Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa
File: 00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa (raw, json)
Hash identifier: /nCoLNktQTRkwf19+RkLZm6+K8Um4Om/CE/FhAF+NuE=
Subject key identifier: D3:43:24:9F:80:0B:87:3D:BF:3E:C6:24:C8:43:B1:D4:8E:04:AE:CC
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0194244566D7210747FDDF8C170AF1AF40A3
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202997
IP address blocks: 195.235.24.0/24 maxlen: 24
195.235.25.0/24 maxlen: 24
195.235.26.0/24 maxlen: 24
195.235.27.0/24 maxlen: 24
195.235.28.0/24 maxlen: 24
195.235.29.0/24 maxlen: 24
195.235.30.0/24 maxlen: 24
195.235.168.0/24 maxlen: 24
195.235.169.0/24 maxlen: 24
195.235.228.0/24 maxlen: 24
195.235.229.0/24 maxlen: 24
195.235.230.0/24 maxlen: 24
195.235.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:66:d7:21:07:47:fd:df:8c:17:0a:f1:af:40:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d343249f800b873dbf3ec624c843b1d48e04aecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:c5:4f:11:2e:dd:52:5b:7f:1b:b7:94:2a:
6a:bb:1b:46:20:65:ff:0f:eb:e5:6a:e8:cb:5f:92:
f8:a3:69:66:1c:ed:6f:44:cb:82:d8:f1:be:b2:95:
83:92:4a:57:92:02:4f:99:6d:ad:5e:42:5c:56:42:
90:ff:8d:b2:bc:d9:b9:af:0e:01:8b:3e:05:5e:ee:
2f:11:a5:ec:db:85:3c:57:e9:93:0a:bb:9b:5e:4e:
40:b1:4e:12:ed:05:94:7d:41:b4:58:49:d8:cc:64:
19:f7:78:0c:4c:dd:91:87:f3:e2:19:76:a5:86:3e:
de:c5:f4:b8:c3:a9:be:49:a1:bb:d1:38:49:22:1d:
dd:ce:5a:96:d9:12:2b:dd:90:72:b3:f3:9e:43:61:
ed:18:9e:fa:d5:a8:96:75:81:3f:e9:dd:d4:ed:6b:
d4:0f:e2:27:2f:71:58:25:67:2c:1a:2f:4b:1f:7c:
a3:84:84:0c:28:25:6e:cd:4b:de:82:f5:f6:66:53:
95:b6:d8:75:ad:81:a6:53:57:c1:a8:d3:d6:f4:0a:
55:bc:0d:19:49:8e:0e:ff:8e:4b:9a:b8:e1:eb:18:
e4:c6:9d:54:e8:44:00:11:b5:e0:46:f9:c6:ea:6f:
e2:61:01:5f:5c:e2:d2:de:75:91:62:c2:31:02:86:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:24:9F:80:0B:87:3D:BF:3E:C6:24:C8:43:B1:D4:8E:04:AE:CC
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.235.24.0-195.235.30.255
195.235.168.0/23
195.235.228.0/22
Signature Algorithm: sha256WithRSAEncryption
73:6b:43:06:ab:31:77:4a:a0:cb:c2:34:c7:87:1e:c5:6b:8d:
02:6a:06:f5:21:b4:1b:18:53:90:9f:dc:0f:2f:cb:9f:1d:8a:
28:c3:ad:bf:97:6e:85:5e:da:4b:6d:c3:a7:c2:25:73:2f:90:
04:02:a6:92:e9:79:02:4a:c6:26:7a:b2:50:c7:6a:89:f7:29:
a3:73:4c:f2:e0:8c:c5:73:f9:af:c1:99:c4:eb:a5:31:18:6c:
3f:f7:a1:8a:89:7f:85:b5:e1:c7:90:fd:a4:4f:b9:57:5e:12:
4a:0c:32:13:c3:7b:47:4f:da:79:76:a1:4f:15:57:f2:48:1f:
a7:a6:28:06:66:99:af:5a:c6:49:d4:c7:cf:c0:09:9b:27:a0:
d5:a5:94:4d:f1:78:52:29:84:9c:13:20:5f:38:3d:7c:4e:69:
ee:8d:ba:c3:30:4e:42:df:fa:79:10:4c:67:9c:f2:71:62:97:
6c:18:d3:56:92:52:a0:37:bb:78:1b:2d:0e:e8:2c:e6:22:eb:
24:28:69:0d:b7:88:ad:10:a8:d8:28:1b:a9:37:2b:fa:6e:16:
b2:16:c6:2a:0a:2e:f4:e9:cf:b4:90:96:f5:f0:79:bc:f1:00:
8f:a8:d3:24:e3:02:a3:15:76:99:89:bb:72:73:cc:f1:c7:a4:
cc:88:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:41 2025 by rpki-client