Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MnFKoxgmsdEIbNoSosdGU_Wvdhc.roa
File: MnFKoxgmsdEIbNoSosdGU_Wvdhc.roa (raw, json)
Hash identifier: oddtpLRvVjy8mKr5HIi9ikk2gsz4RnMVNM5QMl5dbSc=
Subject key identifier: 32:71:4A:A3:18:26:B1:D1:08:6C:DA:12:A2:C7:46:53:F5:AF:76:17
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194740AB6E9F90547775C04FE785742D212
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MnFKoxgmsdEIbNoSosdGU_Wvdhc.roa
Signing time: Fri 17 Jan 2025 11:34:06 +0000
ROA not before: Fri 17 Jan 2025 11:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
89.213.50.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
213.218.234.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
217.145.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:0a:b6:e9:f9:05:47:77:5c:04:fe:78:57:42:d2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 17 11:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32714aa31826b1d1086cda12a2c74653f5af7617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:4f:d8:c9:a2:b6:f0:73:11:c4:23:27:01:
71:cb:2a:5e:5b:63:58:c4:ad:67:fe:b5:9d:09:cd:
8f:27:f9:f8:12:7b:8d:df:e3:0b:0b:c1:0d:ad:7c:
21:b7:f7:8f:ec:f3:6a:a1:b0:29:f9:52:bf:f3:e3:
e2:ff:e7:9c:8f:be:8b:74:ce:60:08:f9:1b:23:76:
29:67:24:08:0c:30:b1:cd:e8:38:fb:0f:f6:63:a0:
0b:88:a7:30:9c:0a:d9:e6:66:e8:cb:1b:da:0d:b8:
65:97:27:c7:f5:b1:ad:79:45:a8:6d:74:a0:6e:c2:
d0:99:ea:e3:9c:09:a9:1d:1b:e0:ff:e3:ac:ce:c1:
9a:1f:a5:d8:80:6a:75:d8:f5:36:49:28:72:dc:42:
03:9b:eb:a5:41:3d:07:11:06:ff:06:69:a6:7b:a4:
74:bb:89:f0:d7:98:b1:17:0e:5d:12:a4:ff:f2:d5:
6e:ad:69:c4:cd:2e:db:5f:65:9e:8c:04:f0:9c:ed:
00:90:c9:cb:05:4e:ff:d6:21:1e:3a:e2:5b:25:bf:
5d:94:8f:7e:0e:a6:50:5d:45:4f:d8:69:de:6e:f7:
4d:39:91:44:58:c5:9e:ea:28:ab:ab:10:26:a9:91:
2b:ef:df:0b:da:d2:78:a9:f6:6f:f0:d2:a4:41:6a:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:71:4A:A3:18:26:B1:D1:08:6C:DA:12:A2:C7:46:53:F5:AF:76:17
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MnFKoxgmsdEIbNoSosdGU_Wvdhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.98.0/24
82.153.205.0/24
89.213.50.0/24
109.176.244.0/24
212.38.79.0/24
213.218.234.0/24
213.218.238.0/24
217.145.68.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7b:1d:0f:18:7d:12:05:3c:6a:38:1f:8c:92:04:0a:0e:2d:
6f:6d:a5:2e:b9:a1:63:67:43:a4:f2:e7:18:81:d9:42:0d:dd:
85:6a:eb:9b:36:de:90:c6:f1:27:56:48:82:07:49:03:cd:19:
8b:e7:fa:e4:8c:43:a4:c8:55:2b:64:21:cf:c2:ef:07:d9:dc:
0a:58:7a:c4:6e:3e:2e:30:9a:61:99:6d:ce:17:c9:4e:8f:1a:
25:00:23:fc:c9:98:41:be:d1:f5:1d:99:b4:18:c8:1a:18:66:
4d:f8:c6:f5:d6:58:3c:85:f1:0f:74:89:fa:68:8f:fd:65:ad:
21:6c:2d:e6:47:03:57:cd:6d:16:b8:0a:d5:56:e1:ae:eb:82:
ac:b9:e2:37:fb:5f:ec:55:e9:a0:1a:dc:d6:c6:7a:95:8f:56:
08:ef:fb:36:9e:0c:67:d1:88:9e:ed:38:ca:39:e2:de:be:9d:
d9:99:d4:03:f6:c3:92:f6:7c:48:12:f4:70:a2:fd:79:7f:6c:
35:9f:d4:9c:b1:5f:fd:73:da:1a:60:8c:1d:7b:37:81:23:00:
ba:5c:8f:cc:dd:20:f7:37:ee:f5:6c:0f:5a:38:c4:7b:b4:1e:
26:b6:47:4f:5e:bd:4a:e2:26:07:01:ff:29:72:53:27:1f:27:
cc:61:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:44 2025 by rpki-client