Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mzAMS2R-ET7r40lcKoAmSbBfzVU.roa
File: mzAMS2R-ET7r40lcKoAmSbBfzVU.roa (raw, json)
Hash identifier: YNZ98rfnCVUA0MdhgM/gAZlYNyEFbcR+8pfHHOc9FaU=
Subject key identifier: 9B:30:0C:4B:64:7E:11:3E:EB:E3:49:5C:2A:80:26:49:B0:5F:CD:55
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214417D089BD3EA69488E93F7EDEBEA6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mzAMS2R-ET7r40lcKoAmSbBfzVU.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212332
IP address blocks: 82.153.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:17:d0:89:bd:3e:a6:94:88:e9:3f:7e:de:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b300c4b647e113eebe3495c2a802649b05fcd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:33:00:71:03:57:94:0a:45:7e:b9:64:06:
51:c2:f0:99:fc:be:31:d3:d6:25:d5:a3:78:41:cd:
b2:12:39:74:60:0a:e4:78:9e:00:72:d9:8f:65:1b:
57:0f:81:38:4d:fd:4d:69:9f:16:1a:f9:1d:25:f5:
f7:df:10:55:90:e0:bd:3a:7f:e4:52:23:a8:78:37:
0e:98:16:a2:9c:84:d8:b1:c1:9c:95:76:d4:a7:7b:
9a:dc:de:12:4f:58:11:53:db:34:ba:64:f3:89:b5:
19:68:34:42:0f:ad:94:56:37:83:99:ab:b1:cf:7b:
9b:5f:28:74:2a:93:2e:c4:a9:dd:7a:9d:4d:45:66:
c7:90:b5:5e:b6:66:09:00:dd:2a:67:68:00:2a:0f:
53:21:50:e4:a7:e3:11:d3:7f:3f:c0:0f:a1:34:22:
a4:fe:e3:0b:eb:b5:5f:58:88:e0:28:8e:7f:c5:4e:
40:d9:1c:46:b7:d4:44:15:35:a8:2c:c3:65:99:13:
c7:a9:4a:88:18:43:51:4c:bc:f1:47:ab:0a:12:df:
1b:dd:61:bd:8e:c9:b2:1d:85:01:c4:a0:02:a1:e1:
97:86:27:50:0b:38:ca:41:61:87:c6:60:21:ff:39:
f2:7b:9a:e1:58:2d:6b:d4:bd:82:55:b3:cf:80:c6:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:30:0C:4B:64:7E:11:3E:EB:E3:49:5C:2A:80:26:49:B0:5F:CD:55
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mzAMS2R-ET7r40lcKoAmSbBfzVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.242.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2f:a6:1a:d4:a3:c8:93:d5:d6:ef:aa:01:63:ff:91:1c:9d:
a9:a2:b5:cc:ee:e1:1f:24:f2:13:c5:83:c9:59:0f:2d:cd:77:
13:7a:71:16:64:42:96:be:70:84:f9:dc:41:15:51:86:84:ff:
4f:0b:c4:00:30:38:e4:5d:62:6c:8d:49:89:6a:9a:a1:5f:6c:
30:7b:f4:36:8a:bb:37:5e:54:81:bf:36:18:38:d2:61:c8:4c:
83:82:f3:2b:e0:47:22:ce:14:48:48:5c:05:49:f4:91:be:e5:
dc:73:6a:8b:e3:c0:a0:2a:e1:6d:5e:1a:53:11:b9:1e:19:16:
2a:4b:70:a1:3b:2c:7b:f7:6e:79:96:83:d8:51:50:b3:9c:4f:
90:38:ce:06:33:65:4d:04:8f:50:cf:92:8a:5e:ac:47:2e:9f:
21:96:c3:0c:2f:62:f8:0d:37:07:66:a7:9f:15:52:4d:fa:ff:
50:3b:1f:ba:2f:9e:ed:55:21:81:39:71:27:6e:2b:de:11:d6:
3d:f8:2c:23:eb:6a:4c:8a:8a:50:7e:a8:1a:63:52:bc:73:6a:
ae:64:4d:aa:76:9e:5c:de:cc:97:a6:66:19:c1:f7:d3:c3:77:
b3:88:87:16:76:b3:63:1f:6b:54:8c:a3:46:be:ee:19:2f:67:
e7:47:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:36:09 2025 by rpki-client