Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MudRzNeUk2R859eEP09GJeDExf0.roa
File: MudRzNeUk2R859eEP09GJeDExf0.roa (raw, json)
Hash identifier: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=
Subject key identifier: 32:E7:51:CC:D7:94:93:64:7C:E7:D7:84:3F:4F:46:25:E0:C4:C5:FD
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019428260E2EEF02D96F50867CCC8A4D99BD
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MudRzNeUk2R859eEP09GJeDExf0.roa
Signing time: Thu 02 Jan 2025 17:52:50 +0000
ROA not before: Thu 02 Jan 2025 17:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209474
IP address blocks: 188.191.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:0e:2e:ef:02:d9:6f:50:86:7c:cc:8a:4d:99:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32e751ccd79493647ce7d7843f4f4625e0c4c5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:53:35:65:4f:97:ba:2b:a6:50:46:62:13:
92:dc:28:45:74:c8:55:eb:e7:be:15:e2:97:a2:b6:
3d:2f:90:38:82:a6:59:5a:19:2a:7d:f4:24:89:35:
af:8a:f1:34:eb:67:15:ed:b6:15:2e:b0:9a:b1:9a:
5f:51:54:fe:6a:db:5d:f4:5a:a3:e9:88:d2:bd:73:
52:73:cf:b7:19:ac:fb:55:50:c2:59:d2:3e:27:9d:
f0:da:ab:d0:99:f0:ea:71:06:d8:18:17:bb:ea:98:
d8:8d:b0:12:61:2c:5b:5e:fd:a2:1c:61:7d:d6:2d:
ae:c8:03:60:7f:16:59:54:21:e1:fb:78:37:52:bb:
d2:d1:82:a6:a6:46:42:20:41:45:8f:3a:e2:0b:18:
18:53:a9:58:7d:e0:ff:0c:c5:9c:c1:48:1c:aa:42:
16:e3:a7:13:c1:02:00:fc:7f:89:d3:3c:17:0a:41:
4c:1c:de:a3:b9:b5:71:b8:d1:24:c9:43:f0:8e:65:
e9:5d:b7:d0:6e:96:44:1b:70:d6:7a:fb:9b:01:fd:
7a:e3:23:18:43:fd:eb:fb:c5:68:01:c4:20:ab:23:
93:94:03:f4:a1:26:0f:7c:13:05:f8:12:70:04:90:
37:47:2c:15:85:5f:f7:e2:24:c4:9b:d0:82:26:1a:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:51:CC:D7:94:93:64:7C:E7:D7:84:3F:4F:46:25:E0:C4:C5:FD
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/MudRzNeUk2R859eEP09GJeDExf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:88:db:2d:1b:21:1d:e1:ed:a1:73:3c:24:6e:39:92:6e:7c:
10:26:83:a7:9b:ec:7b:b1:de:73:b3:b8:74:48:82:32:e4:92:
10:3e:ee:1b:fe:35:9b:49:53:96:d1:b0:1c:78:a1:18:e7:c7:
81:67:46:b3:0d:34:8d:63:93:a9:11:51:59:19:11:c0:dd:97:
20:1c:96:38:18:48:cb:cd:87:c0:9d:74:3c:ba:b4:55:1a:83:
c2:3e:0b:3e:40:90:02:28:cf:9b:23:2e:40:fc:48:cb:c3:39:
da:96:43:4e:32:04:ee:dc:a1:ed:f6:73:ca:8d:9a:5a:66:6b:
f4:d0:3b:f3:2d:88:5b:b1:f1:ae:fa:09:9a:e4:74:81:c1:af:
fb:01:8c:b1:8f:38:8a:35:cf:73:44:0e:ff:e5:c4:81:c3:83:
2e:7a:f9:94:2b:ea:b4:5a:79:6c:7a:f1:50:5e:4c:f6:76:32:
41:94:72:ef:8b:0a:eb:6c:01:38:a3:16:40:6b:1f:55:7d:d8:
5d:98:8c:18:f3:1b:9d:2f:40:43:a8:33:23:8f:3a:e5:5f:8b:
d9:14:5d:12:d0:72:fd:11:0a:30:23:88:98:c6:37:39:39:af:
0e:a8:ac:17:d8:58:d3:06:29:29:d6:c5:e9:de:f2:dd:2e:4b:
bf:8d:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:02 2025 by rpki-client