Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/Mj33PSIVDFEMWJHgu59FVh30wBE.roa
File: Mj33PSIVDFEMWJHgu59FVh30wBE.roa (raw, json)
Hash identifier: LnMHKUsXF7KzdF90MCgfrbR5YbM5UFpQOfqwvOjdFkc=
Subject key identifier: 32:3D:F7:3D:22:15:0C:51:0C:58:91:E0:BB:9F:45:56:1D:F4:C0:11
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019420D62FA11469B8C293C05092B0D0156B
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/Mj33PSIVDFEMWJHgu59FVh30wBE.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.226.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
78.109.235.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2f:a1:14:69:b8:c2:93:c0:50:92:b0:d0:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=323df73d22150c510c5891e0bb9f45561df4c011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:4d:5a:7d:36:30:8f:ce:2b:5a:ba:90:24:
31:9e:13:58:cc:04:fc:18:ac:37:b8:39:e3:92:ba:
43:4f:61:38:8f:69:52:72:da:d6:29:e1:2b:bf:a2:
de:73:bd:72:2a:c5:5f:06:07:25:b3:01:b8:43:13:
8d:3e:10:6e:2b:0a:a9:eb:2f:6b:54:d5:fe:0d:8c:
e6:9c:12:d8:60:69:da:5a:20:b7:5a:b3:74:00:04:
ad:36:30:2d:15:53:59:ac:d5:e3:15:71:ad:3d:85:
a4:ea:c9:c6:a5:06:3c:5c:3e:26:5b:86:f7:60:61:
b5:be:a1:00:94:ce:60:39:74:0f:92:98:9c:67:44:
38:a2:3d:70:7a:51:3d:06:ba:8a:6e:67:f4:b5:3a:
a5:bb:d7:de:0e:38:8c:8b:12:41:72:7b:dd:05:34:
89:cd:bb:7e:58:6c:a0:ee:26:e3:66:fc:32:67:91:
00:71:fc:29:c9:58:02:c4:76:fd:85:3f:15:92:e2:
3b:b7:92:9a:fb:a2:4c:6c:2b:18:a2:c9:bd:52:86:
ee:fd:5b:1c:4e:c4:05:56:39:2d:d1:55:17:a6:c4:
ba:0d:2b:39:01:5a:bb:f9:a2:ee:b6:02:8c:a9:cf:
67:9e:40:22:db:49:86:bd:59:c9:49:13:7f:fb:46:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3D:F7:3D:22:15:0C:51:0C:58:91:E0:BB:9F:45:56:1D:F4:C0:11
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/Mj33PSIVDFEMWJHgu59FVh30wBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.226.0/24
78.109.233.0-78.109.235.255
78.109.238.0/24
185.52.101.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f6:8a:5d:9d:65:b2:fa:36:15:32:93:55:52:51:6f:3c:7a:
e3:d5:f6:7b:56:28:f8:9b:fd:fa:f5:98:66:14:07:ca:bf:86:
f2:44:48:9b:e6:95:8d:7a:89:a3:5b:3a:b5:0c:a8:7d:52:6f:
13:34:8b:23:9d:12:bd:4c:31:99:c8:af:b6:13:cf:e7:54:4c:
d2:8d:0e:f5:0b:08:47:fd:cf:72:15:48:85:0f:73:c9:29:1f:
0c:2b:e7:ef:4f:86:08:89:9a:51:1a:24:1b:5b:e9:e0:32:88:
1e:b8:89:24:4e:4d:16:39:ff:92:5c:69:74:2d:53:54:e1:83:
3b:90:27:cb:e1:19:d2:f8:93:74:30:ac:1f:73:fc:1c:0b:1d:
c1:9e:06:db:3a:68:2a:b9:55:0f:e5:04:5c:fb:55:56:02:98:
ee:9e:29:f4:6b:10:94:01:90:bb:ca:8f:48:07:8e:1f:57:ac:
d9:b7:03:37:da:96:f9:ef:82:ce:f9:cb:46:f6:95:28:44:22:
9a:69:97:a3:ca:0c:66:53:ef:45:2c:57:9f:34:7c:a3:d5:db:
c3:ad:84:84:44:01:06:01:51:3c:99:8e:8e:12:23:6e:84:1c:
6b:ca:1f:91:6e:ee:b3:69:4f:7f:19:86:c0:1f:a4:4b:a5:18:
25:b0:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:53:23 2025 by rpki-client