Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/mgPiyECi3IMewfduoQECoQO6hW8.roa
File: mgPiyECi3IMewfduoQECoQO6hW8.roa (raw, json)
Hash identifier: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=
Subject key identifier: 9A:03:E2:C8:40:A2:DC:83:1E:C1:F7:6E:A1:01:02:A1:03:BA:85:6F
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 01968043837CDA002D3D890BB8B830889B58
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/mgPiyECi3IMewfduoQECoQO6hW8.roa
Signing time: Tue 29 Apr 2025 06:37:10 +0000
ROA not before: Tue 29 Apr 2025 06:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212301
IP address blocks: 5.252.206.0/24 maxlen: 24
45.67.232.0/24 maxlen: 24
45.67.233.0/24 maxlen: 24
45.67.234.0/24 maxlen: 24
91.230.149.0/24 maxlen: 24
185.130.56.0/24 maxlen: 24
185.198.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:43:83:7c:da:00:2d:3d:89:0b:b8:b8:30:88:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Apr 29 06:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a03e2c840a2dc831ec1f76ea10102a103ba856f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:4c:64:69:c5:20:d6:ef:88:26:02:97:55:
ba:a8:3e:8b:44:a6:ad:cc:ae:0d:6e:08:97:65:40:
cb:e5:04:da:d5:7b:46:c7:01:c7:e9:f2:f2:23:df:
44:13:cf:a4:98:c5:9d:70:79:80:df:37:b8:cf:16:
e0:a4:30:68:91:d0:20:8e:07:1f:f5:24:a7:d3:52:
d9:62:ce:92:ac:41:7d:dc:e7:14:2e:1d:12:0e:46:
1b:d6:76:06:53:5a:72:0e:c1:3c:69:9e:6b:e0:d2:
11:b9:d0:da:97:97:ae:9f:4a:c5:98:4f:3e:b9:0a:
17:03:9b:38:78:fa:ca:76:a4:53:ef:5a:ee:2e:fd:
81:b7:f2:e1:5f:c0:7a:8e:3b:2a:91:c8:52:3e:98:
d1:f2:71:bc:71:d6:28:1d:42:85:d2:be:cc:a3:18:
83:d6:29:ba:b9:ae:d9:70:c2:56:00:c8:a8:58:de:
68:d3:9e:65:25:14:bf:df:8c:b7:16:d8:68:c8:e5:
d7:37:34:8b:5c:93:6c:cc:2f:ff:fd:3d:60:5c:b2:
1e:02:f9:04:9c:59:ee:9b:9f:a3:ec:e0:f2:79:19:
36:ad:a6:07:c7:8e:1c:27:a9:a0:8f:02:db:b2:e0:
c8:5f:29:28:c3:1a:b4:64:cb:3d:87:93:63:7a:16:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:E2:C8:40:A2:DC:83:1E:C1:F7:6E:A1:01:02:A1:03:BA:85:6F
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/mgPiyECi3IMewfduoQECoQO6hW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.206.0/24
45.67.232.0-45.67.234.255
91.230.149.0/24
185.130.56.0/24
185.198.73.0/24
Signature Algorithm: sha256WithRSAEncryption
69:41:4c:4e:02:24:17:5d:7c:ea:dc:44:3a:5c:d8:4f:f0:b1:
c0:60:de:a1:a8:7f:57:b9:56:a4:dc:cf:b5:45:f8:c9:3c:8a:
79:06:15:ee:fc:0a:15:23:c9:13:70:74:42:58:7f:25:d7:af:
21:ff:fa:7f:66:49:a0:24:4e:6c:b9:0b:cb:bf:21:55:72:49:
4d:f5:4e:58:2e:0e:3b:db:10:21:44:53:4d:64:a7:da:ea:ac:
b0:a9:8e:56:ca:a6:75:a8:73:d7:69:5e:53:53:ed:6c:73:6b:
e1:e2:60:7a:13:4d:c5:fb:0d:54:b3:51:87:5d:da:23:4c:36:
c1:33:ac:2f:32:6d:ec:c6:d4:ef:0e:05:99:e1:85:77:a9:62:
c5:b8:37:59:54:b8:e4:eb:3a:49:99:d4:47:e7:67:39:1a:f6:
06:f9:78:d6:8c:d8:60:f0:42:4d:77:c5:56:ff:cc:be:93:c2:
9d:d7:7c:07:18:e6:94:76:2a:57:67:fa:72:37:09:ac:5b:e0:
72:f0:b7:1b:25:0f:77:ce:15:45:de:05:7c:df:98:2c:50:f4:
04:17:4b:a3:41:bc:96:69:7c:e7:ac:9c:c8:c0:e6:d4:16:7a:
b4:7e:57:50:bb:1c:de:f9:31:4f:13:a6:4e:d9:9a:b2:3e:2c:
e6:7e:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:18:32 2025 by rpki-client