Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MQC4zw7k_zsLGlyuhuQYFn_rbvI.roa
File: MQC4zw7k_zsLGlyuhuQYFn_rbvI.roa (raw, json)
Hash identifier: 1kidjWlxwghuwYD0R6jIsmrJhDbUCu9EiLChUTtqniU=
Subject key identifier: 31:00:B8:CF:0E:E4:FF:3B:0B:1A:5C:AE:86:E4:18:16:7F:EB:6E:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194DCD57FA43265DDD84248A5E0AC3193A9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MQC4zw7k_zsLGlyuhuQYFn_rbvI.roa
Signing time: Thu 06 Feb 2025 19:56:06 +0000
ROA not before: Thu 06 Feb 2025 19:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213762
IP address blocks: 82.153.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:d5:7f:a4:32:65:dd:d8:42:48:a5:e0:ac:31:93:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 6 19:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3100b8cf0ee4ff3b0b1a5cae86e418167feb6ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:dc:3c:78:ee:cd:eb:ee:30:b8:79:51:d5:
85:d4:1f:4d:60:79:61:db:31:35:10:dd:09:e2:24:
72:24:85:69:16:48:07:e3:c3:e0:07:69:17:2f:64:
81:2d:40:47:40:9b:c2:c1:a5:61:c2:22:ff:44:bc:
e8:14:63:bb:43:54:41:ce:76:dd:7c:e1:47:a9:17:
76:af:6c:ea:90:8d:ea:50:14:32:6f:ff:a4:9d:cf:
f6:36:2d:02:55:f6:a9:53:42:38:62:5a:9e:c2:10:
f4:cf:b5:52:7a:55:0a:f8:1b:7c:d4:6f:14:51:5b:
b5:bd:4e:78:41:37:69:47:33:dd:0d:7b:54:b8:a1:
96:7f:ef:c5:03:87:3f:b6:f9:ae:8b:93:ad:7d:c4:
2c:8b:40:ee:12:e5:cf:05:21:32:68:2a:b6:4d:49:
bf:3b:4b:e7:26:89:f8:87:3a:a9:8f:53:6e:b2:e7:
b1:d5:b3:ef:ad:68:33:0d:80:b2:44:99:fd:70:c0:
a7:56:69:c5:8c:3a:b3:5c:24:89:e4:af:1e:38:04:
4e:19:c7:35:cc:3c:96:77:63:5e:43:f8:a1:ad:77:
69:fa:4f:6a:16:3f:73:81:98:21:59:86:5c:bd:46:
8c:88:dc:1b:48:a0:10:d0:31:91:24:04:aa:fc:74:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:B8:CF:0E:E4:FF:3B:0B:1A:5C:AE:86:E4:18:16:7F:EB:6E:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MQC4zw7k_zsLGlyuhuQYFn_rbvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.79.0/24
Signature Algorithm: sha256WithRSAEncryption
24:55:90:55:6f:b6:fd:4c:44:45:e8:e6:dc:c2:0b:dd:c6:b6:
b2:80:6a:62:f4:9c:2a:ef:11:19:91:74:a4:8d:4f:5b:26:92:
0e:12:a6:89:89:b0:cc:fd:d6:5d:b9:8a:f1:aa:3d:eb:a7:a7:
87:b0:af:57:13:14:49:88:c9:2b:42:a9:8b:6e:b0:be:2d:7e:
c0:48:83:9b:e1:d8:71:9c:07:eb:cd:fc:bf:b6:33:b7:80:03:
57:fb:84:81:a3:80:bb:c0:e6:1d:3a:ff:46:be:17:26:dd:0b:
f2:db:d6:bb:d5:9a:10:e6:01:31:59:89:cb:ec:07:34:f8:20:
39:ae:11:5e:dd:52:d7:07:62:9c:9f:6c:34:34:49:59:a9:68:
21:e5:ea:02:06:69:b3:ef:0d:39:8d:3b:a9:70:7f:d1:f1:48:
82:d5:e0:f8:f7:e3:4b:be:dc:4c:45:4b:65:df:ae:6a:e9:93:
3d:14:d4:44:2d:1b:97:5e:df:cf:a3:73:3f:ed:a1:d5:ff:c6:
26:cb:85:f3:95:19:16:ce:a8:1f:d0:68:a6:a5:38:5a:2f:42:
b4:29:22:db:c8:c7:90:fb:a7:82:42:21:8e:a7:03:68:b9:4c:
88:a5:d3:4e:05:2e:86:ce:f4:b4:b7:ab:87:59:50:19:0d:1a:
33:c1:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:26:25 2025 by rpki-client