Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/mQBN2-oU2oudork8oow4c77Beac.roa
File: mQBN2-oU2oudork8oow4c77Beac.roa (raw, json)
Hash identifier: FsVN//20JFkmpyNtdeWnGtk0kBJNGpFrlCSP7YEmOqY=
Subject key identifier: 99:00:4D:DB:EA:14:DA:8B:9D:A2:B9:3C:A2:8C:38:73:BE:C1:79:A7
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 01946A63E36F108476D030AE23F016DDFC1A
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/mQBN2-oU2oudork8oow4c77Beac.roa
Signing time: Wed 15 Jan 2025 14:35:18 +0000
ROA not before: Wed 15 Jan 2025 14:35:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215120
IP address blocks: 91.227.33.0/24 maxlen: 24
93.157.138.0/24 maxlen: 24
93.157.139.0/24 maxlen: 24
193.178.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:63:e3:6f:10:84:76:d0:30:ae:23:f0:16:dd:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Jan 15 14:35:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99004ddbea14da8b9da2b93ca28c3873bec179a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:45:f3:c8:b1:43:7e:cd:cd:c4:f1:83:5c:
48:6d:d0:8d:9c:c4:b2:ee:61:7e:06:a3:3f:ef:89:
2b:48:b4:b8:ef:45:5a:f0:94:96:37:49:5c:cc:43:
67:98:42:32:c3:48:5e:57:ef:10:0f:15:25:89:91:
a1:72:4b:2a:2d:a4:dc:ed:82:71:53:eb:d8:8d:ab:
f0:6a:d0:9a:fc:2e:aa:1b:51:c9:ab:e7:d7:1c:75:
a2:13:83:86:98:11:97:89:2f:8e:1b:7b:e2:c2:0d:
58:63:7b:4d:ba:56:92:cc:97:be:4f:75:b4:7a:d1:
2e:4f:3e:4d:0e:a0:c1:7b:41:5e:3b:07:13:a6:d9:
a8:04:0d:c1:6e:7c:ff:fe:44:6f:41:02:89:e0:d9:
fc:01:b1:96:aa:a2:2c:56:5e:54:c1:d8:0a:fa:09:
c5:03:b3:98:40:d6:6c:62:10:77:88:8a:1c:eb:bf:
ba:17:ae:fc:d2:d5:07:1d:d4:b6:57:01:14:f2:ab:
44:ef:b2:48:4f:a8:66:e1:5a:0b:db:c5:78:1a:14:
5c:d4:09:da:c8:99:16:23:c7:fb:25:0d:1b:7f:c5:
08:21:4e:3a:a1:7e:6e:34:39:61:4d:88:40:e5:8e:
a0:48:2e:fd:54:85:54:7a:c7:87:2f:92:b1:92:f4:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:4D:DB:EA:14:DA:8B:9D:A2:B9:3C:A2:8C:38:73:BE:C1:79:A7
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/mQBN2-oU2oudork8oow4c77Beac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.33.0/24
93.157.138.0/23
193.178.186.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:3a:59:5a:46:25:3c:be:10:ee:18:f6:74:1b:33:1d:19:4a:
39:3e:c6:17:45:ab:89:f4:a0:c9:d2:69:b2:f2:73:3f:35:52:
94:a5:09:8b:88:ae:db:5f:aa:df:a0:15:42:e4:5e:a2:30:77:
bc:64:de:5c:83:d7:73:f0:89:47:d1:56:fc:fb:a6:90:fc:ce:
d5:fc:9b:54:64:6d:7a:f2:9c:d3:7e:40:2c:b7:1f:4d:e9:6f:
71:8a:e1:51:be:76:e2:45:cb:48:58:40:5c:0a:01:6b:25:2f:
28:46:1d:0d:a6:55:ad:c0:62:f8:dd:a9:f0:bd:cd:54:e1:02:
7c:cd:de:63:49:bc:89:65:ff:0a:34:f2:f1:ca:2a:9e:1d:49:
d1:75:17:ff:75:3d:fd:c5:4d:95:ef:b4:95:a8:2d:52:06:fd:
32:b8:d0:0b:4e:00:f2:c4:82:09:4f:7c:52:e1:3d:07:49:54:
03:a5:2d:57:8e:3f:7a:3a:5c:8c:04:6b:97:cf:29:c9:6c:93:
6f:98:9d:ce:9d:1e:31:ba:80:2c:2b:29:28:38:91:92:df:e2:
4b:7c:4a:70:13:8d:6f:9e:fe:ac:c0:73:79:55:e5:c3:94:71:
1e:b8:1b:d5:6a:73:41:a1:d2:94:34:a1:48:55:0a:14:03:ae:
0d:5b:ed:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:47 2025 by rpki-client