Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/Mdhc0HErAhKi4LnGQpbnvACoaqA.roa
File: Mdhc0HErAhKi4LnGQpbnvACoaqA.roa (raw, json)
Hash identifier: +lWO/9SWCJf5PkUWv0wqllxzcN5TlPPfmkgBPh2/u3g=
Subject key identifier: 31:D8:5C:D0:71:2B:02:12:A2:E0:B9:C6:42:96:E7:BC:00:A8:6A:A0
Certificate issuer: /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial: 019422FB4EF709D231EE394D991C64BB6B06
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/Mdhc0HErAhKi4LnGQpbnvACoaqA.roa
Signing time: Wed 01 Jan 2025 17:48:02 +0000
ROA not before: Wed 01 Jan 2025 17:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43766
IP address blocks: 91.147.128.0/23 maxlen: 23
91.147.130.0/24 maxlen: 24
91.147.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4e:f7:09:d2:31:ee:39:4d:99:1c:64:bb:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Validity
Not Before: Jan 1 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31d85cd0712b0212a2e0b9c64296e7bc00a86aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:2d:b1:07:c6:94:53:87:3b:11:e5:fd:61:
c8:17:8b:c3:ec:75:4b:84:e9:2d:7b:28:81:29:15:
c5:63:00:9e:c1:3c:14:e2:a6:17:48:6a:88:47:cc:
00:d8:b1:85:a3:3b:cf:e5:f9:f2:24:57:d7:56:60:
42:ea:15:e0:7e:7c:63:84:fa:bb:87:b9:a2:cd:f3:
11:df:04:09:20:a9:ef:d9:ee:6d:f9:93:59:1c:9c:
24:55:72:5b:2a:9f:cd:56:6f:87:ee:9c:39:b5:5e:
64:f6:f8:ba:9f:57:60:0c:63:b2:54:e7:bf:b4:be:
3d:a9:34:ca:66:34:88:a4:f3:91:ba:9a:ad:bc:85:
9d:e5:b9:71:97:da:16:90:0b:95:63:87:0b:c5:c2:
05:fb:13:a0:fe:12:0a:64:5a:d7:75:05:a7:ab:c7:
62:50:82:0c:96:8c:bd:81:ca:99:d3:13:2a:87:c7:
51:41:70:59:33:50:9c:99:d8:ef:97:7e:c7:34:0c:
09:2b:ac:74:14:4c:45:61:68:56:cd:22:c1:89:0d:
81:15:24:04:fd:f7:37:1c:5d:07:a6:e9:b7:36:6f:
56:3f:d6:c1:c2:b6:f1:f6:01:9f:9a:55:5b:1c:f4:
39:87:2f:a1:e8:5d:37:99:fa:59:a6:64:0c:3d:12:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D8:5C:D0:71:2B:02:12:A2:E0:B9:C6:42:96:E7:BC:00:A8:6A:A0
X509v3 Authority Key Identifier:
keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/Mdhc0HErAhKi4LnGQpbnvACoaqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.128.0/22
Signature Algorithm: sha256WithRSAEncryption
13:2a:c2:21:73:30:06:5b:77:c3:ca:7b:33:44:54:2c:ad:71:
ec:cf:1b:20:f1:2a:c9:9f:0e:1c:d6:7b:10:6f:43:2a:6e:9d:
2a:da:e3:e3:4d:00:28:94:14:fb:6c:e6:9e:4c:9f:11:f6:69:
a7:8d:33:f7:fe:63:1f:a8:81:4d:41:72:8e:25:80:64:b1:c0:
7c:0f:03:e4:f6:78:6b:2c:ed:b1:84:03:ba:bd:d6:8f:f2:1d:
fc:56:cc:04:7b:1b:fb:8a:09:8c:bc:52:f5:3a:78:1b:0d:aa:
13:c2:5a:2f:64:98:22:e1:93:11:58:69:f3:13:a5:b7:1b:ee:
d3:f7:00:ad:85:93:44:08:0a:47:31:54:1f:16:c8:d0:63:9c:
40:f8:a2:0b:9e:b0:c3:05:80:4b:68:da:fe:30:c4:ad:0b:b3:
10:99:12:e2:88:b7:74:89:07:cb:1b:10:79:bf:18:f9:24:7b:
b4:c3:5f:d0:55:0d:01:91:04:23:5f:9d:c4:85:a3:1d:1e:78:
cb:0d:0a:a7:41:01:a3:50:62:05:63:5b:17:c4:67:82:62:4f:
6e:c9:c7:53:13:d4:08:fc:e9:b8:a8:3b:d9:a5:05:62:1c:e7:
06:69:3e:63:23:16:9d:9a:8e:17:4c:6f:16:5a:da:2b:f0:10:
82:da:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:20 2025 by rpki-client