Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/MlaxuC-MvqxdJWc5pKLiaE76NMk.roa
File: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (raw, json)
Hash identifier: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=
Subject key identifier: 32:56:B1:B8:2F:8C:BE:AC:5D:25:67:39:A4:A2:E2:68:4E:FA:34:C9
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 01942747A3DCB7E9095250408DF30672BCF9
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/MlaxuC-MvqxdJWc5pKLiaE76NMk.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199199
IP address blocks: 176.97.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a3:dc:b7:e9:09:52:50:40:8d:f3:06:72:bc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3256b1b82f8cbeac5d256739a4a2e2684efa34c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:b1:cf:78:23:55:7c:f1:3e:bc:0b:b0:4f:
db:8b:29:c7:e1:b9:1b:40:55:a2:b3:41:b7:d0:62:
78:ac:39:95:4b:f0:c2:93:68:96:35:4f:d7:17:48:
b7:a0:8e:d8:ff:f2:3a:9c:e7:68:b1:b2:2b:ec:ce:
67:71:09:83:cf:93:e0:68:7d:b7:de:b7:4e:a4:f2:
8c:93:09:ed:98:7e:e2:ee:87:55:db:84:8f:2c:39:
ab:ad:7d:a1:11:c3:53:48:18:18:ef:24:ad:d9:92:
36:f2:ae:5a:8b:93:7a:a7:1c:bf:f4:44:a1:91:50:
1c:bc:e2:60:ba:5b:98:56:36:ca:00:aa:c4:1c:1a:
a5:b0:8b:25:62:ce:26:c1:6a:63:17:de:16:76:4e:
5b:73:4d:2d:e0:36:13:ef:91:c1:71:58:df:25:9e:
b3:55:83:dd:54:ca:12:0c:df:24:38:34:dd:9b:9f:
67:27:f5:b6:ce:99:d6:88:0f:ed:da:ba:3a:05:67:
1e:3b:8e:c7:30:dd:a5:8e:b2:17:2c:e1:f0:20:0b:
7a:e7:03:3e:43:b8:5c:bb:4b:6c:7a:08:2f:02:3d:
78:98:5f:e9:07:f4:00:e0:d9:3c:8a:06:47:df:03:
b4:69:32:d9:80:1a:3f:16:e5:c2:cb:e0:9f:a0:da:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:56:B1:B8:2F:8C:BE:AC:5D:25:67:39:A4:A2:E2:68:4E:FA:34:C9
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/MlaxuC-MvqxdJWc5pKLiaE76NMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.159.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ab:ec:e5:52:32:63:4d:c9:20:5c:9d:bc:71:11:9a:d2:0a:
a6:33:96:ac:ac:c9:bf:e7:67:ce:91:52:bd:4a:87:a1:dd:e3:
2c:4b:fb:60:e8:c2:ad:c3:60:37:db:ad:1d:24:82:2c:98:fe:
38:34:e4:0c:84:18:ed:83:c9:15:22:a4:2e:07:ff:97:1d:fe:
be:d3:ae:85:68:44:83:ff:de:ac:a7:a4:5f:00:4a:6f:26:cd:
cb:06:f4:12:a3:07:59:66:12:ac:2f:20:d6:98:ed:19:74:8b:
f2:d5:5e:70:15:ad:73:6d:d4:ba:f7:d3:5a:af:28:a4:e9:fb:
a2:a9:43:a8:1c:44:4c:56:30:75:ee:98:8d:7c:7b:4f:1f:d2:
8a:b8:c1:c4:62:cc:02:cc:04:8e:49:2f:99:26:db:58:50:f5:
b2:8b:90:27:22:39:dd:e5:92:ae:1f:45:77:5f:b3:99:a3:ed:
d4:92:42:de:a9:2d:b3:74:3a:a6:0c:7b:9a:8e:55:4e:91:90:
c5:0c:30:4a:f5:85:48:de:ed:69:c5:d9:c8:ec:ec:96:14:45:
21:1c:21:cb:48:5a:21:5d:2c:77:6a:91:78:9e:34:b0:ff:57:
ff:af:db:b8:c9:d9:d9:40:ad:ef:18:43:cb:64:37:74:90:18:
ee:2c:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:49:13 2025 by rpki-client