Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MvD_irGtq7dm7Wl-wHxkjl7GE60.roa
File: MvD_irGtq7dm7Wl-wHxkjl7GE60.roa (raw, json)
Hash identifier: vQjT01PlcBvVPRjKEXqype+Zlb+MJUwm0cYahXSDHhg=
Subject key identifier: 32:F0:FF:8A:B1:AD:AB:B7:66:ED:69:7E:C0:7C:64:8E:5E:C6:13:AD
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EF5190C69F7C484531E8EB45C941C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MvD_irGtq7dm7Wl-wHxkjl7GE60.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20750
IP address blocks: 85.187.236.0/22 maxlen: 22
85.187.240.0/23 maxlen: 23
151.237.72.0/21 maxlen: 24
151.237.72.0/22 maxlen: 22
151.237.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f5:19:0c:69:f7:c4:84:53:1e:8e:b4:5c:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32f0ff8ab1adabb766ed697ec07c648e5ec613ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:f2:c1:61:b1:e5:b7:c9:da:eb:a5:88:62:
77:8c:c4:bb:a1:a6:36:e1:7d:60:ef:b5:3f:db:28:
19:f6:6c:67:d6:55:54:69:e3:20:63:27:cd:81:a5:
73:5c:58:ee:52:07:ab:90:fc:b9:53:24:ab:7f:c4:
67:56:ac:33:8c:5a:fe:f9:61:aa:80:8f:1b:87:19:
2a:c9:05:5d:69:dd:f2:f6:05:60:46:a9:14:f8:0e:
e7:28:53:ba:dd:0a:3a:5a:39:b6:f3:a2:42:b8:00:
cc:77:20:91:3e:b1:4a:26:96:31:f8:71:aa:c7:a8:
75:f3:c4:3e:d8:62:26:5c:c4:01:82:35:7d:d7:01:
f1:55:a0:13:2b:85:44:51:ec:8a:3b:a2:2c:1f:79:
7d:95:ce:85:3b:f3:cd:58:b1:e4:dc:1b:3c:c5:6b:
d5:50:9f:ff:99:62:b2:31:73:58:0a:4a:07:a9:1f:
f6:74:f8:b9:79:7b:cf:62:40:eb:f2:5a:bb:9e:ae:
68:cf:40:aa:dc:fd:a7:5d:fe:50:26:13:81:48:fd:
43:89:33:f5:5e:94:a3:e2:ce:60:32:38:8a:2c:00:
b7:6f:fb:96:1b:d7:85:fc:9f:31:42:5a:9c:19:7a:
86:c7:a9:7d:8f:30:0d:b2:d6:b5:e1:12:eb:ba:b0:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:FF:8A:B1:AD:AB:B7:66:ED:69:7E:C0:7C:64:8E:5E:C6:13:AD
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MvD_irGtq7dm7Wl-wHxkjl7GE60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.236.0-85.187.241.255
151.237.72.0/21
Signature Algorithm: sha256WithRSAEncryption
d7:5d:f6:08:c5:84:56:2e:ef:b4:42:4b:b1:8d:c9:0f:7b:f1:
35:ca:2d:9d:36:13:36:b3:f4:13:62:52:c9:14:12:e5:19:fa:
cc:92:84:41:b0:04:a0:69:34:6b:18:02:8c:55:e8:13:cd:86:
e1:0e:f7:59:88:18:f9:df:2a:64:52:a9:73:40:df:f8:20:dc:
8a:62:1c:44:78:e5:c9:79:46:af:32:f8:d9:fe:4d:55:87:d4:
d6:43:13:e1:ef:df:6b:e3:ed:51:a4:f5:65:16:51:d4:72:3c:
25:37:c8:47:a6:a3:f0:6e:e9:7c:86:75:45:86:11:5b:d2:69:
ef:f8:39:28:f1:56:25:45:1a:82:5a:26:7a:ce:3f:28:68:6c:
6d:84:d9:a3:7b:93:7d:29:0d:6f:64:e5:a9:7d:0e:a6:27:69:
34:cc:d1:87:3e:e6:48:18:01:80:32:2a:f1:15:99:3d:e9:3e:
c2:a1:6b:c2:5e:a5:a1:6a:25:02:3e:fb:0e:2d:a0:cf:d0:65:
ca:b3:1b:b5:4a:0c:7b:5d:a3:36:42:6c:77:01:7b:00:d1:94:
dd:8a:30:40:f9:4a:eb:8e:45:e0:56:02:9b:9c:b0:c3:44:7f:
f5:2a:64:c7:7c:2f:da:98:da:4f:cc:e7:1f:38:72:ec:3c:f6:
06:a3:2f:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:07 2025 by rpki-client