Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/MKVWoK3wRPR_92nYPkQa4dZVFlU.roa
File: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (raw, json)
Hash identifier: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=
Subject key identifier: 30:A5:56:A0:AD:F0:44:F4:7F:F7:69:D8:3E:44:1A:E1:D6:55:16:55
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 0194DB7B6C942AFC40AA4A50B6DD6DBFE9C9
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/MKVWoK3wRPR_92nYPkQa4dZVFlU.roa
Signing time: Thu 06 Feb 2025 13:38:06 +0000
ROA not before: Thu 06 Feb 2025 13:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43949
IP address blocks: 2.58.180.0/22 maxlen: 22
168.168.0.0/21 maxlen: 21
168.168.8.0/22 maxlen: 22
168.168.12.0/23 maxlen: 23
168.168.14.0/24 maxlen: 24
168.168.15.0/24 maxlen: 24
168.168.16.0/23 maxlen: 23
168.168.32.0/22 maxlen: 22
168.168.80.0/20 maxlen: 20
168.168.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:7b:6c:94:2a:fc:40:aa:4a:50:b6:dd:6d:bf:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Feb 6 13:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30a556a0adf044f47ff769d83e441ae1d6551655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:5a:01:d4:fe:d1:39:76:4b:0e:0c:71:da:
5a:f9:e8:a6:ff:a3:03:6c:49:d6:49:7c:6b:c9:ce:
56:37:34:2d:93:71:1a:d8:1a:5e:89:09:a2:2d:1e:
2a:b6:10:85:5a:15:22:e9:b8:bf:53:5c:ce:61:07:
82:0d:80:28:df:de:2e:00:19:26:b7:a5:63:6c:18:
10:62:74:cc:cc:f4:be:34:ee:82:1a:a2:69:6c:5b:
7e:51:25:29:93:ee:9f:9c:b7:84:34:d4:c5:d0:b8:
27:6c:46:38:4f:bd:4d:1d:48:6f:9d:bc:3b:11:c9:
5a:2f:93:c2:01:ff:2f:71:81:37:a1:55:1b:3e:65:
72:4a:44:59:c1:4b:b2:4d:c5:0e:2b:19:5f:fa:78:
5a:52:c3:e0:61:f4:2e:d8:9e:fa:17:c8:f1:da:3f:
e2:0e:40:56:87:cb:c7:01:6e:b8:08:76:97:c5:3f:
dc:3f:0d:c6:f2:15:9f:65:70:53:71:24:39:46:e8:
3c:e6:0a:52:6f:1a:96:c3:6a:83:9c:46:f0:c5:27:
2a:8b:a1:d0:3d:34:b8:26:6c:8b:ee:bd:01:7b:d6:
c5:63:62:30:72:dc:63:26:ea:2e:2d:96:ad:8d:45:
9e:8c:1e:3b:36:3e:ee:04:00:6d:56:a9:2f:25:47:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A5:56:A0:AD:F0:44:F4:7F:F7:69:D8:3E:44:1A:E1:D6:55:16:55
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/MKVWoK3wRPR_92nYPkQa4dZVFlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.180.0/22
168.168.0.0-168.168.17.255
168.168.32.0/22
168.168.80.0-168.168.127.255
Signature Algorithm: sha256WithRSAEncryption
03:00:80:ec:0c:3e:9c:0c:f9:a4:b3:aa:3c:65:1b:36:ff:07:
97:1d:ed:e2:c1:05:8a:28:d8:12:46:d0:52:69:0d:b1:ad:16:
2e:e1:e8:e5:13:d4:81:8d:a8:b8:7f:69:65:d6:ea:d9:5f:40:
c8:fc:df:cb:97:29:78:07:98:f3:29:16:55:c3:2a:31:ec:25:
40:c1:1b:fb:8b:6a:b3:b5:9c:b9:2d:fb:c1:9c:2c:1b:b6:08:
94:09:c4:96:61:a4:bc:d6:2a:6a:53:5f:3e:e9:6c:1d:a8:94:
ee:e7:30:ac:15:0f:53:f6:98:57:45:74:c7:fc:b2:16:d9:dd:
8d:4c:a7:8b:f5:61:79:ff:48:8b:91:dd:d1:98:66:83:e5:ce:
b5:53:88:b3:cd:31:81:28:a8:e2:0f:ee:7a:da:5b:1e:15:a0:
d9:ca:6c:5d:23:86:26:4b:82:68:77:bd:f4:60:c1:ec:77:c3:
85:c7:cc:a3:95:fb:fc:4f:ad:6e:53:88:f7:6e:3d:a6:39:21:
6d:b1:59:97:8d:12:7b:50:f9:fa:31:2e:09:6e:c5:e5:c8:53:
bc:df:b7:7e:01:10:20:26:e6:e8:15:e4:8e:49:42:8e:57:b1:
8d:79:d7:51:da:88:e7:b7:29:63:6a:b2:84:3c:45:12:a1:14:
a1:69:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:26:39 2025 by rpki-client