Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/MffnwCyFAUN1cIu0hI8FbolAN24.roa
File: MffnwCyFAUN1cIu0hI8FbolAN24.roa (raw, json)
Hash identifier: EymH0H7Gnm80GdddcNjrz/YuHPOBFOgspnFOthB9pVY=
Subject key identifier: 31:F7:E7:C0:2C:85:01:43:75:70:8B:B4:84:8F:05:6E:89:40:37:6E
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019746A5C266E45D018F73CA5DB9FAD67760
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/MffnwCyFAUN1cIu0hI8FbolAN24.roa
Signing time: Fri 06 Jun 2025 19:09:17 +0000
ROA not before: Fri 06 Jun 2025 19:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 213.178.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:a5:c2:66:e4:5d:01:8f:73:ca:5d:b9:fa:d6:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jun 6 19:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31f7e7c02c85014375708bb4848f056e8940376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:db:ed:12:6f:32:35:6b:97:76:8b:c1:5a:
d7:97:dd:74:56:d1:18:78:f0:e7:08:e1:2d:8e:e1:
6b:6e:bf:07:d0:43:d9:7f:b3:d9:f5:ae:ff:b0:0e:
39:41:65:05:d1:70:c1:38:5c:28:2b:61:50:21:f5:
1b:f7:bf:da:20:3d:1e:c4:58:4c:c5:d0:ce:fd:40:
6e:e6:51:38:d8:c3:b7:86:a9:77:61:5c:3e:3f:d0:
4c:cb:5b:c1:e1:bb:81:0b:4d:f6:c6:e4:96:bb:09:
f4:5a:dc:34:40:06:51:b8:d2:74:3f:db:55:6e:3c:
91:96:49:31:9c:4c:2f:05:bc:9f:39:75:14:1b:3a:
56:ab:99:cb:50:6d:a4:82:70:81:6d:02:81:b9:44:
ce:5f:ca:45:ab:14:df:1e:0c:f8:58:6a:ac:eb:af:
b5:47:2f:f0:ea:f0:34:b4:01:5b:95:cb:43:1b:15:
51:a9:84:f2:21:57:80:e1:99:38:d2:66:93:51:14:
07:42:fa:a0:8a:c5:14:bf:35:5f:05:00:b4:90:ae:
d3:7c:ca:63:db:21:47:79:06:5c:e0:c1:4a:df:09:
4f:06:94:d4:d0:30:4a:7c:87:4c:08:d0:23:1c:2e:
72:ca:9f:e2:00:fa:c4:d5:69:b3:90:3d:d0:6e:f1:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:E7:C0:2C:85:01:43:75:70:8B:B4:84:8F:05:6E:89:40:37:6E
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/MffnwCyFAUN1cIu0hI8FbolAN24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
59:08:7e:c3:6a:df:be:56:96:d3:53:3c:d0:61:83:1c:da:24:
5d:53:a5:8e:a6:9b:05:e1:e4:e4:21:b2:5c:fd:50:e9:50:ac:
c1:50:4d:69:d0:dd:f9:c1:74:b4:0d:70:a9:80:4e:0e:e2:6c:
d4:db:b4:1d:59:fd:c1:31:11:f9:1f:d8:58:de:7f:94:a3:64:
c9:0d:ea:bf:54:ea:1e:ac:c3:6d:48:c9:0f:60:74:cc:7b:0c:
69:35:a0:9f:0d:75:bf:92:33:40:bc:27:90:0b:a9:ba:29:d5:
77:1b:42:fd:fa:3e:96:9f:d6:a0:e4:76:b2:b9:ec:d1:a3:70:
77:b9:0e:47:35:72:23:aa:ee:3b:c7:f9:81:61:63:0b:d7:fa:
bc:be:1f:21:24:34:85:eb:fa:db:83:51:a3:22:2c:d5:54:11:
fc:4e:3e:b3:4d:ee:dd:97:07:2a:fc:3a:55:2a:d8:e1:18:7c:
cc:af:c7:dd:da:41:6e:99:dc:0c:6c:5f:99:70:e3:9e:a4:7f:
b8:96:c1:be:3c:93:be:21:de:f6:79:c6:11:0e:ac:89:0f:5c:
6f:60:7a:49:10:74:4e:1d:1b:5b:56:4c:6c:88:ff:b8:a3:94:
5a:07:16:43:ff:aa:f9:eb:a6:b0:79:76:20:3d:a7:a4:59:ce:
06:dd:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:41:17 2025 by rpki-client