Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa
File: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (raw, json)
Hash identifier: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=
Subject key identifier: 98:62:80:12:3E:2F:8B:1E:70:CF:74:F2:DC:3D:D9:F6:29:9E:01:E4
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F916D3CC5C98392E8850EF30D5C8F
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201215
IP address blocks: 89.252.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:91:6d:3c:c5:c9:83:92:e8:85:0e:f3:0d:5c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=986280123e2f8b1e70cf74f2dc3dd9f6299e01e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:9d:15:00:d5:e2:74:ec:64:72:72:af:08:
d4:ce:63:fc:c5:7e:e4:61:64:b6:58:66:e3:ca:cc:
85:b8:9e:9d:e1:03:3f:ed:c1:c2:61:65:fb:a4:80:
d0:17:5b:d1:72:40:00:56:7d:89:fd:a9:0a:b9:6e:
8b:36:50:bf:6a:26:bc:99:25:d5:88:5e:4b:88:df:
f0:1a:5d:ca:ed:6d:9f:9a:52:f0:02:96:be:f1:5f:
37:cd:51:08:dd:96:dc:28:ed:f9:7a:aa:92:89:eb:
a2:c7:6f:3d:21:72:67:39:64:b9:5c:97:58:3d:bb:
13:d6:c9:1e:a8:fb:6d:4f:12:5e:50:4e:e4:72:f2:
0f:9c:ea:8f:e0:1c:57:9a:91:f4:4f:8e:e3:71:d8:
e3:9d:b8:6e:e2:3b:19:7a:d5:b5:88:2d:38:ab:af:
48:dd:b3:d7:15:64:48:1b:3d:e0:80:6b:61:30:5d:
75:4b:04:39:93:18:62:67:c4:36:a7:a3:2a:e1:cf:
8e:32:72:a7:20:0a:77:30:33:0b:0b:cb:da:b7:b1:
af:7a:b4:f5:dc:a1:b9:96:db:1d:a1:05:36:9d:d5:
7d:50:d9:c6:07:06:b0:44:25:85:ba:3a:97:c3:25:
61:e4:e7:45:9e:99:2a:a7:c5:ae:45:f6:d3:74:4c:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:62:80:12:3E:2F:8B:1E:70:CF:74:F2:DC:3D:D9:F6:29:9E:01:E4
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.202.0/24
Signature Algorithm: sha256WithRSAEncryption
df:99:9c:0d:b5:8a:dd:f8:f8:28:3b:77:65:87:67:b2:d7:f7:
3b:e9:a9:68:5d:64:b0:84:9b:ad:4d:37:34:c1:c6:90:e3:b4:
bc:7b:55:f6:80:c4:c7:58:19:a5:9c:e9:7c:56:b2:e1:f0:76:
01:fc:85:3f:13:30:db:82:16:6c:34:57:07:5f:28:7b:7d:dd:
4d:d1:dc:4c:ce:cd:70:d2:d3:c8:62:4e:ae:f6:c9:70:1c:8e:
6e:6d:78:6f:60:a9:30:f6:85:85:a5:ab:bf:cf:73:cc:07:d6:
8a:4a:28:53:a0:ab:2b:c9:c6:b2:79:c1:3d:3e:ee:3a:ed:93:
2f:0f:c7:cf:4c:da:97:3b:e4:4f:78:f1:e8:a3:72:64:02:0c:
51:83:dc:bc:d9:35:28:67:ca:cc:1c:a5:68:f6:7c:72:ac:37:
85:00:1c:7a:cc:a8:33:32:da:54:1b:49:f0:a9:12:27:17:bb:
9e:c9:3f:5c:49:77:cb:58:63:31:08:3a:e9:84:7a:49:d7:86:
17:22:50:c5:96:86:65:ca:78:1e:36:96:a0:11:a3:98:04:dc:
4a:24:e1:62:14:9c:46:23:d8:c3:58:ba:30:4c:1a:26:e9:d6:
73:f4:44:69:6a:de:53:ec:60:87:26:9c:89:ea:ba:7c:1d:df:
43:57:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:36:00 2025 by rpki-client