Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MX-RxL21AwQXVelzA4IrJb3dj-4.roa
File: MX-RxL21AwQXVelzA4IrJb3dj-4.roa (raw, json)
Hash identifier: dxUOm/3bYpTRNviiYZNfM07knnqfGC+IudqU1B6rLJM=
Subject key identifier: 31:7F:91:C4:BD:B5:03:04:17:55:E9:73:03:82:2B:25:BD:DD:8F:EE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0197872253D2F619A90F5B28ACE03A50D489
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MX-RxL21AwQXVelzA4IrJb3dj-4.roa
Signing time: Thu 19 Jun 2025 07:41:03 +0000
ROA not before: Thu 19 Jun 2025 07:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 93.152.28.0/24 maxlen: 24
93.152.33.0/24 maxlen: 24
93.152.34.0/24 maxlen: 24
93.152.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:22:53:d2:f6:19:a9:0f:5b:28:ac:e0:3a:50:d4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 19 07:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=317f91c4bdb503041755e97303822b25bddd8fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:03:18:f5:d5:4e:74:88:50:d9:96:96:85:
28:df:45:5a:3a:87:92:b2:60:90:87:7a:ca:c6:57:
a7:b2:42:48:9c:f1:94:49:98:ef:85:0b:00:ec:b8:
1c:00:fb:be:2c:32:a9:07:b4:df:db:76:14:b8:07:
37:73:a8:4f:16:62:96:30:0c:73:6c:99:de:16:fe:
ef:f9:28:d1:66:59:1d:fd:ab:3a:44:45:9a:f8:82:
b3:46:8f:70:c8:1e:c5:f4:30:63:65:59:0b:db:27:
d7:1a:74:5e:85:28:df:9f:d9:32:75:ee:5f:c4:87:
a5:fa:6a:c0:07:42:74:bd:c2:41:0b:3e:88:6a:8a:
1c:24:9a:dc:19:09:1e:f3:66:30:99:77:d5:27:dc:
b5:36:2d:d1:71:c3:87:b8:25:04:f9:10:fb:ce:71:
46:d7:9e:08:8b:aa:90:1e:9b:d2:53:b0:3c:39:c9:
d7:ad:83:51:f7:98:01:93:a6:2d:a3:41:5c:76:46:
63:a1:c4:9c:2c:59:38:01:4f:f9:39:d1:94:32:1b:
54:0a:74:26:12:95:04:36:3d:af:5d:e9:0d:af:80:
e0:a2:4e:13:49:87:5a:1a:7f:b1:49:22:e3:89:04:
d3:2c:ba:75:02:ac:ef:ac:bf:46:68:12:f0:6a:d2:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:91:C4:BD:B5:03:04:17:55:E9:73:03:82:2B:25:BD:DD:8F:EE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MX-RxL21AwQXVelzA4IrJb3dj-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.28.0/24
93.152.33.0-93.152.34.255
93.152.37.0/24
Signature Algorithm: sha256WithRSAEncryption
57:45:90:48:ba:5f:4d:62:47:04:41:87:ac:0c:fd:1c:bb:52:
fb:40:28:11:74:f1:15:d5:3b:5a:1c:93:e9:d7:4d:b5:d2:01:
27:3d:73:be:fd:b0:65:b2:ec:2e:1a:f3:f4:a9:a6:5a:9f:c5:
7e:99:b7:be:88:4d:f8:16:d0:c1:2b:2d:06:76:19:1a:aa:00:
c8:46:54:aa:f9:d5:ba:5d:69:27:5f:70:01:74:68:29:2d:4e:
3a:b4:93:2e:93:70:f4:f4:b0:3b:5a:9d:55:45:16:af:fe:f6:
30:92:65:fa:d3:4d:2f:e5:00:d4:d9:a5:c6:ce:db:e2:fe:48:
96:93:a4:95:69:b4:9f:2b:7d:d5:97:d6:50:34:a2:fe:23:88:
2c:ad:67:53:ca:8c:1a:b9:dc:a8:45:fb:d2:3e:eb:55:5f:08:
bb:f8:67:37:4d:0d:99:64:1c:74:de:2d:02:15:1c:fe:e1:6f:
bb:5b:17:29:41:91:e9:fa:38:29:44:3f:2e:5f:7f:07:eb:c3:
6e:a5:21:83:b7:78:7b:bf:6f:d9:7b:de:30:13:36:f7:28:e0:
5f:2b:57:1c:7b:70:db:6d:f0:ba:4b:f8:89:1f:0f:e8:21:f3:
5c:3e:1f:e0:99:b7:fd:cb:ec:9b:1f:b8:ab:53:06:8e:62:0d:
28:8b:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:15:50 2025 by rpki-client