Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/mhspZK5M3yo4tYJXH2BpRshiA1U.roa
File: mhspZK5M3yo4tYJXH2BpRshiA1U.roa (raw, json)
Hash identifier: uoM+dT/0n3HR2pfmnKHmZTSzA6cIh2x/8id1jB95qLU=
Subject key identifier: 9A:1B:29:64:AE:4C:DF:2A:38:B5:82:57:1F:60:69:46:C8:62:03:55
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 0194236A3F5A2D966B83CCEB7DF10D25F714
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/mhspZK5M3yo4tYJXH2BpRshiA1U.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30902
IP address blocks: 78.111.0.0/22 maxlen: 22
78.111.0.0/23 maxlen: 23
78.111.0.0/24 maxlen: 24
78.111.2.0/23 maxlen: 23
78.111.2.0/24 maxlen: 24
78.111.3.0/24 maxlen: 24
87.247.176.0/23 maxlen: 23
87.247.176.0/24 maxlen: 24
87.247.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:5a:2d:96:6b:83:cc:eb:7d:f1:0d:25:f7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a1b2964ae4cdf2a38b582571f606946c8620355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:66:62:c6:7a:6a:95:49:8d:88:cf:a9:70:
55:fe:f7:9b:62:e1:67:58:28:32:a2:bf:c1:06:54:
14:8b:14:26:16:d5:3a:9a:ee:57:67:ad:a6:ad:8f:
5e:8f:5b:a9:d2:32:4b:33:d8:f8:72:38:59:42:29:
b7:52:b8:7e:ed:f4:b5:22:a9:38:61:a2:19:3e:90:
a6:ce:f9:58:d0:6f:72:18:94:cb:73:f5:e7:86:ef:
aa:b4:8f:72:e1:a5:96:16:51:2d:5d:6c:b4:67:1e:
6a:95:88:30:e8:24:2c:e4:f5:4a:56:f9:55:38:3e:
8e:f2:ba:ed:68:39:d1:37:34:69:bc:9f:3d:44:ca:
43:d6:e3:9a:d5:83:12:30:66:bd:33:b0:6f:8c:6d:
d8:3e:33:18:1a:0f:57:d2:a1:21:64:42:ac:cc:34:
74:be:5f:6c:a4:2d:a8:d4:5f:49:3c:c6:2a:23:98:
27:36:68:da:66:bf:15:3e:16:d4:0d:cb:d4:a4:32:
94:0a:40:0b:c1:c6:06:41:37:40:3e:bb:4f:97:b4:
be:2c:a5:77:59:c1:9c:e3:e1:29:1a:7f:c5:da:b2:
71:4a:33:e3:30:95:42:d7:f3:38:b0:f1:2f:ee:7d:
ca:b6:a7:48:bc:d8:8e:a2:6c:3a:15:ee:41:2c:35:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:29:64:AE:4C:DF:2A:38:B5:82:57:1F:60:69:46:C8:62:03:55
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/mhspZK5M3yo4tYJXH2BpRshiA1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.0.0/22
87.247.176.0/23
Signature Algorithm: sha256WithRSAEncryption
43:31:80:2f:03:e7:b6:87:b5:1d:6f:9e:3f:52:86:82:9a:ad:
f3:e6:d2:ca:02:e3:53:65:52:97:b1:3f:88:2b:ca:02:07:7c:
1a:23:ee:04:f6:da:b7:5d:e9:b9:b9:1f:c9:05:3a:bf:73:ae:
f3:6c:e2:c8:86:cc:7a:b0:2b:f6:7b:4b:db:cf:89:5c:08:42:
9d:ca:28:cb:1c:e2:fe:63:ef:db:ae:fa:04:60:12:8f:a3:5b:
63:ec:ba:91:38:91:44:66:7c:0e:fa:93:3b:93:b2:06:63:c9:
a7:aa:4f:a7:e6:02:e7:d5:86:7d:5c:3b:fc:53:25:b6:b3:9e:
28:70:fb:2b:b8:e9:fa:d1:55:0b:1f:ad:3e:e7:93:9a:db:ef:
73:f8:db:ba:e3:a0:2a:e5:a3:6f:6a:68:08:5b:8b:d6:3e:41:
47:3c:c6:49:c2:1f:26:80:bb:9b:3e:2c:bc:34:d2:81:f6:3a:
dc:50:2c:87:5c:11:24:94:67:c7:7c:b2:37:88:2d:75:f8:c1:
4e:bd:c9:a9:ec:5b:8a:01:86:2b:94:29:6f:b8:7f:00:a3:0f:
18:92:0d:5d:61:78:51:8e:d0:9e:96:d4:63:d9:4b:9d:9d:76:
dd:33:85:f6:83:44:de:9a:ac:fc:59:fc:95:6f:9f:9f:92:e9:
b4:f1:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:53:25 2025 by rpki-client