Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/MspHMRx79y2hbQhEiM4afU6NUCQ.roa
File: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (raw, json)
Hash identifier: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=
Subject key identifier: 32:CA:47:31:1C:7B:F7:2D:A1:6D:08:44:88:CE:1A:7D:4E:8D:50:24
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 0194266BB7A6A21FBEC01C1AB42078E7D145
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/MspHMRx79y2hbQhEiM4afU6NUCQ.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197892
IP address blocks: 94.154.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b7:a6:a2:1f:be:c0:1c:1a:b4:20:78:e7:d1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32ca47311c7bf72da16d084488ce1a7d4e8d5024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:1c:0b:64:1c:6b:be:15:8b:48:29:00:cd:
de:8a:b5:07:e5:54:11:ec:f4:c0:c0:68:52:4b:d3:
3c:63:e9:e2:4d:75:58:56:a1:9c:20:ae:c7:74:92:
e7:3f:7e:ab:77:98:36:4c:9c:f0:16:a5:11:ac:db:
72:54:9a:ef:58:b2:e7:87:d8:6d:8c:5f:67:cc:fb:
b0:df:1c:59:ca:58:9e:5c:f4:f1:48:e1:28:bf:e7:
64:71:25:90:25:a9:68:43:00:bd:f8:87:3f:a1:01:
f9:b8:f1:f5:ab:4e:8e:9e:04:d4:40:98:a2:06:8c:
99:bc:44:e1:01:a9:ef:63:f5:07:1a:6a:b6:93:13:
c6:ef:57:51:72:35:ea:bb:d8:d4:dd:86:81:2e:ff:
1b:ab:7c:5e:97:7b:5e:f0:33:04:50:2c:67:2d:03:
26:71:ec:8b:14:f6:fc:f1:13:48:10:10:50:b0:8c:
47:74:82:05:65:c0:b3:20:b9:60:f1:44:2e:50:e2:
a9:15:3d:69:34:0b:59:e7:d2:af:e0:9c:3e:0d:9d:
ce:3e:52:79:bf:32:4c:fd:db:8e:6a:89:7e:b8:2b:
e6:47:fd:ac:ee:3d:80:41:c4:be:e6:a8:7c:30:08:
3e:24:0b:22:3f:d3:81:d6:de:6f:b0:8e:87:11:7b:
fb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CA:47:31:1C:7B:F7:2D:A1:6D:08:44:88:CE:1A:7D:4E:8D:50:24
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/MspHMRx79y2hbQhEiM4afU6NUCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.96.0/21
Signature Algorithm: sha256WithRSAEncryption
24:82:62:1e:24:17:e8:a2:03:38:9b:b6:94:eb:ff:fd:de:59:
d0:2a:99:2f:0a:f2:f7:6e:b9:da:48:d3:1e:2e:22:d1:05:2a:
b9:5f:76:99:89:be:d6:da:e5:2c:75:04:59:d5:77:a3:a9:94:
d9:a4:ec:a0:12:8b:0f:b7:7d:68:c1:81:c9:db:d5:eb:03:64:
b8:8b:c8:3a:fb:58:c1:01:df:bf:44:ef:8b:0c:2a:61:0c:be:
e2:bd:7e:cd:20:39:4a:2b:01:e0:52:ce:b2:f4:42:96:b7:ff:
08:64:77:91:89:f6:e3:cc:6e:4f:a1:64:03:1c:42:2b:60:8c:
c2:a0:e5:a4:b1:3b:1e:59:74:31:a9:e7:90:5f:f4:7a:01:25:
9a:91:68:ca:b9:69:0a:ec:c8:eb:fc:04:dc:b1:90:42:c8:b2:
e5:d9:0c:dc:2e:a7:4e:ad:fa:bd:3a:67:b7:62:99:26:55:66:
51:71:b5:ff:54:fc:05:46:a8:43:a0:a9:18:55:f4:19:5f:b6:
aa:61:37:98:03:dd:b0:a3:15:c9:4e:ea:37:d5:40:b6:c5:58:
ab:d4:13:c2:d8:f7:6c:ff:65:67:01:a5:d3:50:52:96:7a:42:
d9:00:c6:22:f4:89:81:12:46:4a:70:23:6c:3e:3d:f7:69:f6:
5a:66:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:39 2025 by rpki-client