Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/mkpPO0iUB-Trjc2yot_MhVuYzeI.roa
File: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (raw, json)
Hash identifier: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=
Subject key identifier: 9A:4A:4F:3B:48:94:07:E4:EB:8D:CD:B2:A2:DF:CC:85:5B:98:CD:E2
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0194266B3B8AB0455784FA8060E3E7832543
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/mkpPO0iUB-Trjc2yot_MhVuYzeI.roa
Signing time: Thu 02 Jan 2025 09:49:09 +0000
ROA not before: Thu 02 Jan 2025 09:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 46.16.160.0/23 maxlen: 23
46.16.160.0/24 maxlen: 24
46.16.161.0/24 maxlen: 24
46.16.164.0/24 maxlen: 24
46.16.166.0/24 maxlen: 24
91.197.140.0/22 maxlen: 22
91.197.140.0/24 maxlen: 24
91.197.141.0/24 maxlen: 24
91.197.142.0/23 maxlen: 23
91.197.142.0/24 maxlen: 24
91.197.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3b:8a:b0:45:57:84:fa:80:60:e3:e7:83:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jan 2 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a4a4f3b489407e4eb8dcdb2a2dfcc855b98cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:52:ca:4f:cd:75:31:5a:08:5b:1a:9b:eb:
f2:71:08:c3:c5:b6:c8:66:25:aa:d5:d0:db:db:0e:
fe:46:f5:fb:9f:f5:3d:3a:67:4d:77:83:d4:94:3e:
cd:fb:e0:77:20:4b:d1:e8:84:43:5f:48:19:7a:cb:
67:fb:35:b1:b4:07:08:56:3e:f9:07:c7:81:0e:15:
9d:6e:d1:5a:e8:c1:04:cb:f2:04:d4:3c:a4:76:11:
aa:ad:19:33:fe:22:49:8f:e1:df:d9:93:43:3d:40:
a1:b4:28:b8:82:73:7c:c0:98:b2:ca:1d:e6:f1:74:
c1:25:e4:25:2d:e2:f7:e8:28:e4:8c:8a:d2:7c:40:
1d:ae:9f:ed:c6:b6:17:cf:96:31:b8:62:9f:2b:2a:
4a:52:ba:a9:c6:4f:18:db:02:4f:7c:59:17:d9:00:
70:27:45:09:86:e7:44:e0:8d:37:58:b0:cc:7d:ad:
06:6f:69:8a:09:02:01:31:47:b1:04:1f:4a:f9:9c:
f2:48:00:13:a7:05:1f:e1:cd:2d:12:a9:f8:f6:95:
ce:74:80:10:e0:9d:95:0c:d5:74:4e:24:ee:50:0a:
f5:c9:27:47:1d:6c:66:57:a4:4d:54:13:88:5e:40:
48:89:c1:0d:f6:be:a3:ec:2a:f1:80:b7:c0:1e:20:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:4F:3B:48:94:07:E4:EB:8D:CD:B2:A2:DF:CC:85:5B:98:CD:E2
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/mkpPO0iUB-Trjc2yot_MhVuYzeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.160.0/23
46.16.164.0/24
46.16.166.0/24
91.197.140.0/22
Signature Algorithm: sha256WithRSAEncryption
49:45:e1:44:d2:b4:9d:4b:34:ac:59:61:55:c1:a2:8d:1f:eb:
e3:61:1f:00:88:81:9b:f0:ff:78:16:36:c9:94:19:36:70:d6:
c7:62:c2:85:b6:ba:cb:a3:91:13:bf:d1:1a:b9:e8:4c:ca:8e:
27:a3:b5:28:ce:9d:ee:a8:08:e2:6e:54:8c:40:25:09:0c:c8:
99:1f:40:e9:2f:8c:b8:c4:57:6f:ac:04:f2:e2:46:99:1b:2c:
c0:6a:a0:1b:90:37:7d:7e:dd:da:3d:35:03:a5:1b:aa:1b:40:
d4:6a:0c:14:db:e6:bd:55:db:19:c8:37:8e:95:41:f1:eb:48:
55:9e:52:eb:2a:f9:d8:10:6e:ce:c9:77:54:9a:eb:da:59:21:
44:e1:d2:85:93:cb:50:77:14:b7:a6:8a:89:bb:8c:6d:38:60:
8a:bb:80:b0:c8:74:da:2d:1a:90:39:da:b4:dc:0c:b0:f7:7e:
75:22:31:79:4a:44:ae:4d:21:b3:63:06:d7:a3:49:43:bf:b2:
6c:1f:ec:59:5f:f5:80:64:47:f1:70:4f:39:82:84:bb:51:aa:
70:72:dc:ee:98:95:5c:06:8b:99:99:31:78:5f:a8:5e:cb:ef:
6d:cf:7b:20:42:0b:42:5b:70:83:94:ce:4b:ff:20:e8:1d:7c:
d6:94:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:49 2025 by rpki-client