Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/MGwydjWSRkebMXZzXi4Q1wnQhQY.roa
File: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (raw, json)
Hash identifier: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=
Subject key identifier: 30:6C:32:76:35:92:46:47:9B:31:76:73:5E:2E:10:D7:09:D0:85:06
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 019423D6DC55ED49A1BCA566A9EE03F20576
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/MGwydjWSRkebMXZzXi4Q1wnQhQY.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207108
IP address blocks: 185.139.7.0/24 maxlen: 24
2a12:ab46::/32 maxlen: 32
2a12:ab46:2666::/48 maxlen: 48
2a12:ab46:5341::/48 maxlen: 48
2a12:ab46:5342::/48 maxlen: 48
2a12:ab46:5343::/48 maxlen: 48
2a12:ab46:5344::/48 maxlen: 48
2a12:ab46:5345::/48 maxlen: 48
2a12:ab47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:dc:55:ed:49:a1:bc:a5:66:a9:ee:03:f2:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=306c3276359246479b3176735e2e10d709d08506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:33:e7:1a:03:27:9f:05:5d:e9:8b:74:4c:93:
39:65:6a:1e:e8:a0:71:b8:4b:1c:76:96:aa:19:91:
e1:10:01:9d:e4:2a:83:47:5e:94:96:b7:96:f1:77:
af:30:89:cb:46:f0:db:00:f6:8f:38:20:90:00:2d:
f0:ee:0c:12:d4:df:0a:3e:16:7f:c5:51:d1:25:eb:
60:c7:c1:03:f6:6b:c2:44:73:06:50:b2:27:d7:d8:
5d:8c:e1:b9:19:e4:53:92:ec:34:e9:3c:a2:55:71:
06:9e:a6:36:ab:9d:c8:15:c1:53:f2:f6:c5:14:c9:
6c:e8:35:21:fe:d7:7b:d9:9a:d8:b2:21:df:0f:51:
f0:8b:10:66:be:97:bf:89:f8:a3:39:eb:98:d0:63:
8e:08:68:af:ad:d9:a2:38:59:94:36:c0:18:cc:c7:
1f:06:82:31:ea:bd:d2:f7:db:a3:d6:2e:8c:7d:3a:
7c:76:21:ea:49:d9:de:6d:b4:0b:b1:fc:c4:b1:26:
e6:4d:12:13:d6:33:02:4b:ad:b3:44:96:3e:e1:52:
e3:43:fc:23:33:09:d5:2a:d8:bb:5b:3b:c2:ee:f0:
2a:65:4c:1d:f0:f5:e5:84:53:6b:d2:24:1d:63:12:
61:e2:72:40:d9:ef:af:3b:9c:23:50:a5:4c:01:d0:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:32:76:35:92:46:47:9B:31:76:73:5E:2E:10:D7:09:D0:85:06
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/MGwydjWSRkebMXZzXi4Q1wnQhQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.7.0/24
IPv6:
2a12:ab46::/31
Signature Algorithm: sha256WithRSAEncryption
00:48:12:e0:76:af:cf:e1:31:2b:ea:c0:4d:ca:50:71:8d:c8:
c6:b2:1d:c9:b1:8f:c8:e8:ce:f3:d4:fb:a7:c2:ee:29:89:bf:
04:9c:93:00:51:23:5b:3b:2b:ff:62:6e:97:ae:5f:a1:99:a3:
0b:74:a8:e5:57:7f:b0:5b:bb:c4:41:98:ad:d0:37:0a:21:45:
18:07:d4:09:db:0f:cb:11:a3:5f:8a:83:3b:c7:26:f8:d2:3f:
67:23:33:9d:be:89:30:35:be:a8:b0:ea:2a:c0:0c:a1:9b:88:
9b:38:c5:90:a0:b6:df:f9:41:58:ac:58:7d:04:a3:60:1c:ad:
42:54:e1:77:9a:31:5f:08:13:fe:61:9e:43:fa:33:d7:aa:f4:
85:dc:e5:db:17:93:ab:7d:3a:f5:42:87:ab:3b:98:4e:01:cf:
fe:10:84:1e:84:73:25:d8:2f:4b:8b:85:24:a2:89:2e:67:66:
fe:de:72:ad:7f:28:ad:93:55:88:15:5b:f5:a2:d0:27:0d:5d:
b5:af:ac:6c:26:23:b7:5e:99:9d:46:14:33:b9:1c:a3:4d:ea:
38:72:1c:86:f7:9b:ac:e1:29:32:48:c5:1b:b5:52:52:e0:fa:
c0:fa:71:25:af:08:b8:e6:8f:81:93:b6:f3:a2:70:c8:98:43:
0a:45:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:55 2025 by rpki-client