Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa
File: MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa (raw, json)
Hash identifier: afWnYJW6s1CaDObkwTU5kA7v+0oYXDgnGB/f5yofQ5k=
Subject key identifier: 32:A4:F8:1C:92:4E:CD:34:15:33:03:95:50:83:D0:F3:D5:60:EE:87
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 01977CDC3D1A1CD6CA21E5B94D451DBA3AB9
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa
Signing time: Tue 17 Jun 2025 07:48:17 +0000
ROA not before: Tue 17 Jun 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208018
IP address blocks: 185.172.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:dc:3d:1a:1c:d6:ca:21:e5:b9:4d:45:1d:ba:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jun 17 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32a4f81c924ecd34153303955083d0f3d560ee87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:7f:93:05:f9:49:da:ae:8f:b9:65:a8:3c:
aa:9e:77:b2:59:78:66:7a:a1:6a:b8:89:d0:6a:1e:
d3:93:60:84:6c:0d:fa:4e:1a:ea:82:de:01:6e:9b:
14:62:13:fc:40:e2:e7:dd:23:6a:e9:e8:8e:fc:2e:
d1:3f:78:ba:fc:58:ec:8a:8f:a2:6c:02:bc:ae:19:
71:55:9d:e0:5c:a7:27:cd:1f:08:0f:f0:25:84:79:
09:de:34:97:0b:f3:9e:99:28:0d:59:8e:2d:50:3b:
64:e1:e9:44:db:f1:3f:ec:f1:27:8e:dd:a1:0b:cf:
3d:4e:57:59:fa:96:44:f1:5a:72:08:a1:12:17:79:
97:9c:16:9f:a0:b5:f1:a4:f3:d0:8f:40:60:bd:f7:
3e:b3:9b:53:01:1b:eb:87:f2:57:c7:05:d3:1a:9a:
e4:40:3a:8e:ee:09:33:82:bd:a8:bb:e9:c5:e8:f5:
f0:ba:69:a5:0e:35:62:32:56:72:7b:44:2a:f8:b1:
6f:28:a9:d8:c2:f2:ae:f9:60:56:37:e4:3e:da:c8:
1d:5f:94:45:02:d9:a5:31:3d:55:a5:52:21:5b:95:
fa:80:69:ef:50:63:ac:33:83:4f:04:9b:5a:be:ac:
9c:9b:74:02:73:52:7d:b4:9a:bc:99:c1:3c:07:24:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:F8:1C:92:4E:CD:34:15:33:03:95:50:83:D0:F3:D5:60:EE:87
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.207.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7c:b3:55:11:36:3a:fb:01:32:2a:88:18:13:42:06:a8:65:
67:7d:1e:d2:02:3f:2c:60:fd:47:9b:82:6a:ea:fb:f4:6a:cd:
f0:93:a5:a5:96:ec:a4:fd:f5:1d:67:ca:6c:fb:fa:5c:f5:00:
3e:0a:99:50:bf:d3:ac:98:6f:5b:b4:2a:95:14:bd:ad:9a:46:
52:75:ed:3b:3e:60:b9:cd:c3:3c:e5:d3:f9:51:b8:e7:a5:e9:
fc:b3:66:f1:bb:00:89:a3:25:1a:74:38:31:a1:fa:77:c5:03:
54:ab:94:6f:63:d0:27:09:27:5c:76:f6:ef:da:72:e9:0d:3b:
f1:a2:b3:ae:fe:29:bc:3b:37:af:cf:76:e2:b6:b8:5f:6f:4c:
23:fc:ae:33:0a:51:d0:25:38:40:85:63:15:15:9c:b3:42:f8:
0d:74:5b:91:03:2c:d4:0a:08:46:43:62:15:86:4c:7d:87:6e:
dc:04:a7:cc:4d:ef:f7:d8:fe:04:52:b5:62:20:51:a2:ac:6a:
78:06:c8:94:02:5a:6e:c3:a6:c4:c2:55:d6:56:2a:3d:e8:71:
4b:77:8b:e8:a4:3f:2d:a1:29:2e:84:1d:31:7d:33:40:17:e4:
6f:6e:5c:98:9e:80:fa:49:ec:18:e8:1e:a3:ee:89:75:c3:2f:
92:97:9c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:56:24 2025 by rpki-client