Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MGqbUXBC89nZYYa7_iOxW4q-3kI.roa
File: MGqbUXBC89nZYYa7_iOxW4q-3kI.roa (raw, json)
Hash identifier: f2Vjz64SZ2px9RqxNu2wMPX8nSYxR9VUw5EzK/c7nWQ=
Subject key identifier: 30:6A:9B:51:70:42:F3:D9:D9:61:86:BB:FE:23:B1:5B:8A:BE:DE:42
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019753941D83233EB0A9D43FD43D44D45BC4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MGqbUXBC89nZYYa7_iOxW4q-3kI.roa
Signing time: Mon 09 Jun 2025 07:25:05 +0000
ROA not before: Mon 09 Jun 2025 07:25:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 82.152.6.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
194.105.83.0/24 maxlen: 24
194.105.89.0/24 maxlen: 24
213.210.55.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
213.218.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:94:1d:83:23:3e:b0:a9:d4:3f:d4:3d:44:d4:5b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 9 07:25:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=306a9b517042f3d9d96186bbfe23b15b8abede42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e2:50:76:3a:5e:82:b7:2d:5f:7d:c8:07:b2:
67:63:8d:6b:47:96:ef:7f:db:ca:0f:8c:25:21:fd:
d6:e5:cc:d8:b0:ab:3d:2c:9e:37:9c:18:aa:70:5b:
0e:a9:dc:54:de:c3:7f:5d:7b:29:64:3f:ad:89:be:
03:d2:54:92:07:64:06:90:8e:9e:6a:ed:98:30:ec:
b0:0f:e5:8a:64:a3:d8:c8:66:23:83:83:db:79:57:
22:16:43:5b:ba:3d:c7:0c:78:a7:7d:c4:66:f4:84:
c6:6f:37:98:07:d9:58:3f:fa:df:77:64:1a:af:23:
d6:d0:19:09:f3:12:96:56:2d:2b:18:e5:23:73:a1:
74:9a:31:e3:e4:48:8c:35:aa:2e:03:5a:e3:eb:6e:
66:af:e6:d2:a8:35:40:a5:7d:56:53:bc:95:a8:38:
c5:68:a2:63:31:9c:e6:83:79:88:cd:ff:42:bc:b8:
48:ef:92:be:0f:7d:ae:8c:cc:1a:12:d7:d4:aa:6e:
67:c3:cb:88:57:32:88:48:3c:38:14:83:1b:6b:ca:
25:46:2f:12:ac:9d:38:96:b9:e1:52:56:40:68:1e:
e5:ff:e1:d1:54:b6:3f:f7:8c:bf:98:42:d7:74:8d:
a3:49:59:53:9e:4d:5a:12:a6:c7:0c:c5:dd:74:60:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:9B:51:70:42:F3:D9:D9:61:86:BB:FE:23:B1:5B:8A:BE:DE:42
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MGqbUXBC89nZYYa7_iOxW4q-3kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.6.0/24
89.213.150.0/24
194.105.83.0/24
194.105.89.0/24
213.210.55.0/24
213.218.228.0/24
213.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
93:86:84:f3:1e:03:ed:2e:ca:0a:78:34:39:90:71:b2:27:fb:
e6:df:7a:d1:e3:e7:05:e9:2b:d8:c7:77:bf:7b:9b:62:d0:70:
f2:22:55:63:28:51:a6:31:6a:86:90:a8:6d:42:3b:b4:66:03:
ba:e2:e2:a8:b1:69:31:e5:89:91:5c:a9:47:a1:df:9c:3e:bc:
cd:c1:ac:2e:3a:10:04:0d:5a:2f:1c:70:c2:9a:a8:82:23:44:
f6:31:ab:96:c5:04:51:8c:9f:66:9f:d8:26:de:c7:58:e7:fa:
be:a6:36:67:d1:9e:a6:64:e2:07:34:ca:fb:45:a0:a5:03:76:
85:9b:5a:85:b6:20:41:de:86:a4:6b:d1:56:18:d6:d3:36:0a:
7a:71:47:ce:e6:a6:aa:74:95:ba:cd:c4:a1:e0:5c:9d:2c:01:
27:9c:38:e5:e4:9d:1c:1e:8f:4d:06:74:ea:02:8f:ae:46:6f:
86:ea:a5:18:58:e5:ce:ae:03:1d:16:e1:1b:6e:8c:54:3e:83:
18:52:40:cb:ac:ce:a9:ca:bc:32:8a:1d:60:20:8c:53:13:1c:
5c:cc:08:37:d2:5c:eb:fc:dc:a4:a0:c2:6b:8b:d0:f9:86:e4:
64:dd:2b:3f:af:d2:e0:c2:55:63:4c:d0:d4:a6:16:2e:e7:f4:
6b:15:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:11 2025 by rpki-client