Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/bMgRIHfe9czZPsPUKpcmfdHESeA.roa
File: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (raw, json)
Hash identifier: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=
Subject key identifier: 6C:C8:11:20:77:DE:F5:CC:D9:3E:C3:D4:2A:97:26:7D:D1:C4:49:E0
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 0194236A4045818E1DA7C13F06D71C608092
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/bMgRIHfe9czZPsPUKpcmfdHESeA.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 193.25.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:40:45:81:8e:1d:a7:c1:3f:06:d7:1c:60:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cc8112077def5ccd93ec3d42a97267dd1c449e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:d8:27:44:97:fc:4e:c8:3a:ac:50:29:9d:
ce:ac:ac:70:af:20:92:12:ba:d4:6d:dd:43:73:fa:
18:5f:0f:71:41:7c:b5:0f:2b:8b:f7:2a:a5:ec:e2:
1b:f5:5a:7e:0f:c8:b7:46:55:8b:ad:0a:ac:02:2b:
4d:f8:86:b5:c0:59:e5:ff:0d:ee:91:d6:87:e8:8b:
75:20:4d:23:dd:88:c8:cb:8b:a2:91:83:75:f0:7f:
0d:06:40:b5:71:d0:00:61:2e:98:85:1b:57:2a:f3:
fb:cc:f8:72:13:70:f3:b3:1b:8d:2d:0e:93:9f:ec:
be:9f:e2:bd:7c:d2:60:95:5e:f7:a6:27:54:3c:f5:
0c:4b:7e:8c:d7:ca:de:b0:8f:90:0d:fd:65:17:11:
5b:9d:dd:5d:f8:84:4f:2a:ef:9c:25:c8:77:98:54:
63:88:7c:c8:64:86:20:29:81:a7:89:2b:8a:2d:a1:
68:30:56:fe:8d:c0:5f:06:dd:6d:e2:11:c4:b1:51:
9f:2b:f4:b0:29:19:df:a8:96:eb:01:64:47:18:60:
9e:ed:03:d4:df:ca:37:0c:1e:3f:22:6f:ec:5b:b0:
13:15:5d:97:c1:d2:91:6a:88:fc:b5:1a:97:5a:43:
cc:a8:9e:dd:7f:01:7f:ab:fb:1e:08:5f:bf:06:95:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C8:11:20:77:DE:F5:CC:D9:3E:C3:D4:2A:97:26:7D:D1:C4:49:E0
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/bMgRIHfe9czZPsPUKpcmfdHESeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3e:07:77:9d:94:17:3f:ed:6c:d4:7a:e3:b7:61:76:01:50:
b7:1a:48:c1:07:d3:cb:30:48:86:fe:0e:37:78:81:57:13:2d:
db:fe:4f:28:4a:db:16:7d:ea:e6:2d:cc:d1:ac:9d:2e:55:a0:
07:18:35:ff:09:bb:d5:71:75:21:55:4e:e3:8e:07:aa:12:e3:
8c:3e:e1:d6:06:36:af:3f:a5:9b:04:8a:cd:0a:17:58:7e:96:
83:d6:f1:42:92:02:6e:71:fd:48:05:10:b6:c7:41:2e:7f:fb:
e8:0a:7b:22:37:ca:98:96:a7:66:0b:9f:d6:9f:88:e1:20:0e:
90:0f:3e:47:30:a7:97:69:14:e7:6e:6d:74:79:50:17:a4:38:
83:99:7c:b0:d4:3f:d8:7c:0a:73:bc:42:a8:d9:2a:46:a6:64:
c4:6b:fa:39:68:51:96:f9:c8:55:30:3e:3f:84:0f:b4:f4:9f:
65:60:f7:d5:b2:19:79:9b:51:05:67:d3:cd:82:52:23:1f:11:
ed:40:3d:7a:21:93:3c:cc:43:07:ed:bb:61:a6:9c:f6:ec:ad:
a0:c0:66:1c:c9:4c:00:51:e7:3e:b2:df:09:7b:25:83:eb:c4:
0f:9b:d4:53:17:b1:9d:df:eb:b0:be:d0:b6:4b:74:94:ed:8c:
cf:8a:7c:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjakBFgY4dp8E/BtccYICSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy
MGM5NDUwHhcNMjUwMTAxMTk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2M4MTEyMDc3ZGVmNWNjZDkzZWMzZDQyYTk3MjY3ZGQxYzQ0OWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+vYJ0SX/E7IOqxQKZ3OrKxwryCS
ErrUbd1Dc/oYXw9xQXy1DyuL9yql7OIb9Vp+D8i3RlWLrQqsAitN+Ia1wFnl/w3u
kdaH6It1IE0j3YjIy4uikYN18H8NBkC1cdAAYS6YhRtXKvP7zPhyE3DzsxuNLQ6T
n+y+n+K9fNJglV73pidUPPUMS36M18resI+QDf1lFxFbnd1d+IRPKu+cJch3mFRj
iHzIZIYgKYGniSuKLaFoMFb+jcBfBt1t4hHEsVGfK/SwKRnfqJbrAWRHGGCe7QPU
38o3DB4/Im/sW7ATFV2XwdKRaoj8tRqXWkPMqJ7dfwF/q/seCF+/BpUjxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzIESB33vXM2T7D1CqXJn3RxEngMB8GA1UdIwQY
MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct
MjI2YjhkNGE1ZjYwLzEvYk1nUklIZmU5Y3paUHNQVUtwY21mZEhFU2VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw
LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRmnMA0G
CSqGSIb3DQEBCwUAA4IBAQCaPgd3nZQXP+1s1Hrjt2F2AVC3GkjBB9PLMEiG/g43
eIFXEy3b/k8oStsWfermLczRrJ0uVaAHGDX/CbvVcXUhVU7jjgeqEuOMPuHWBjav
P6WbBIrNChdYfpaD1vFCkgJucf1IBRC2x0Euf/voCnsiN8qYlqdmC5/Wn4jhIA6Q
Dz5HMKeXaRTnbm10eVAXpDiDmXyw1D/YfApzvEKo2SpGpmTEa/o5aFGW+chVMD4/
hA+09J9lYPfVshl5m1EFZ9PNglIjHxHtQD16IZM8zEMH7bthppz27K2gwGYcyUwA
Uec+st8JeyWD68QPm9RTF7Gd3+uwvtC2S3SU7YzPinys
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:18 2025 by rpki-client