Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa
File: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (raw, json)
Hash identifier: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=
Subject key identifier: 30:6C:BB:F0:E6:DA:DA:9E:42:A8:C2:23:01:6C:5F:FA:D4:F1:DD:68
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01959462ADA50207A150D87B5E76BDC226E1
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa
Signing time: Fri 14 Mar 2025 11:20:49 +0000
ROA not before: Fri 14 Mar 2025 11:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213579
IP address blocks: 93.126.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:62:ad:a5:02:07:a1:50:d8:7b:5e:76:bd:c2:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Mar 14 11:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=306cbbf0e6dada9e42a8c223016c5ffad4f1dd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:0e:79:e5:96:15:00:55:04:fd:da:85:4e:
ea:32:44:ce:33:3d:9f:7d:28:a6:37:64:f1:ce:f9:
37:ff:9d:88:e2:44:51:7b:80:ac:f6:57:84:08:fd:
78:7b:e5:12:3c:76:ac:3e:32:de:c9:1b:9d:ee:26:
2b:fc:98:d5:fb:62:29:98:68:c8:dc:8a:d0:4e:83:
29:68:6c:f1:23:aa:01:0c:78:d6:1f:a4:a5:7c:f8:
99:7d:d8:8f:03:81:13:d4:63:3f:00:89:8c:60:8d:
74:76:59:d4:e6:3f:8c:0a:05:1e:63:64:f5:7c:e1:
73:c9:e9:a5:e3:bb:de:e8:c6:54:95:21:55:81:b7:
5b:86:01:98:76:e7:35:af:57:18:ef:c7:07:16:7b:
c6:3d:a2:2c:cf:ff:5e:c1:01:04:c1:e8:8b:05:f0:
4a:3a:82:f2:64:59:04:4a:4f:8c:64:0a:1c:4e:cf:
e5:6e:71:a0:1e:a3:35:6b:5e:3f:26:9c:28:fb:2e:
b0:fc:d3:d8:da:e5:4f:15:4c:f6:9f:6d:dd:e0:bd:
ee:6b:cc:b0:4c:bc:fc:10:1e:55:7a:d9:8e:8a:ba:
f7:a2:bb:9a:a2:23:77:16:54:c4:8e:9c:46:f1:3f:
50:42:d4:5e:fc:ab:62:6a:89:41:a0:c8:ba:e7:c9:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:BB:F0:E6:DA:DA:9E:42:A8:C2:23:01:6C:5F:FA:D4:F1:DD:68
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8d:e9:fb:b1:25:18:7f:41:3f:d3:81:91:f5:1c:b8:5c:53:
08:f5:a4:42:bf:21:d7:7a:d0:33:af:2d:c5:bb:29:9d:91:9c:
46:3c:79:8e:3a:df:ab:ef:9d:0e:0f:44:98:46:0a:b4:9c:81:
77:05:0d:b5:13:a4:50:bf:2d:48:f5:05:7b:e8:b6:c7:70:7b:
f0:d4:25:69:6e:76:63:7d:75:de:d9:b8:bf:fb:ce:3b:ff:98:
08:7d:71:9a:d8:c4:06:19:9b:c5:ed:87:62:43:79:e7:4b:08:
42:05:0c:a7:51:a4:67:fe:cd:c3:01:3f:db:c6:15:5b:3c:88:
f8:1b:eb:36:81:95:ae:2c:37:77:a0:d5:03:9c:30:0e:85:e0:
59:87:22:64:63:c8:d1:38:6c:ff:62:bf:87:52:dc:f9:44:32:
3a:2a:bf:4d:d1:2f:2d:20:ce:c4:41:81:48:c9:e5:08:65:e1:
07:dd:4b:b2:1a:03:38:e3:27:88:17:ad:e2:bf:88:a4:bc:76:
f1:7e:11:cc:3c:c6:8d:5e:60:7e:76:a8:35:1e:d7:43:e6:77:
58:ca:6b:b5:c4:89:48:1b:ce:7c:7d:82:0c:f8:ce:a0:f5:96:
79:b5:4e:c9:3b:61:c9:3a:ef:31:7c:71:08:7d:30:80:c4:43:
a7:43:9d:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWUYq2lAgehUNh7Xna9wibhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjUwMzE0MTEyMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDZjYmJmMGU2ZGFkYTllNDJhOGMyMjMwMTZjNWZmYWQ0ZjFkZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ycOeeWWFQBVBP3ahU7qMkTOMz2f
fSimN2Txzvk3/52I4kRRe4Cs9leECP14e+USPHasPjLeyRud7iYr/JjV+2IpmGjI
3IrQToMpaGzxI6oBDHjWH6SlfPiZfdiPA4ET1GM/AImMYI10dlnU5j+MCgUeY2T1
fOFzyeml47ve6MZUlSFVgbdbhgGYduc1r1cY78cHFnvGPaIsz/9ewQEEweiLBfBK
OoLyZFkESk+MZAocTs/lbnGgHqM1a14/Jpwo+y6w/NPY2uVPFUz2n23d4L3ua8yw
TLz8EB5VetmOirr3oruaoiN3FlTEjpxG8T9QQtRe/KtiaolBoMi658l6hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDBsu/Dm2tqeQqjCIwFsX/rU8d1oMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvTUd5NzhPYmEycDVDcU1JakFXeGYtdFR4M1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXX4NMA0G
CSqGSIb3DQEBCwUAA4IBAQBfjen7sSUYf0E/04GR9Ry4XFMI9aRCvyHXetAzry3F
uymdkZxGPHmOOt+r750OD0SYRgq0nIF3BQ21E6RQvy1I9QV76LbHcHvw1CVpbnZj
fXXe2bi/+847/5gIfXGa2MQGGZvF7YdiQ3nnSwhCBQynUaRn/s3DAT/bxhVbPIj4
G+s2gZWuLDd3oNUDnDAOheBZhyJkY8jROGz/Yr+HUtz5RDI6Kr9N0S8tIM7EQYFI
yeUIZeEH3UuyGgM44yeIF63iv4ikvHbxfhHMPMaNXmB+dqg1HtdD5ndYymu1xIlI
G858fYIM+M6g9ZZ5tU7JO2HJOu8xfHEIfTCAxEOnQ52F
-----END CERTIFICATE-----
Generated at Tue Apr 15 07:31:03 2025 by rpki-client