Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/MPC24ig7GybvQGJQS-GC0wxWNWk.roa
File: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (raw, json)
Hash identifier: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=
Subject key identifier: 30:F0:B6:E2:28:3B:1B:26:EF:40:62:50:4B:E1:82:D3:0C:56:35:69
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 019425FDE3C7E74ACAA99F22BBE65F0AEA8C
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/MPC24ig7GybvQGJQS-GC0wxWNWk.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34380
IP address blocks: 193.43.244.0/22 maxlen: 24
193.43.244.0/24 maxlen: 24
193.43.245.0/24 maxlen: 24
193.43.246.0/24 maxlen: 24
193.43.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e3:c7:e7:4a:ca:a9:9f:22:bb:e6:5f:0a:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30f0b6e2283b1b26ef4062504be182d30c563569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:78:72:20:b9:10:95:88:bf:a7:88:45:b8:
6a:fe:a5:00:7b:dc:9b:9e:1c:fc:24:13:df:90:aa:
f3:ec:6a:74:9f:8f:ba:a2:5f:14:5a:7b:fb:b7:13:
b4:a1:b9:2e:70:34:20:23:31:95:61:79:bd:92:90:
28:b6:37:9a:b4:80:7a:38:1a:eb:c0:aa:0e:32:fa:
83:56:b8:9b:c6:a4:f1:7d:20:1e:0a:66:6f:28:ca:
bc:b2:7b:5e:51:93:ff:28:37:df:f4:09:39:7e:d0:
d8:f2:75:13:23:bd:22:92:7d:0c:b4:32:7e:88:23:
51:95:f4:6a:a7:5d:76:7b:ee:00:66:16:d2:6c:13:
bb:10:0a:d8:5c:26:02:d6:2f:ee:3c:69:7c:46:5a:
45:00:6a:c7:f3:24:76:9c:ef:2e:74:f5:c7:f6:94:
20:57:d8:e5:32:76:14:35:fe:1b:ca:64:1c:59:39:
11:3e:57:62:1f:17:59:a5:f2:5f:b0:f1:7a:13:d8:
dc:b4:db:31:3f:2c:5f:d7:3a:47:c3:56:de:95:7f:
6a:8b:c1:8f:7d:c3:65:3b:dd:c5:a3:e1:17:ed:82:
be:48:07:11:ab:4c:1b:e0:6a:23:02:04:61:07:67:
23:dc:2b:c3:0a:03:e7:90:e5:23:7f:2b:8d:ba:28:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F0:B6:E2:28:3B:1B:26:EF:40:62:50:4B:E1:82:D3:0C:56:35:69
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/MPC24ig7GybvQGJQS-GC0wxWNWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:80:bf:c5:69:e3:80:a8:98:db:63:e1:9e:f2:1b:c9:a4:6b:
7e:65:1a:24:d5:ea:c0:86:ed:df:dc:3d:6d:ec:6a:07:97:1e:
ff:7a:2f:77:b9:d7:ad:2a:ad:15:db:77:1a:0d:2c:2b:4b:3e:
ae:65:24:79:9e:ca:70:3e:4a:f4:70:d8:5c:f2:ec:48:24:4d:
e8:e3:2b:48:30:af:54:f4:1d:84:a0:fe:c4:47:33:90:a1:03:
5e:73:41:81:3f:16:5a:b1:7e:e2:c6:15:95:51:eb:d2:de:32:
88:d2:7b:28:8e:45:e4:78:db:57:bd:c5:47:f8:61:3f:41:a1:
e0:28:77:2d:4c:36:d8:ac:df:8b:68:28:ef:e4:6d:76:20:18:
42:c6:6f:c4:60:61:d2:36:af:75:07:68:d1:7d:90:0a:6f:ba:
bb:5c:09:90:06:ff:ff:d8:c3:58:34:d4:2a:f7:83:f2:3f:a8:
88:0f:2d:1d:c6:75:d8:1c:b5:06:17:64:3f:43:cb:cb:fe:63:
31:19:15:a1:cd:bc:03:8f:c2:ce:a5:e8:8f:88:41:00:63:7d:
40:0e:f9:d9:a5:d1:50:c7:1d:8f:83:64:ef:82:01:c0:29:c0:
84:f1:af:0d:fd:03:d9:6b:d4:67:d9:a3:9f:24:ec:60:b4:99:
91:0a:4d:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ePH50rKqZ8iu+ZfCuqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzNhY2Y5MjlhMjIzMzhmMmIzODAxODBjYzg1MmRiNDc3
OWFhZDAwHhcNMjUwMTAyMDc0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGYwYjZlMjI4M2IxYjI2ZWY0MDYyNTA0YmUxODJkMzBjNTYzNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3J4ciC5EJWIv6eIRbhq/qUAe9yb
nhz8JBPfkKrz7Gp0n4+6ol8UWnv7txO0obkucDQgIzGVYXm9kpAotjeatIB6OBrr
wKoOMvqDVribxqTxfSAeCmZvKMq8snteUZP/KDff9Ak5ftDY8nUTI70ikn0MtDJ+
iCNRlfRqp112e+4AZhbSbBO7EArYXCYC1i/uPGl8RlpFAGrH8yR2nO8udPXH9pQg
V9jlMnYUNf4bymQcWTkRPldiHxdZpfJfsPF6E9jctNsxPyxf1zpHw1belX9qi8GP
fcNlO93Fo+EX7YK+SAcRq0wb4GojAgRhB2cj3CvDCgPnkOUjfyuNuiiYlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDDwtuIoOxsm70BiUEvhgtMMVjVpMB8GA1UdIwQY
MBaAFGfDrPkpoiM48rOAGAzIUttHearQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUt
Y2FjYThiODBjOTFjLzEvTVBDMjRpZzdHeWJ2UUdKUVMtR0Mwd3hXTldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUtY2FjYThiODBjOTFj
LzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSv0MA0G
CSqGSIb3DQEBCwUAA4IBAQAagL/FaeOAqJjbY+Ge8hvJpGt+ZRok1erAhu3f3D1t
7GoHlx7/ei93udetKq0V23caDSwrSz6uZSR5nspwPkr0cNhc8uxIJE3o4ytIMK9U
9B2EoP7ERzOQoQNec0GBPxZasX7ixhWVUevS3jKI0nsojkXkeNtXvcVH+GE/QaHg
KHctTDbYrN+LaCjv5G12IBhCxm/EYGHSNq91B2jRfZAKb7q7XAmQBv//2MNYNNQq
94PyP6iIDy0dxnXYHLUGF2Q/Q8vL/mMxGRWhzbwDj8LOpeiPiEEAY31ADvnZpdFQ
xx2Pg2TvggHAKcCE8a8N/QPZa9Rn2aOfJOxgtJmRCk3V
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:31:37 2025 by rpki-client