Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Mgv5r7dZkOEnmETWudx9aUkZqnI.roa
File: Mgv5r7dZkOEnmETWudx9aUkZqnI.roa (raw, json)
Hash identifier: i5QKE6jtRrt/8L9Fb8P/yJjC0DLY3PLvY0gA9/xmlWw=
Subject key identifier: 32:0B:F9:AF:B7:59:90:E1:27:98:44:D6:B9:DC:7D:69:49:19:AA:72
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422203A0D314ABE4EAE3E37877F393FAE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Mgv5r7dZkOEnmETWudx9aUkZqnI.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211043
IP address blocks: 45.67.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3a:0d:31:4a:be:4e:ae:3e:37:87:7f:39:3f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=320bf9afb75990e1279844d6b9dc7d694919aa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:ee:7a:f6:ee:8c:db:e1:66:d7:25:fe:d1:
bc:27:26:f0:4d:29:a0:ab:d8:98:6d:db:13:4b:24:
ad:c1:61:ef:25:ca:bf:47:2e:f4:67:6f:a2:66:92:
24:ad:67:f4:ec:a8:79:dd:1d:00:72:f7:4b:ba:8b:
95:6b:27:d6:a6:a4:d4:de:fc:f7:02:2b:bd:3c:43:
6b:8a:94:a2:3e:8b:e0:16:75:05:d8:20:3e:69:88:
80:da:8c:f2:2a:1d:39:a7:70:45:09:38:b3:22:4a:
99:da:a6:69:be:f0:c7:ec:ee:7d:d0:67:dd:bf:59:
2f:8f:31:78:a3:20:53:62:5b:ef:35:0c:e7:97:14:
b7:70:ae:46:e3:b4:13:eb:50:3b:82:4e:6e:16:46:
51:f4:3d:4c:f4:2f:58:0e:1c:64:55:0b:8b:00:e8:
17:88:32:21:d6:fb:6d:0d:1a:a8:9e:3e:ce:12:b0:
6d:fb:d3:ef:25:ce:36:3d:21:1e:1f:9a:d7:15:a2:
c1:91:df:88:20:85:9d:7f:28:68:5d:09:07:46:b9:
f6:8a:4b:42:89:ab:be:ee:9c:dc:8b:e6:65:af:1e:
5e:2c:a3:58:29:a4:28:b8:6a:7a:d4:43:a8:b7:ae:
78:6f:96:5e:37:89:cb:f0:fd:32:cc:52:10:11:6c:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:F9:AF:B7:59:90:E1:27:98:44:D6:B9:DC:7D:69:49:19:AA:72
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Mgv5r7dZkOEnmETWudx9aUkZqnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.98.0/24
Signature Algorithm: sha256WithRSAEncryption
37:75:10:d9:61:21:ce:01:78:94:6b:1f:87:b6:e1:fd:b6:ce:
63:53:35:e2:b6:3c:1a:40:ac:c2:18:09:9d:e5:a8:fc:57:f0:
6e:5a:be:60:6e:21:05:65:85:af:19:54:9e:bb:77:1a:a0:5c:
7c:02:ec:20:fd:89:b1:26:12:dd:d6:c5:ff:8c:50:d3:87:7d:
07:cb:c5:39:b5:df:76:0e:00:e8:b2:6e:c8:82:09:e2:cb:2a:
6e:3d:5b:41:5c:2c:2c:58:a8:7c:7e:3c:34:af:0f:8e:23:19:
a8:5c:44:e7:eb:e2:44:d6:48:db:89:ba:1e:45:da:5a:14:7f:
7c:12:7b:a1:8e:29:49:46:06:f8:b2:18:a9:46:0f:67:76:97:
40:67:eb:39:75:c6:ed:75:85:0a:ff:67:5e:13:56:11:2c:60:
b3:9e:7a:12:1c:5e:8b:04:0a:6c:0a:f1:92:01:9a:23:9b:c8:
00:82:bf:83:e8:ff:92:5e:dd:65:bc:2c:23:d2:b9:4f:6e:0e:
fd:11:6d:18:d5:a7:e3:1e:83:d3:e1:82:d8:2b:9c:a3:95:6f:
a1:aa:17:f2:fa:55:88:20:e8:ad:fb:be:b5:92:59:d9:f1:6f:
05:45:ec:c2:24:83:06:55:ba:34:20:d8:92:86:46:2c:42:4d:
d4:33:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:55:42 2025 by rpki-client