Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MTc6DzW7OSPf-xqtm9YpYDeoCQg.roa
File: MTc6DzW7OSPf-xqtm9YpYDeoCQg.roa (raw, json)
Hash identifier: kBgLfVd+5pJyceK7GgH69qQdF0X4/8G/J+oRPVdWWk8=
Subject key identifier: 31:37:3A:0F:35:BB:39:23:DF:FB:1A:AD:9B:D6:29:60:37:A8:09:08
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421443B0FC1BE02A1790C33D30881C6C2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MTc6DzW7OSPf-xqtm9YpYDeoCQg.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
89.213.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3b:0f:c1:be:02:a1:79:0c:33:d3:08:81:c6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31373a0f35bb3923dffb1aad9bd6296037a80908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:57:dd:cb:fe:76:da:31:ce:69:d4:49:60:
0b:d0:9a:d4:a4:99:6f:a1:0d:be:60:02:f2:6e:d4:
3c:9c:04:8d:e0:cd:7b:64:95:19:b7:f1:28:eb:bf:
aa:2b:6b:f0:e4:e0:59:a8:1e:53:03:98:be:63:19:
f5:c2:7c:6c:8d:7c:e1:c2:ae:6c:0c:09:fc:bd:f0:
5b:9c:a5:d5:ad:8f:05:27:b6:62:61:82:5f:f8:b9:
cc:16:73:54:c1:9f:68:30:11:27:1f:a2:5b:fb:9a:
94:22:c7:3d:27:b2:8f:00:61:de:07:77:f0:e2:18:
0f:e4:1e:cc:2f:e9:c6:8f:08:13:b8:bb:82:df:fa:
96:95:74:28:f1:a7:8f:3f:6f:ea:ca:3e:d3:11:f4:
04:1e:f7:05:67:18:90:92:32:79:01:45:8f:d0:d3:
f0:63:82:d4:b6:1e:25:a0:c8:eb:1b:d8:d6:4f:de:
5c:12:f8:e8:bb:63:ed:a9:45:a6:79:30:b5:1d:24:
da:91:cf:b6:db:74:94:6c:b1:69:7d:69:04:d5:c9:
25:c9:47:03:52:8f:8b:e4:14:16:60:6b:21:32:5e:
fc:f0:2c:4c:d3:4c:2c:18:83:08:9b:60:95:10:ce:
f1:2f:c0:56:53:99:b3:12:30:9f:69:78:2f:3f:c4:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:3A:0F:35:BB:39:23:DF:FB:1A:AD:9B:D6:29:60:37:A8:09:08
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MTc6DzW7OSPf-xqtm9YpYDeoCQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
82.152.252.0/23
82.152.255.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.249.0-82.153.250.255
89.213.136.0/24
Signature Algorithm: sha256WithRSAEncryption
38:07:e7:82:24:bf:40:5c:10:0c:ab:e5:89:91:ac:69:8c:39:
24:66:63:d0:3a:ce:a0:ea:37:1c:02:ad:4d:ff:db:25:16:f0:
a1:41:a8:76:8e:10:d9:ec:41:21:1d:fa:3a:3f:d2:47:7a:4e:
dd:8f:df:8c:1f:14:22:af:27:06:78:54:f6:d9:3d:fc:5c:b2:
f8:22:0b:d1:9a:02:9e:ba:7c:b5:f5:c2:db:fe:45:49:ae:3c:
81:b4:2d:2e:eb:2f:30:98:2c:0f:3d:46:9a:94:e5:3a:1b:71:
2a:67:80:08:fa:96:a4:d4:4e:86:2d:e2:24:7a:78:0b:06:7e:
21:a4:2c:47:48:2e:34:77:e1:99:87:5d:2e:a5:d1:16:63:44:
bf:f6:bb:63:8f:ca:62:13:87:75:9b:60:bc:9c:39:00:2c:fa:
a9:53:20:30:ea:5b:85:32:6a:75:e3:e9:c0:76:2b:d8:09:2f:
7f:cc:cf:e2:28:fb:3c:d0:e0:0f:63:44:b3:9d:f9:dd:00:43:
e6:a3:07:63:15:75:59:ed:1d:05:af:78:07:83:5e:42:c9:d5:
da:c8:ea:a0:ec:ea:01:09:48:77:87:fb:e9:b7:70:ea:07:fe:
26:1e:e7:74:56:1c:15:75:9f:78:ea:3d:2d:a8:02:4f:51:3d:
45:87:a3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:51:29 2025 by rpki-client