Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa
File: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (raw, json)
Hash identifier: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=
Subject key identifier: 30:A1:B2:25:D1:58:FD:1E:5A:14:D3:F3:1B:A8:E1:F6:A8:B9:2F:C8
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 019426D9AB98C2435285887251749A16A384
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43608
IP address blocks: 62.77.132.0/22 maxlen: 24
62.77.132.0/24 maxlen: 24
78.24.104.0/21 maxlen: 21
78.24.108.0/24 maxlen: 24
185.61.56.0/22 maxlen: 24
185.61.57.0/24 maxlen: 24
2a00:9500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ab:98:c2:43:52:85:88:72:51:74:9a:16:a3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30a1b225d158fd1e5a14d3f31ba8e1f6a8b92fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:2d:4e:43:45:4a:f3:98:d2:55:fc:38:f1:
0c:97:59:c0:83:2a:5d:76:ad:84:6e:3b:fd:db:f2:
93:d1:59:de:c3:96:26:52:d7:f5:f5:9c:61:f9:c9:
12:45:43:fc:32:6a:e2:21:c9:c3:cf:6a:f1:54:8c:
b2:8a:36:db:56:8d:2c:8f:6a:2a:8b:dd:67:36:24:
5c:64:de:08:4a:33:f5:29:48:f1:2d:61:92:90:00:
e0:11:f5:c5:15:ca:f2:a3:a7:20:bb:ed:44:b7:27:
66:83:16:16:aa:1e:fb:26:61:72:dd:96:bd:54:8e:
6a:e4:a9:32:79:8f:8d:ca:ce:d1:6a:3b:58:3c:16:
ea:78:4f:53:19:af:7f:00:06:d5:82:42:65:db:71:
3e:14:86:11:25:e8:96:a7:7d:0b:f4:60:56:3b:b3:
12:37:99:9d:8d:3e:14:6f:8d:41:53:1b:68:e5:df:
90:a3:57:a0:44:d0:45:f3:75:ef:02:70:7e:45:6b:
92:cb:c3:7d:59:13:eb:d6:99:90:48:c3:40:08:96:
45:24:81:68:ad:09:ca:68:f7:3f:63:c6:98:3c:3f:
83:3e:91:46:96:58:0b:dd:cc:71:d0:2b:bd:2e:d0:
ca:8f:47:5e:c4:09:73:51:6d:ed:f6:93:94:53:6b:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A1:B2:25:D1:58:FD:1E:5A:14:D3:F3:1B:A8:E1:F6:A8:B9:2F:C8
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.132.0/22
78.24.104.0/21
185.61.56.0/22
IPv6:
2a00:9500::/32
Signature Algorithm: sha256WithRSAEncryption
80:ef:a1:a6:ce:57:16:42:b9:d5:db:98:c2:84:21:23:f6:84:
61:ab:04:b2:f0:b7:6b:fc:04:49:60:9e:eb:ec:00:dd:46:9b:
05:70:c7:f3:04:e5:5f:75:16:7d:14:9b:6a:de:e9:40:64:88:
f2:73:7d:db:da:66:e4:0d:2f:0b:1f:37:ac:5d:26:3f:49:c6:
6b:14:c5:f2:7f:bb:1e:8f:15:72:14:99:7f:34:6f:21:48:fb:
3d:b2:6b:a2:ae:7c:7e:2c:96:f0:ec:fc:84:57:ef:a8:00:d8:
9d:63:48:8d:39:75:57:a7:8e:0b:56:94:8e:a8:dd:86:5c:3c:
d1:85:26:8f:de:86:c0:09:bb:aa:20:0b:e9:c1:80:d3:aa:e5:
a9:28:2c:5d:fe:f9:a7:8e:10:fe:22:8a:1f:82:ca:b3:7b:ee:
97:84:6c:5a:45:f8:5b:c2:cf:9b:8c:20:44:02:0e:61:df:57:
b5:e4:6c:75:e6:fb:85:72:6c:71:ac:02:8a:ba:9d:ec:76:89:
bd:4c:21:fa:bb:e2:6a:46:f8:ad:18:08:9e:15:b1:ce:f1:7e:
1d:5b:b4:bb:4f:41:41:fe:cd:d9:2b:47:96:ce:5e:2a:03:4f:
b5:f6:04:b0:46:0e:f6:a2:44:b0:8d:d8:a4:7f:a8:5f:9e:20:
c3:3e:a1:f3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQm2auYwkNShYhyUXSaFqOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl
YjliOGQwHhcNMjUwMTAyMTE0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGExYjIyNWQxNThmZDFlNWExNGQzZjMxYmE4ZTFmNmE4YjkyZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FItTkNFSvOY0lX8OPEMl1nAgypd
dq2Ebjv92/KT0Vnew5YmUtf19Zxh+ckSRUP8MmriIcnDz2rxVIyyijbbVo0sj2oq
i91nNiRcZN4ISjP1KUjxLWGSkADgEfXFFcryo6cgu+1EtydmgxYWqh77JmFy3Za9
VI5q5KkyeY+Nys7RajtYPBbqeE9TGa9/AAbVgkJl23E+FIYRJeiWp30L9GBWO7MS
N5mdjT4Ub41BUxto5d+Qo1egRNBF83XvAnB+RWuSy8N9WRPr1pmQSMNACJZFJIFo
rQnKaPc/Y8aYPD+DPpFGllgL3cxx0Cu9LtDKj0dexAlzUW3t9pOUU2satQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDChsiXRWP0eWhTT8xuo4faouS/IMB8GA1UdIwQY
MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt
OWI5Y2Q4OTY1OWUwLzEvTUtHeUpkRllfUjVhRk5Qekc2amg5cWk1TDhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw
LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCPk2EAwQD
ThhoAwQCuT04MA0EAgACMAcDBQAqAJUAMA0GCSqGSIb3DQEBCwUAA4IBAQCA76Gm
zlcWQrnV25jChCEj9oRhqwSy8Ldr/ARJYJ7r7ADdRpsFcMfzBOVfdRZ9FJtq3ulA
ZIjyc33b2mbkDS8LHzesXSY/ScZrFMXyf7sejxVyFJl/NG8hSPs9smuirnx+LJbw
7PyEV++oANidY0iNOXVXp44LVpSOqN2GXDzRhSaP3obACbuqIAvpwYDTquWpKCxd
/vmnjhD+Ioofgsqze+6XhGxaRfhbws+bjCBEAg5h31e15Gx15vuFcmxxrAKKup3s
dom9TCH6u+JqRvitGAieFbHO8X4dW7S7T0FB/s3ZK0eWzl4qA0+19gSwRg72okSw
jdikf6hfniDDPqHz
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:15:21 2025 by rpki-client