Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/PmMRDG9xx1iegEvlwTgY94xn0uY.roa
File: PmMRDG9xx1iegEvlwTgY94xn0uY.roa (raw, json)
Hash identifier: rnYe+7KnzmmrVpmGGJ0sYn/ALtPwvcJTUyQU0nsWM1w=
Subject key identifier: 3E:63:11:0C:6F:71:C7:58:9E:80:4B:E5:C1:38:18:F7:8C:67:D2:E6
Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Certificate serial: 019427B3E48A46BFCB554DF71B3A3A4F20B0
Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/PmMRDG9xx1iegEvlwTgY94xn0uY.roa
Signing time: Thu 02 Jan 2025 15:48:08 +0000
ROA not before: Thu 02 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21234
IP address blocks: 217.25.128.0/20 maxlen: 24
217.25.137.0/24 maxlen: 24
217.25.138.0/24 maxlen: 24
2a07:fbc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:e4:8a:46:bf:cb:55:4d:f7:1b:3a:3a:4f:20:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Validity
Not Before: Jan 2 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e63110c6f71c7589e804be5c13818f78c67d2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:22:3f:82:f2:a6:80:de:76:45:6b:db:e8:
12:f9:ac:69:7f:f9:e3:40:41:2d:15:30:97:b9:84:
e0:8e:1c:95:ce:ab:e9:1f:85:d2:b6:d0:67:fa:75:
3b:6d:19:76:4b:0a:95:81:df:b4:45:ff:95:20:2b:
87:b3:c7:7f:f8:a7:e1:92:ba:f4:f9:a1:2f:10:85:
43:f4:90:99:92:24:ec:6d:10:df:77:44:88:b1:60:
62:8e:25:08:da:5a:fd:46:8f:86:51:c5:5b:c7:a7:
6b:49:49:09:e0:8b:a3:7d:7d:e7:99:e4:da:27:a5:
7a:21:03:3e:28:ba:eb:aa:ae:9d:53:db:d0:fe:ad:
02:da:b8:0b:43:a1:de:63:e9:8a:38:90:1a:51:84:
3e:a2:96:5d:c2:db:b8:8c:e3:30:2f:1b:b0:ed:11:
11:6c:80:f9:00:17:31:08:a4:26:86:23:19:1e:8e:
f2:54:05:f3:f7:38:bc:37:a2:d0:d1:91:3c:b9:4c:
8e:d0:13:35:c2:5a:7b:c6:9a:ac:78:48:a1:3e:be:
db:df:f1:58:56:29:0b:ef:9e:fe:82:f6:d8:a1:ef:
59:1a:24:d6:5d:b9:30:87:c5:8f:5b:2f:5e:41:bf:
b3:28:ce:82:0a:87:6a:0e:4d:a5:cd:60:6a:82:e1:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:63:11:0C:6F:71:C7:58:9E:80:4B:E5:C1:38:18:F7:8C:67:D2:E6
X509v3 Authority Key Identifier:
keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/PmMRDG9xx1iegEvlwTgY94xn0uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.128.0/20
IPv6:
2a07:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:4f:cc:09:ae:d2:5c:98:12:89:ea:a3:ce:2d:e2:92:d2:d6:
e9:84:5c:c8:dc:61:f2:19:ea:62:1c:e9:3d:6b:76:ee:23:f0:
4d:49:2e:9f:86:e1:bf:e5:bc:a4:7e:18:87:36:f2:c1:8e:11:
1a:c0:4a:1b:d4:94:1d:9a:85:19:c0:73:d7:03:4f:2c:08:a2:
9c:90:4c:2b:c0:9c:d4:2e:68:62:7e:e5:58:f9:87:7e:ba:17:
ed:9f:c6:dd:e2:dc:c2:87:f1:21:83:7d:9d:e4:0f:02:81:f6:
63:b8:71:41:b1:10:3e:f0:f9:b8:1c:ff:91:96:60:32:2c:c2:
a7:01:93:ec:16:a4:5c:87:db:4e:db:6b:4c:50:51:bd:a5:1a:
57:5a:e1:84:0a:f0:ed:af:c2:e3:07:78:2a:cb:ee:01:e8:ce:
71:3f:3b:28:4a:8d:db:b6:6a:30:c5:4b:46:f6:19:04:9f:6a:
b5:df:08:cf:31:16:2a:54:20:49:7d:e6:11:f3:f1:65:26:f7:
f0:e7:db:4b:b0:9b:c8:8d:00:f0:91:7a:5e:73:2f:53:3a:4d:
65:2f:58:ff:1c:76:d9:9c:1d:2c:d9:0e:2e:5b:bb:f7:8e:1f:
de:d1:89:16:1b:af:c8:72:f6:ca:85:0d:cf:f0:eb:3e:c7:ca:
fc:d9:87:65
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQns+SKRr/LVU33Gzo6TyCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh
NWEwZmEwHhcNMjUwMTAyMTU0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTYzMTEwYzZmNzFjNzU4OWU4MDRiZTVjMTM4MThmNzhjNjdkMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAEiP4LypoDedkVr2+gS+axpf/nj
QEEtFTCXuYTgjhyVzqvpH4XSttBn+nU7bRl2SwqVgd+0Rf+VICuHs8d/+Kfhkrr0
+aEvEIVD9JCZkiTsbRDfd0SIsWBijiUI2lr9Ro+GUcVbx6drSUkJ4IujfX3nmeTa
J6V6IQM+KLrrqq6dU9vQ/q0C2rgLQ6HeY+mKOJAaUYQ+opZdwtu4jOMwLxuw7RER
bID5ABcxCKQmhiMZHo7yVAXz9zi8N6LQ0ZE8uUyO0BM1wlp7xpqseEihPr7b3/FY
VikL757+gvbYoe9ZGiTWXbkwh8WPWy9eQb+zKM6CCodqDk2lzWBqguEhHQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD5jEQxvccdYnoBL5cE4GPeMZ9LmMB8GA1UdIwQY
MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct
M2I1NWYyMzI3YjM0LzEvUG1NUkRHOXh4MWllZ0V2bHdUZ1k5NHhuMHVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0
LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2RmAMA0E
AgACMAcDBQAqB/vAMA0GCSqGSIb3DQEBCwUAA4IBAQAKT8wJrtJcmBKJ6qPOLeKS
0tbphFzI3GHyGepiHOk9a3buI/BNSS6fhuG/5bykfhiHNvLBjhEawEob1JQdmoUZ
wHPXA08sCKKckEwrwJzULmhifuVY+Yd+uhftn8bd4tzCh/Ehg32d5A8CgfZjuHFB
sRA+8Pm4HP+RlmAyLMKnAZPsFqRch9tO22tMUFG9pRpXWuGECvDtr8LjB3gqy+4B
6M5xPzsoSo3btmowxUtG9hkEn2q13wjPMRYqVCBJfeYR8/FlJvfw59tLsJvIjQDw
kXpecy9TOk1lL1j/HHbZnB0s2Q4uW7v3jh/e0YkWG6/IcvbKhQ3P8Os+x8r82Ydl
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:43 2025 by rpki-client