Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/MbhzlhxrvaXyO1Lw7RGG1dMkiFg.roa
File: MbhzlhxrvaXyO1Lw7RGG1dMkiFg.roa (raw, json)
Hash identifier: hlzCmhJ2QYyMARxKmSDGkDcLH5m78FN0GFM2VOrt0hI=
Subject key identifier: 31:B8:73:96:1C:6B:BD:A5:F2:3B:52:F0:ED:11:86:D5:D3:24:88:58
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019498CAE36468F561D461D132A0570EEFE0
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/MbhzlhxrvaXyO1Lw7RGG1dMkiFg.roa
Signing time: Fri 24 Jan 2025 14:50:20 +0000
ROA not before: Fri 24 Jan 2025 14:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 31.222.227.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
176.53.146.0/23 maxlen: 23
185.235.230.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
2a0a:2e80::/32 maxlen: 32
2a0a:2e82::/32 maxlen: 32
2a11:7e40::/48 maxlen: 48
2a11:7e40:1::/48 maxlen: 48
2a11:7e40:2::/48 maxlen: 48
2a11:8480::/32 maxlen: 32
2a11:8481::/32 maxlen: 32
2a11:8482::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:ca:e3:64:68:f5:61:d4:61:d1:32:a0:57:0e:ef:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jan 24 14:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31b873961c6bbda5f23b52f0ed1186d5d3248858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:98:8c:c8:c2:3a:a8:39:18:c4:b0:89:27:
63:88:8e:9b:bc:00:79:dc:fe:3e:c4:38:ee:92:1d:
2a:f9:31:6c:dc:7b:da:1f:f6:95:9a:70:1c:ca:c7:
99:c4:7c:33:67:20:d5:84:4c:8f:bb:7e:05:09:46:
5d:cb:f8:de:88:6e:cd:4b:5a:a2:11:0c:e5:c3:99:
56:6c:28:2f:d0:81:30:b9:1b:48:e0:d2:7e:34:15:
9c:c6:b8:cf:7d:f3:5d:6c:14:db:c5:5a:cb:65:bb:
de:c5:9e:0e:d5:7c:1b:f9:54:57:ec:82:74:30:e6:
5d:19:dd:eb:51:12:b9:e1:ac:f8:29:5a:a6:df:fc:
ed:79:60:36:66:1f:40:2b:b8:ea:d6:d5:e9:72:48:
71:d1:6f:f9:0c:e7:5a:e1:08:a1:55:3f:dd:13:fb:
98:df:e2:d4:4d:f1:76:13:98:1a:32:27:37:ae:18:
2c:a2:6b:c0:85:19:38:f2:ab:ea:d2:a3:c7:d1:b2:
cd:49:25:13:b7:13:8a:e1:bb:82:17:27:44:76:41:
ba:f8:6d:ea:2b:23:91:61:1a:7d:7a:a8:b4:5b:db:
15:ff:52:27:14:47:bf:63:f9:08:02:b6:a7:85:9d:
12:90:ad:6a:d3:f8:1e:6b:d6:0b:87:16:62:29:42:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:73:96:1C:6B:BD:A5:F2:3B:52:F0:ED:11:86:D5:D3:24:88:58
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/MbhzlhxrvaXyO1Lw7RGG1dMkiFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
94.247.137.0/24
176.53.146.0/23
185.235.230.0/24
IPv6:
2001:678:e30::/48
2a0a:2e80::/32
2a0a:2e82::/32
2a11:7e40::-2a11:7e40:2:ffff:ffff:ffff:ffff:ffff
