Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa
File: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (raw, json)
Hash identifier: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=
Subject key identifier: 32:66:90:35:7A:9D:63:4B:8A:87:E9:3A:43:79:40:5C:8D:42:87:3F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 0194266BEBB823AEDD4E6F1ECE9984F07861
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 193.142.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:eb:b8:23:ae:dd:4e:6f:1e:ce:99:84:f0:78:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=326690357a9d634b8a87e93a4379405c8d42873f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:f2:ac:1b:c6:44:f0:18:6c:9e:13:8b:4a:
25:cb:2c:43:d4:04:34:34:94:ea:95:ba:b5:bf:ad:
7c:c7:91:2c:b2:e4:f3:16:02:68:97:d1:f6:ac:5c:
42:88:e3:22:ac:fc:44:90:45:19:01:ad:a8:a9:ad:
9a:20:23:df:74:b1:cd:03:05:b2:f7:e2:d9:20:7b:
c3:d6:c6:77:56:9d:f3:30:fe:f3:81:45:ee:c8:81:
92:f1:c0:9a:04:a8:0b:8a:56:da:43:2f:b9:4e:41:
1f:3a:97:e6:ed:ab:99:ee:f3:a8:d9:90:a0:7e:b6:
16:76:f3:9c:25:da:f6:de:a1:af:c6:b9:68:72:44:
e4:f5:c3:6a:21:57:76:28:b0:24:91:1b:f5:50:bb:
df:fb:7b:31:10:a4:15:ab:5c:9b:53:c5:c3:85:37:
ca:72:7a:62:a0:b4:a3:24:dd:75:c2:11:0d:b9:c3:
35:30:55:27:f1:28:56:d9:c0:91:af:28:aa:8d:42:
04:7b:23:ec:aa:e4:39:37:ad:74:a0:2b:9e:e6:84:
97:83:1f:c6:78:a6:2d:17:16:a1:0e:71:67:c4:b1:
8a:18:1e:aa:7d:be:ea:ac:7e:f9:f8:b2:f1:8a:ef:
91:bb:e5:18:d7:46:0e:a6:cc:f8:e2:c9:88:b5:57:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:66:90:35:7A:9D:63:4B:8A:87:E9:3A:43:79:40:5C:8D:42:87:3F
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.245.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c9:a7:33:7c:1e:77:e7:9d:0a:6d:5f:0b:a3:54:48:f2:65:
89:7c:c6:bd:49:af:1f:c1:ea:e5:7e:a2:76:76:6f:22:e1:45:
1b:b4:fb:8b:d5:a0:9a:25:0f:cb:ec:d8:1e:11:5e:80:b6:b6:
5b:16:e6:7e:9d:e2:89:11:08:45:32:c9:a8:e3:c5:38:38:10:
a4:6a:f8:8e:e2:bd:c2:d8:26:70:d3:67:51:07:a4:70:ca:af:
12:11:3e:92:5a:64:ed:29:88:8a:59:3f:0c:b8:11:7a:bd:41:
4d:2d:d6:ce:38:2e:7c:a7:46:57:d3:b0:75:d7:c1:35:ac:98:
78:60:40:db:ed:0e:c5:7c:fd:9d:35:a9:19:76:8c:8d:7e:9c:
1b:83:a3:d1:64:f8:68:9e:c3:ab:58:b0:e0:7f:86:9f:8d:0b:
49:76:e1:b5:f2:5a:e2:21:6e:2d:ca:03:fc:b4:f6:0f:c8:dc:
62:39:5a:97:e5:86:7c:c2:37:c9:be:32:db:32:5d:7b:5e:e1:
ce:a2:58:3e:65:74:cb:71:f0:ae:7f:b6:63:2b:a5:6b:4b:e6:
ae:0f:19:f3:7e:aa:a3:bb:22:1c:99:03:eb:07:4b:49:5a:b7:
96:f0:36:42:47:51:25:2f:a4:2b:cc:4b:b6:3c:b0:53:c6:f9:
de:d2:b3:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+u4I67dTm8ezpmE8HhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw
YjUxOGYwHhcNMjUwMTAyMDk0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjY2OTAzNTdhOWQ2MzRiOGE4N2U5M2E0Mzc5NDA1YzhkNDI4NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmLyrBvGRPAYbJ4Ti0olyyxD1AQ0
NJTqlbq1v618x5EssuTzFgJol9H2rFxCiOMirPxEkEUZAa2oqa2aICPfdLHNAwWy
9+LZIHvD1sZ3Vp3zMP7zgUXuyIGS8cCaBKgLilbaQy+5TkEfOpfm7auZ7vOo2ZCg
frYWdvOcJdr23qGvxrlockTk9cNqIVd2KLAkkRv1ULvf+3sxEKQVq1ybU8XDhTfK
cnpioLSjJN11whENucM1MFUn8ShW2cCRryiqjUIEeyPsquQ5N610oCue5oSXgx/G
eKYtFxahDnFnxLGKGB6qfb7qrH75+LLxiu+Ru+UY10YOpsz44smItVfUaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJmkDV6nWNLiofpOkN5QFyNQoc/MB8GA1UdIwQY
MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt
MDE2ZDZkY2ZhZDgxLzEvTW1hUU5YcWRZMHVLaC1rNlEzbEFYSTFDaHo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx
LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY71MA0G
CSqGSIb3DQEBCwUAA4IBAQBVyaczfB53550KbV8Lo1RI8mWJfMa9Sa8fwerlfqJ2
dm8i4UUbtPuL1aCaJQ/L7NgeEV6AtrZbFuZ+neKJEQhFMsmo48U4OBCkaviO4r3C
2CZw02dRB6Rwyq8SET6SWmTtKYiKWT8MuBF6vUFNLdbOOC58p0ZX07B118E1rJh4
YEDb7Q7FfP2dNakZdoyNfpwbg6PRZPhonsOrWLDgf4afjQtJduG18lriIW4tygP8
tPYPyNxiOVqX5YZ8wjfJvjLbMl17XuHOolg+ZXTLcfCuf7ZjK6VrS+auDxnzfqqj
uyIcmQPrB0tJWreW8DZCR1ElL6QrzEu2PLBTxvne0rMA
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:02 2025 by rpki-client