Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa
File: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (raw, json)
Hash identifier: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=
Subject key identifier: 33:1B:1F:E7:2E:C5:3F:71:03:07:18:1D:C8:9C:47:1B:E3:AA:55:ED
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 01942521D8D0B90F458842EC96F5BAC1ED00
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208398
IP address blocks: 5.45.192.0/18 maxlen: 24
5.255.192.0/18 maxlen: 24
37.9.64.0/18 maxlen: 24
37.140.128.0/18 maxlen: 24
77.88.0.0/18 maxlen: 24
84.252.160.0/19 maxlen: 24
87.250.224.0/19 maxlen: 24
90.156.176.0/20 maxlen: 24
92.255.112.0/20 maxlen: 24
92.255.127.0/24 maxlen: 24
93.158.128.0/18 maxlen: 24
95.108.128.0/17 maxlen: 24
141.8.128.0/18 maxlen: 24
178.154.128.0/19 maxlen: 24
178.154.160.0/19 maxlen: 24
185.32.187.0/24 maxlen: 24
213.180.192.0/19 maxlen: 24
2a02:6b8::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d8:d0:b9:0f:45:88:42:ec:96:f5:ba:c1:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=331b1fe72ec53f710307181dc89c471be3aa55ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:f7:84:e4:e9:0e:87:61:33:4b:d4:aa:a2:
cc:b5:b4:3b:c3:4d:e8:e5:c4:a5:d6:97:5e:a6:b4:
a8:9e:68:dc:26:66:1c:c8:0d:0e:56:d8:9a:91:16:
fc:3f:ff:57:96:8c:17:5e:4b:37:73:fb:77:45:7d:
19:30:29:ad:d5:84:9a:ea:92:9c:bb:72:93:61:4d:
1d:12:c0:81:23:66:76:6c:e7:f0:c1:f2:b9:b7:6b:
69:cc:5d:ed:7e:a1:3a:7b:d1:59:da:ce:ba:55:10:
03:bc:1f:8a:34:5e:f9:e9:e2:da:52:a8:ce:ac:a0:
1a:06:fa:5d:a7:23:e3:7f:c9:8f:d9:8b:92:5c:51:
51:e6:8b:2a:ad:bd:97:35:58:2d:9e:3f:48:91:99:
c5:ee:dd:e2:70:8c:98:ff:e4:24:99:75:0f:59:22:
d9:21:c6:20:e8:aa:66:c5:db:10:8e:9f:12:4f:96:
03:f7:6a:85:ad:32:c6:ad:47:0f:ab:ee:e6:68:2a:
6d:91:39:9d:7c:cc:3a:c4:16:19:cc:7e:be:d0:1f:
a3:71:9b:55:29:0b:c5:88:3e:55:d5:e8:0f:ee:5c:
d4:5a:50:ca:86:95:00:a6:3a:7d:73:1d:3a:94:47:
66:91:d5:5f:53:be:bf:49:68:9e:e8:fc:d0:ac:09:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:1F:E7:2E:C5:3F:71:03:07:18:1D:C8:9C:47:1B:E3:AA:55:ED
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.192.0/18
5.255.192.0/18
37.9.64.0/18
37.140.128.0/18
77.88.0.0/18
84.252.160.0/19
87.250.224.0/19
90.156.176.0/20
92.255.112.0/20
93.158.128.0/18
95.108.128.0/17
141.8.128.0/18
178.154.128.0/18
185.32.187.0/24
213.180.192.0/19
IPv6:
2a02:6b8::/29
Signature Algorithm: sha256WithRSAEncryption
98:bd:fe:74:b7:f3:55:3f:e2:6f:92:42:5f:2c:df:35:ee:40:
80:37:00:7e:3b:43:26:fa:8f:b3:5f:47:ad:7c:0c:a3:de:39:
ff:2b:de:9e:56:d4:00:d4:12:27:26:e7:d4:ba:90:1e:5b:d2:
06:a1:9f:97:f9:d7:53:80:e9:30:43:4c:37:42:e8:ee:a8:83:
48:3f:dc:c7:5f:fd:85:d5:0f:96:a4:94:eb:fa:61:0e:56:c2:
89:15:df:f3:4a:5a:69:2a:72:3b:84:85:1a:d8:d3:4c:83:0d:
7a:f4:ea:de:43:58:9f:ee:92:dd:ff:4b:ee:b5:56:f3:c3:53:
9d:45:8d:65:d2:d4:ff:be:29:1d:0b:39:6b:81:78:a8:05:d5:
b1:d2:85:c3:a1:5e:c3:e7:47:1f:90:37:b0:a1:8a:81:f2:0a:
99:e3:1b:50:e6:0b:c3:88:16:25:ae:40:c6:d8:74:71:bc:bf:
a9:06:38:1f:2d:4d:57:4a:10:44:0f:43:aa:a4:48:60:67:00:
a9:a4:01:82:53:d1:e5:45:f8:a8:56:f5:65:11:13:49:d5:f4:
e5:ca:48:2e:e1:73:1e:41:57:ab:ca:f0:11:a4:dd:1d:f2:d6:
a5:85:74:2d:89:5c:06:11:ff:47:22:53:79:48:47:fd:4e:c4:
fc:30:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:41:25 2025 by rpki-client