2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:e8:f7:ab:b1:1b:ca:bc:de:29:b6:28:bb:86:03:b5:60:02:
aa:1c:c5:af:2b:5b:e4:79:b6:f2:5d:b5:15:30:e9:6d:23:1d:
a8:28:eb:4d:c2:11:7d:0c:a9:81:ef:bc:a4:85:98:13:73:e4:
d2:eb:d1:8e:af:33:fd:16:c1:12:16:65:0a:bf:ca:7c:a6:6c:
8e:46:97:e3:cd:3d:65:4a:7d:e1:23:27:b2:df:f0:46:24:63:
04:6e:06:52:37:79:ca:67:2c:45:82:15:97:6a:d6:17:e5:37:
81:85:77:cd:1d:9e:9e:5d:9c:44:b4:07:e2:34:c0:30:dd:93:
12:13:a8:a3:c5:0f:13:6b:77:29:4e:70:e0:90:e5:bb:64:69:
11:15:d9:9f:0e:5b:9e:af:59:5d:ed:6b:e6:a8:b3:c4:8c:4a:
6a:63:0c:d0:23:a7:6a:52:2f:2b:2d:30:c0:be:52:6f:47:1b:
0d:e2:3b:4e:47:1c:8f:f1:ac:78:01:74:dd:e9:30:0f:23:f9:
5d:95:fd:9d:68:17:e5:e4:9d:16:c2:d4:49:88:a0:af:40:15:
23:ad:59:b5:d9:bd:96:97:61:10:0c:cd:a2:5a:ba:0d:0f:f2:
46:d1:ab:85:0b:c0:23:73:f7:c9:b4:4d:50:ad:31:ae:18:7b:
b9:17:ed:e8
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZSYyuNkaPVh1GHRMqBXDu/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3
ZmY3MzYwHhcNMjUwMTI0MTQ1MDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWI4NzM5NjFjNmJiZGE1ZjIzYjUyZjBlZDExODZkNWQzMjQ4ODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskmYjMjCOqg5GMSwiSdjiI6bvAB5
3P4+xDjukh0q+TFs3HvaH/aVmnAcyseZxHwzZyDVhEyPu34FCUZdy/jeiG7NS1qi
EQzlw5lWbCgv0IEwuRtI4NJ+NBWcxrjPffNdbBTbxVrLZbvexZ4O1Xwb+VRX7IJ0
MOZdGd3rURK54az4KVqm3/zteWA2Zh9AK7jq1tXpckhx0W/5DOda4QihVT/dE/uY
3+LUTfF2E5gaMic3rhgsomvAhRk48qvq0qPH0bLNSSUTtxOK4buCFydEdkG6+G3q
KyORYRp9eqi0W9sV/1InFEe/Y/kIAranhZ0SkK1q0/gea9YLhxZiKUKR0QIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFDG4c5Yca72l8jtS8O0RhtXTJIhYMB8GA1UdIwQY
MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut
YWYxZWYxZDdhZmI4LzEvTWJoemxoeHJ2YVh5TzFMdzdSR0cxZE1raUZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4
LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTAeBAIAATAYAwQAH97jAwQA
XveJAwQBsDWSAwQAuevmMD8EAgACMDkDBwAgAQZ4DjADBQAqCi6AAwUAKgougjAQ
AwUGKhF+QAMHACoRfkAAAjAOAwUHKhGEgAMFACoRhIIwDQYJKoZIhvcNAQELBQAD
ggEBAEDo96uxG8q83im2KLuGA7VgAqocxa8rW+R5tvJdtRUw6W0jHago603CEX0M
qYHvvKSFmBNz5NLr0Y6vM/0WwRIWZQq/ynymbI5Gl+PNPWVKfeEjJ7Lf8EYkYwRu
BlI3ecpnLEWCFZdq1hflN4GFd80dnp5dnES0B+I0wDDdkxITqKPFDxNrdylOcOCQ
5btkaREV2Z8OW56vWV3ta+aos8SMSmpjDNAjp2pSLystMMC+Um9HGw3iO05HHI/x
rHgBdN3pMA8j+V2V/Z1oF+XknRbC1EmIoK9AFSOtWbXZvZaXYRAMzaJaug0P8kbR
q4ULwCNz98m0TVCtMa4Ye7kX7eg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:28 2025 by rpki-client