Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/mb6SEFuusb8ccfPkUgnr1G-16Gg.roa
File: mb6SEFuusb8ccfPkUgnr1G-16Gg.roa (raw, json)
Hash identifier: Cbmq4R34rOxE+s++uid9OxtsaiHFlr2Tu54+IMtMuXI=
Subject key identifier: 99:BE:92:10:5B:AE:B1:BF:1C:71:F3:E4:52:09:EB:D4:6F:B5:E8:68
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019427B590C6E7485B441F0AE850958B9A38
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/mb6SEFuusb8ccfPkUgnr1G-16Gg.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49171
IP address blocks: 194.61.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:90:c6:e7:48:5b:44:1f:0a:e8:50:95:8b:9a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99be92105baeb1bf1c71f3e45209ebd46fb5e868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:5c:55:62:51:c5:12:8a:74:b2:2f:97:f8:
95:d2:2d:02:c9:87:d0:10:93:08:d3:92:34:ce:3e:
b3:e7:39:e4:5e:c8:e8:be:ae:34:25:ee:39:9a:94:
ed:db:ed:4b:ec:b4:e4:5d:f2:aa:ab:1f:50:52:dc:
df:37:a9:8b:d9:d8:41:55:c3:0e:38:2e:b8:2a:08:
88:d9:56:1f:dc:af:0a:7e:f9:92:84:7b:f1:88:77:
77:82:88:21:81:28:0c:5a:49:a4:4a:fe:cd:6a:56:
be:85:8b:a5:e4:1b:27:24:31:b2:d7:5b:9d:b4:24:
ba:c5:89:2a:3f:57:c6:66:d4:d7:de:44:e1:65:53:
83:5a:d3:98:75:98:44:40:42:14:af:6d:80:41:24:
70:30:6b:34:4b:87:9f:ea:74:4e:af:43:3d:68:62:
6b:eb:bf:0d:0b:2b:a0:d3:7f:52:32:66:b9:49:72:
2a:f2:6c:60:78:06:56:9b:15:cf:3d:0c:07:b5:8c:
bd:e8:38:c9:be:1b:c2:d2:11:86:86:c1:fc:4d:5e:
fe:31:88:4a:59:c2:68:6a:6b:c5:83:1f:15:3e:8b:
28:9b:d1:a0:2c:44:9a:de:8c:0e:13:ba:2e:6a:2d:
70:70:53:e8:b0:1e:bb:e6:15:2d:de:d0:58:57:37:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:92:10:5B:AE:B1:BF:1C:71:F3:E4:52:09:EB:D4:6F:B5:E8:68
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/mb6SEFuusb8ccfPkUgnr1G-16Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:64:7c:7c:ae:8a:0d:21:e0:2f:0b:5a:9c:27:8d:10:b4:07:
15:6f:2b:71:6c:1f:e6:4e:dc:e6:37:86:0a:ac:f8:9e:c1:64:
8b:57:12:c8:6a:2b:c4:23:c1:fc:f2:7c:b1:0e:e1:88:8f:80:
20:a2:35:8d:87:16:e4:42:f8:6f:e1:1a:17:69:5c:2a:7a:d0:
87:c2:c1:1a:9b:3f:44:91:b5:55:6d:03:a5:66:49:52:e7:7b:
72:97:4c:1c:cb:a2:b0:c4:37:e0:44:3a:fd:51:e1:3b:85:24:
da:8b:c5:45:28:01:3b:71:2c:5c:5c:f3:47:99:4c:e4:39:61:
3e:5c:8a:bd:fc:07:08:aa:31:17:c0:52:1b:2d:e4:a8:8a:86:
86:cb:ce:cc:1f:d6:9d:cb:59:ba:1e:e6:76:ef:fc:e8:4e:b1:
9e:31:c6:82:e3:52:9c:49:22:47:31:fc:a6:55:1c:a3:00:ee:
23:8e:60:ff:25:0f:43:93:09:ad:05:d8:96:fd:47:c7:c8:85:
b5:29:48:6e:38:65:77:03:91:1b:b4:11:04:61:3a:4c:77:7a:
5f:57:3a:ed:20:c6:37:da:ce:02:d6:ab:2b:65:81:a2:52:f9:
06:f4:fc:4b:e4:fa:6f:f7:d5:a2:24:b7:b9:6f:86:bf:67:41:
9a:71:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:45:27 2025 by rpki-client