Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/MWVrNJSe74q7kEhW6qS8QXcSrrc.roa
File: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (raw, json)
Hash identifier: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=
Subject key identifier: 31:65:6B:34:94:9E:EF:8A:BB:90:48:56:EA:A4:BC:41:77:12:AE:B7
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0194282530615312E8CB6ACDAA4BD173CFE0
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/MWVrNJSe74q7kEhW6qS8QXcSrrc.roa
Signing time: Thu 02 Jan 2025 17:51:53 +0000
ROA not before: Thu 02 Jan 2025 17:51:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46562
IP address blocks: 188.74.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:30:61:53:12:e8:cb:6a:cd:aa:4b:d1:73:cf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 2 17:51:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31656b34949eef8abb904856eaa4bc417712aeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:05:d6:ed:c6:f8:21:df:6a:5b:00:63:4f:
2b:57:2c:48:a9:84:0b:23:c6:31:ae:a1:9a:60:33:
d1:64:80:c4:52:1a:c4:bb:4f:2a:fd:87:fc:5d:73:
3a:e9:94:7e:59:04:45:f8:31:f6:17:a5:46:e3:44:
85:df:70:0b:97:bb:8c:46:78:0e:a5:c5:12:b6:0e:
19:21:ea:cd:c6:33:5d:2f:63:19:1e:50:ff:cd:43:
37:62:59:89:9c:4a:62:5f:01:b5:5d:de:85:9d:39:
ff:cb:c3:32:a9:84:6d:3b:0d:f0:13:18:27:49:97:
55:98:24:89:b3:c8:09:46:81:60:b0:8c:1a:c1:6f:
1c:8a:1b:37:d4:51:38:ce:8a:6f:a9:58:b5:f5:cc:
1d:16:e6:2e:23:a1:73:2b:71:31:e1:90:a0:14:20:
2f:94:81:82:e5:e0:2f:6c:b5:1e:c8:e3:19:26:b5:
aa:a1:f3:84:c1:6c:5e:22:66:79:77:b1:6d:39:3d:
45:a4:43:d7:d9:53:44:e5:5e:8f:dc:bd:8d:b3:b9:
21:ea:30:6e:8f:61:81:c8:07:c7:0d:f1:b3:a8:66:
c7:09:fc:c4:32:6d:5b:f5:bf:49:f0:be:8e:33:82:
41:25:f6:8f:54:db:8f:32:20:ed:ee:30:3d:a4:76:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:6B:34:94:9E:EF:8A:BB:90:48:56:EA:A4:BC:41:77:12:AE:B7
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/MWVrNJSe74q7kEhW6qS8QXcSrrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.180.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6e:30:17:53:a2:5b:b6:57:a0:cf:49:71:ee:cd:60:1e:8f:
cc:9b:9f:6f:ad:15:9b:a7:6b:ab:a8:d2:77:9b:e1:dd:05:43:
17:4e:93:14:14:ee:73:31:98:41:ac:ef:45:d3:72:7b:d4:c9:
f5:5c:e8:0d:3d:c5:7b:59:00:28:62:98:99:c5:5f:bc:57:9b:
22:64:ac:86:bd:3e:6d:47:cb:2c:91:21:a1:19:26:7e:9d:96:
8c:aa:31:30:3a:24:5e:eb:66:35:fe:23:77:fe:58:81:7e:7b:
f3:7e:34:40:e3:7b:f0:f3:6e:08:da:7d:d2:8f:9a:53:07:42:
e5:bf:74:e0:ba:4a:44:da:b2:ba:c7:81:66:8a:21:71:bd:43:
08:79:d8:0b:b9:8e:8d:ea:6b:92:8d:d6:4e:92:93:d6:9b:25:
c1:91:97:47:75:f5:65:93:44:2e:f3:e2:0c:32:7e:d7:e9:c3:
f2:d9:4d:03:36:c3:09:da:67:18:7d:a4:60:ac:a5:38:78:9e:
e4:97:79:5b:19:46:7a:1a:2f:23:ec:f5:44:21:6f:b2:39:68:
b6:a1:06:1b:fd:18:ac:e1:63:97:84:6f:91:e0:89:a9:21:ee:
47:58:1f:ce:ca:f1:a0:74:7a:cf:c4:d2:1b:fe:b7:15:b6:06:
df:94:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:15 2025 by rpki-client