Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Mr5aQe8u4hVi7-Ntl_FrQ4rqR5g.roa
File: Mr5aQe8u4hVi7-Ntl_FrQ4rqR5g.roa (raw, json)
Hash identifier: kTWNv5Xsltzhk5IwjzA5tfzC/23oXbmG7h2jGJ4mFoA=
Subject key identifier: 32:BE:5A:41:EF:2E:E2:15:62:EF:E3:6D:97:F1:6B:43:8A:EA:47:98
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C44C17A48C9683B77D6B3E098A4CB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Mr5aQe8u4hVi7-Ntl_FrQ4rqR5g.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214788
IP address blocks: 85.120.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:44:c1:7a:48:c9:68:3b:77:d6:b3:e0:98:a4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32be5a41ef2ee21562efe36d97f16b438aea4798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:bc:11:5e:0a:85:7d:a7:e2:6e:4f:8a:52:
98:36:fc:0b:c6:db:b8:19:8c:01:21:3c:23:04:42:
b1:18:12:24:80:2d:65:29:a8:25:64:84:f1:cc:2e:
40:29:07:4a:d8:a4:6c:b0:5d:8f:2f:74:16:9e:42:
33:71:4f:b3:0c:04:db:d5:67:d5:29:6a:f6:20:d7:
9e:43:7e:ff:f0:29:67:4a:29:2d:5b:5b:9a:57:ff:
79:d2:9d:73:7e:0b:56:6f:14:84:fa:18:48:80:e5:
a4:15:6c:67:0b:bd:5c:36:12:f0:bc:75:da:0d:c1:
f2:ae:37:45:02:00:81:d7:e2:e6:94:e4:46:13:42:
93:72:82:0d:2d:89:8e:12:b0:98:98:a4:b3:22:02:
05:b5:33:a0:c2:2b:99:72:19:ad:4c:08:c8:3b:2d:
1e:c2:fe:9e:09:8e:50:58:08:43:75:f2:74:fe:d0:
c2:04:a7:61:da:7d:b0:63:df:12:4b:78:bf:08:7e:
a0:3f:23:2a:37:ca:f0:86:05:7c:6b:b4:16:0e:fb:
8c:7a:eb:be:29:8d:37:54:9c:dc:2b:84:c2:4a:bb:
70:ba:e9:c4:99:56:12:14:bf:e4:4b:ab:3c:2f:8f:
02:31:93:07:fd:96:c1:f8:3d:f8:73:f9:a2:23:1c:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:5A:41:EF:2E:E2:15:62:EF:E3:6D:97:F1:6B:43:8A:EA:47:98
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Mr5aQe8u4hVi7-Ntl_FrQ4rqR5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:cd:a7:24:de:8f:ed:44:40:24:95:e2:9c:7f:23:21:d9:f3:
a1:43:92:63:c1:06:9a:04:c7:63:64:2e:91:32:5e:1b:55:a4:
ca:f8:c3:78:68:2d:fc:40:ba:8b:4c:f3:a6:40:20:15:fb:ed:
97:7f:a6:e8:d5:c6:99:13:63:d7:2e:68:3e:1f:44:12:24:50:
1c:6b:7b:94:63:a9:07:26:43:66:0c:5a:9a:f5:a0:55:15:44:
98:16:5f:5b:7f:5f:d2:58:38:ca:c6:8d:db:f7:fe:94:e1:cd:
34:ba:21:d4:90:28:41:6e:5b:b1:09:d7:08:66:d7:ad:1d:e0:
2e:68:58:88:c9:d1:bb:18:a7:63:e3:52:f8:5d:2a:71:e4:25:
38:e5:aa:7a:c8:c3:ac:9e:3f:d9:f7:0a:ea:88:d5:5f:16:fd:
47:aa:db:46:fa:af:07:75:e7:29:d6:4b:f5:6e:fe:04:de:7d:
4c:90:da:0b:43:33:4c:1b:dc:2a:90:c0:9f:2d:dc:9e:49:87:
18:3d:81:80:8f:e0:c9:3b:12:cb:fa:30:c5:21:30:3e:68:3b:
cd:c8:bb:eb:58:4b:f9:5a:a4:75:f2:03:77:df:99:1a:6f:3c:
6c:6c:78:31:36:b2:ba:4d:96:68:74:3e:49:58:56:88:67:44:
b7:ae:30:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:42 2025 by rpki-client