Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/macgBtbCg5Mxhslrz0OHJiQKlew.roa
File: macgBtbCg5Mxhslrz0OHJiQKlew.roa (raw, json)
Hash identifier: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=
Subject key identifier: 99:A7:20:06:D6:C2:83:93:31:86:C9:6B:CF:43:87:26:24:0A:95:EC
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019421B1F176D2766D83B284FD8EE0B20523
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/macgBtbCg5Mxhslrz0OHJiQKlew.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 185.162.217.0/24 maxlen: 24
185.162.218.0/24 maxlen: 24
185.162.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f1:76:d2:76:6d:83:b2:84:fd:8e:e0:b2:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99a72006d6c283933186c96bcf438726240a95ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:80:f0:ec:37:8b:ae:45:35:e4:b5:70:2d:
8c:a3:2b:d8:c8:e8:87:57:13:97:d0:47:fe:d3:44:
5c:5c:6e:fa:d0:0f:93:85:e5:bd:34:d0:42:e8:a2:
97:41:26:0f:7a:f6:35:42:d0:53:d3:c9:02:cd:94:
2c:cf:8c:fc:28:5c:11:b0:5d:d0:8b:d2:41:d5:60:
23:40:00:e1:4d:19:1b:2b:68:c3:7c:58:5b:15:e4:
da:f5:c2:d8:f1:5e:7d:72:94:50:21:37:ae:b1:fe:
8d:10:c3:e5:14:30:cc:b8:8d:28:2d:a3:8a:de:54:
b2:e1:6a:4d:9b:c7:99:a8:b2:da:78:7d:22:ee:a5:
3a:9f:45:c5:99:c2:2a:f0:bd:d9:08:1d:24:e9:49:
0a:27:87:ec:fe:b8:06:f9:f8:c6:da:c1:41:df:3a:
a0:64:ab:f9:28:f9:f8:10:18:9a:51:61:31:b8:fb:
5d:af:35:14:ed:24:ad:8d:d4:8c:24:ad:48:7d:33:
be:1f:3b:24:98:5e:8a:1a:58:a6:81:87:6e:6f:83:
10:c0:f2:a4:72:5c:a8:73:61:84:0a:3b:88:28:ea:
d4:18:3f:04:a4:d1:81:50:a6:57:1c:cc:4d:23:e0:
79:b8:34:22:40:45:c8:fd:73:1e:9c:09:c3:29:5b:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A7:20:06:D6:C2:83:93:31:86:C9:6B:CF:43:87:26:24:0A:95:EC
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/macgBtbCg5Mxhslrz0OHJiQKlew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.217.0-185.162.219.255
Signature Algorithm: sha256WithRSAEncryption
17:82:00:25:30:42:fc:1f:5b:5f:64:59:80:f1:d4:f3:c4:22:
d8:72:74:d6:52:80:77:2a:22:e7:ac:73:9d:92:59:a3:49:58:
28:36:f3:9e:22:a6:f2:dc:66:66:54:a4:01:e8:06:5b:60:78:
11:2d:30:1d:d1:db:7e:49:d2:9d:1b:cc:78:c1:36:b8:77:52:
35:df:fc:ac:19:0c:bd:2d:8d:5b:ee:24:f6:30:40:1c:34:e6:
dd:15:db:90:53:18:2e:df:b5:44:f6:74:d4:9b:55:29:46:82:
1f:1b:a4:d9:1c:ae:c3:fb:a7:63:af:1f:2c:cd:3e:f3:b3:e0:
ad:a8:9d:09:e4:3b:ca:71:01:8c:d4:77:61:f7:79:79:ed:7c:
b4:ea:28:cf:9e:b3:83:e9:66:99:c4:f5:8f:9b:0f:c8:5b:38:
0d:f9:3d:3c:86:8d:db:d1:90:fe:55:c2:3b:42:6e:4b:b1:9d:
f2:c1:1e:41:30:f4:8e:18:ab:69:55:db:28:ad:02:54:99:da:
0f:d9:a8:e2:bd:f3:4a:2d:23:3d:76:2a:a2:55:dc:ba:4f:df:
c4:72:16:e5:d1:9b:6c:3f:9f:88:fe:bb:fb:76:da:02:ca:cd:
1a:8e:8a:13:3b:e7:0a:4c:6e:29:79:1e:b4:44:8f:6b:20:14:
00:b9:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:52 2025 by rpki-client