Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/MPQDNzR2d5wZiXGBx4xAcoG6Ouc.roa
File: MPQDNzR2d5wZiXGBx4xAcoG6Ouc.roa (raw, json)
Hash identifier: egDRYIAZQALBoXOeweYBGNjd967GtxTo0GiRgWPGusU=
Subject key identifier: 30:F4:03:37:34:76:77:9C:19:89:71:81:C7:8C:40:72:81:BA:3A:E7
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 0194CAC948DDDC62701BDD48A19A77DD036D
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/MPQDNzR2d5wZiXGBx4xAcoG6Ouc.roa
Signing time: Mon 03 Feb 2025 07:49:36 +0000
ROA not before: Mon 03 Feb 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44949
IP address blocks: 195.160.202.0/24 maxlen: 24
195.160.203.0/24 maxlen: 24
2a07:ec80:210::/48 maxlen: 48
2a07:ec80:211::/48 maxlen: 48
2a07:ec80:230::/48 maxlen: 48
2a07:ec80:231::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:c9:48:dd:dc:62:70:1b:dd:48:a1:9a:77:dd:03:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Feb 3 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30f403373476779c19897181c78c407281ba3ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:08:18:60:b3:77:b1:ab:6f:a0:07:48:8b:
8c:b9:4b:d3:9c:de:3d:fa:6f:03:41:08:64:b4:1b:
4e:81:f0:d5:b6:84:44:51:21:0a:2c:c0:30:a5:e0:
9d:4d:cf:0c:ae:75:2e:61:7c:db:ab:95:b3:82:b1:
4f:e2:8d:ed:95:47:4b:1c:2b:f1:c9:92:33:90:7c:
d5:9d:4e:ab:da:6e:70:b0:91:da:ba:34:9e:d6:90:
46:7e:45:02:20:6d:39:d8:7f:2f:cb:7a:8d:5d:21:
82:0e:2d:06:df:d4:8e:cf:95:00:05:f2:a9:16:78:
70:64:d4:4f:85:a2:54:e9:25:62:0d:dd:de:4e:78:
7c:c5:c1:22:66:4e:50:78:22:77:68:80:f8:ba:00:
10:8f:a4:d2:31:4b:4f:51:02:2a:41:3c:d1:7a:fd:
c1:3c:8f:12:32:39:3f:7e:11:45:4b:aa:33:ca:64:
44:7d:71:8e:fd:05:99:8f:bd:9c:40:4f:5f:66:1d:
47:2d:83:ce:2d:7a:0d:31:00:19:69:7d:b9:cb:70:
23:ef:04:ca:ed:13:5a:c6:27:30:ae:ef:fe:6f:81:
0a:b4:ab:5a:3e:6f:be:6d:25:9a:25:dc:07:c2:1d:
eb:5b:f0:01:f3:19:09:3f:9c:44:30:cb:16:52:b7:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:03:37:34:76:77:9C:19:89:71:81:C7:8C:40:72:81:BA:3A:E7
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/MPQDNzR2d5wZiXGBx4xAcoG6Ouc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.202.0/23
IPv6:
2a07:ec80:210::/47
2a07:ec80:230::/47
Signature Algorithm: sha256WithRSAEncryption
34:43:08:14:8c:5f:a3:da:92:43:5d:3d:8a:56:cc:8d:46:b6:
e4:47:dd:53:75:b7:f7:32:a1:25:90:8d:a4:25:73:1b:5e:53:
cc:0a:f2:b3:f4:5a:49:e6:4b:f5:22:de:33:05:fb:a4:e6:42:
4f:6a:f9:73:cf:ba:18:c0:2c:d5:2a:cc:56:62:89:a6:27:95:
f8:fb:c8:89:77:5b:a9:27:93:f5:d1:08:66:a2:41:89:07:31:
89:20:09:c5:80:21:35:45:6f:27:70:ff:9f:cc:66:b2:ee:da:
32:db:33:ae:f7:05:2d:f1:59:ae:5e:fb:6e:50:aa:61:53:04:
cd:16:ea:94:ee:ec:ba:dd:a8:64:e0:a6:1f:70:33:47:33:97:
be:4b:c9:b6:32:98:40:2c:b6:0a:bd:fe:2f:7a:47:0d:b1:1a:
9e:76:3d:58:6d:b6:5c:06:1b:e4:c1:24:c0:2b:4c:75:0f:07:
cb:47:70:bd:1a:4f:48:b2:78:d5:d4:0c:64:3e:d4:82:b4:cc:
b9:24:39:83:0d:09:a5:3d:b3:ad:42:2a:48:c7:68:ab:96:33:
5e:9e:c6:1a:19:f3:8f:fb:5a:d4:6c:5e:0e:94:ac:a0:a8:4c:
1d:18:d6:a4:de:65:e7:50:2e:a8:b3:26:41:63:8e:94:ee:3d:
a4:1a:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:36 2025 by rpki-client