:50:47:df:d2:78:a2:29:66:de:0c:1f:3a:c6:66:
72:0d:b9:9b:ba:b2:d1:c4:b2:75:6e:55:25:8a:eb:
8c:12:e6:38:1b:7f:76:30:0e:0e:d6:89:0e:b8:3e:
5a:f4:cc:c8:0a:d6:cc:c5:4c:0d:1c:f9:33:42:f4:
13:4d:61:0a:c9:6e:34:39:de:2f:5c:25:9d:ed:7a:
6e:37:f1:bd:79:fe:77:8c:18:87:7b:2b:2a:97:e8:
a1:97:29:ae:57:f7:82:d6:6d:f6:f7:e0:5d:bb:b2:
ff:28:80:5b:7a:a6:23:0b:a9:3a:a4:bc:bf:63:3e:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6B:DB:98:17:F0:0D:F3:B3:64:C1:E9:33:E8:6C:B9:71:C9:38:9B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MGvbmBfwDfOzZMHpM-hsuXHJOJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ff:39:23:2e:14:a2:25:51:5e:63:19:94:f8:2c:80:00:05:
68:88:f5:12:03:a0:d0:f0:3f:0a:c8:b4:77:4a:40:4e:5c:fe:
a4:50:c9:f2:7a:39:b0:dd:d8:c3:d9:19:6d:c4:a5:43:4d:a6:
51:3d:15:28:ff:a4:f5:c4:3a:32:a7:1a:6b:04:05:82:9f:f4:
84:0c:2c:c3:50:88:0d:f5:89:a4:14:2b:2f:9c:71:a6:71:f6:
de:09:01:7a:2e:28:87:b9:7a:c2:a0:78:5d:5b:cf:2a:6f:72:
2f:b9:9b:e6:1e:96:ed:5d:b1:de:55:7b:fd:e2:65:35:61:c0:
9a:12:f0:c3:b6:1a:79:56:25:53:6d:21:7d:7f:f2:ea:2f:82:
21:e4:56:11:38:6f:a6:bf:d3:47:ef:cf:99:01:83:63:69:0e:
a7:9e:be:7d:63:9f:17:06:15:d4:88:1c:ee:4a:06:cf:5d:18:
80:21:2c:5a:d6:94:7e:1f:be:31:fa:02:68:5f:12:16:37:05:
82:0f:d3:9b:b7:1d:85:cd:27:09:95:ac:b9:98:e5:29:be:6c:
6c:41:5c:94:d1:16:81:59:3f:40:be:88:72:ff:22:be:22:c9:
88:50:91:cd:69:3e:45:31:e4:40:70:97:0e:b9:1f:d7:4e:05:
c2:00:6b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:23:28 2025 by rpki-client