Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa
File: Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa (raw, json)
Hash identifier: /uxIZLUhjbrsvb3qsWaj7YVyFLtcx8Jkz3bF3E7gb3c=
Subject key identifier: 32:EF:FA:BE:68:C4:98:9D:09:8B:CE:90:5C:25:97:7C:5F:5B:A4:E2
Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial: 019420D5C0E0CA7BC60294D0493BE15B3395
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa
Signing time: Wed 01 Jan 2025 07:47:46 +0000
ROA not before: Wed 01 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35819
IP address blocks: 194.36.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c0:e0:ca:7b:c6:02:94:d0:49:3b:e1:5b:33:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32effabe68c4989d098bce905c25977c5f5ba4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:53:5e:1a:bc:68:60:f3:fb:0a:a8:48:58:
37:46:38:61:13:78:e8:ca:76:bc:52:d2:d5:9f:cc:
39:64:c5:89:9a:0d:76:10:07:ac:f5:04:5f:4c:48:
e2:ea:88:ab:13:3b:67:59:d6:26:c4:fe:21:4e:04:
fc:22:11:32:a5:78:2e:a5:22:d4:91:71:44:25:e4:
b3:3b:79:c3:c4:ba:24:71:f8:74:c8:38:13:57:f8:
73:04:56:0a:7d:3d:cc:36:85:6f:da:ef:99:b7:1f:
23:54:61:0d:c4:55:9a:f1:7e:0f:e7:38:ef:ac:b1:
f7:8f:77:7e:91:61:57:a2:b5:64:d3:a3:3c:59:50:
77:52:9a:cc:54:07:ae:10:ce:44:ca:85:cb:ec:8e:
19:dd:52:24:c1:d3:66:1e:00:f2:1a:1a:59:26:5e:
40:2c:6f:26:35:6c:df:21:b6:f2:34:c9:01:05:d7:
b2:49:62:5b:84:60:ec:28:c9:6e:37:7b:3c:5a:0e:
57:ff:80:c4:d0:14:3b:83:31:f9:ae:9f:9a:79:09:
8b:94:6b:d5:d6:d7:2e:4c:3d:bd:98:68:35:5a:a8:
6f:92:7f:3a:11:43:1e:ff:e3:b5:c5:aa:10:07:ad:
10:a2:78:4b:f6:89:ca:a5:25:96:00:e8:27:bf:7b:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EF:FA:BE:68:C4:98:9D:09:8B:CE:90:5C:25:97:7C:5F:5B:A4:E2
X509v3 Authority Key Identifier:
keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.164.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ec:be:6f:3a:e3:91:cb:1c:d4:74:36:89:50:09:68:75:7d:
f1:b9:3a:3f:4e:33:17:33:ed:d6:71:2f:2f:b6:24:3b:be:7e:
67:a6:84:2c:76:0a:92:d1:9a:9e:19:63:34:cc:be:ac:37:97:
8b:82:3d:a7:1b:48:d9:3c:fc:3d:1d:ed:72:3c:5b:22:16:0c:
b7:d3:d4:d5:58:6f:8f:99:0f:0b:2c:c2:7f:00:84:44:9b:a7:
0c:64:2a:1c:1c:1e:5d:01:64:54:d1:8a:d9:dd:dc:cb:0b:d6:
f2:6c:ae:a5:f7:86:1f:ee:ca:32:f7:da:41:b1:be:93:8a:35:
d2:80:53:dd:0d:0e:96:86:2e:e7:9c:1c:2d:26:0e:ac:15:4f:
f6:82:02:b9:d0:8b:25:b4:32:a3:4c:62:bc:85:84:62:0b:ce:
4d:3f:41:26:f1:1c:92:3a:ca:b0:f6:9e:11:a1:9e:64:26:35:
0c:5c:77:34:87:b5:ec:78:dd:64:08:3c:91:44:02:7d:59:f0:
49:96:db:2d:dc:e3:f6:c9:04:b7:ad:de:e2:3d:a3:f9:83:a0:
c4:7b:33:15:33:39:c0:fd:3a:9a:a7:7c:4e:b4:a4:2a:f5:12:
d4:9d:46:03:21:cf:26:7c:32:52:55:0f:40:6b:98:56:cc:d2:
11:7a:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:50:43 2025 by rpki-client