Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/MPnVMUDELwRT1_LHbrcJgd4NmwE.roa
File: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (raw, json)
Hash identifier: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=
Subject key identifier: 30:F9:D5:31:40:C4:2F:04:53:D7:F2:C7:6E:B7:09:81:DE:0D:9B:01
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 019421B1B6BDFDDA31E813794493EAD89088
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/MPnVMUDELwRT1_LHbrcJgd4NmwE.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 85.202.202.0/24 maxlen: 24
2a07:9180::/32 maxlen: 32
2a07:9181::/32 maxlen: 32
2a07:9182::/32 maxlen: 32
2a07:9183::/32 maxlen: 32
2a07:9184::/32 maxlen: 32
2a07:9185::/32 maxlen: 32
2a07:9186::/32 maxlen: 32
2a07:9187::/32 maxlen: 32
2a09:5980::/32 maxlen: 32
2a09:5981::/32 maxlen: 32
2a09:5982::/32 maxlen: 32
2a09:5983::/32 maxlen: 32
2a09:5984::/32 maxlen: 32
2a09:5985::/32 maxlen: 32
2a09:5986::/32 maxlen: 32
2a09:5987::/32 maxlen: 32
2a09:f340::/32 maxlen: 32
2a09:f341::/32 maxlen: 32
2a09:f342::/32 maxlen: 32
2a09:f343::/32 maxlen: 32
2a09:f344::/32 maxlen: 32
2a09:f345::/32 maxlen: 32
2a09:f346::/32 maxlen: 32
2a09:f347::/32 maxlen: 32
2a0d:8040::/32 maxlen: 32
2a0d:8041::/32 maxlen: 32
2a0d:8042::/32 maxlen: 32
2a0d:8043::/32 maxlen: 32
2a0d:8044::/32 maxlen: 32
2a0d:8045::/32 maxlen: 32
2a0d:8046::/32 maxlen: 32
2a0d:8047::/32 maxlen: 32
2a0f:a1c0::/32 maxlen: 32
2a0f:a1c1::/32 maxlen: 32
2a0f:a1c2::/32 maxlen: 32
2a0f:a1c3::/32 maxlen: 32
2a0f:a1c4::/32 maxlen: 32
2a0f:a1c5::/32 maxlen: 32
2a0f:a1c6::/32 maxlen: 32
2a0f:a1c7::/32 maxlen: 32
2a11:1800::/32 maxlen: 32
2a11:1801::/32 maxlen: 32
2a11:1802::/32 maxlen: 32
2a11:1803::/32 maxlen: 32
2a11:1804::/32 maxlen: 32
2a11:1805::/32 maxlen: 32
2a11:1806::/32 maxlen: 32
2a11:1807::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b6:bd:fd:da:31:e8:13:79:44:93:ea:d8:90:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30f9d53140c42f0453d7f2c76eb70981de0d9b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:b0:58:bf:17:cf:3f:a9:76:c1:4b:1d:f9:
55:48:c2:45:e1:a9:d6:fc:16:40:52:84:94:42:db:
7e:c7:c7:4b:32:b2:f0:53:73:c8:6e:58:50:39:fe:
95:32:00:1f:c2:9c:c1:b3:ad:7d:19:fb:89:24:6f:
93:cd:db:d7:ab:3c:0e:7e:bd:22:34:1f:2c:f3:ab:
50:8a:bc:65:e6:4b:bf:70:6f:a2:06:4e:21:45:dd:
9f:d2:49:a4:f0:be:f7:41:79:a7:41:5f:46:97:6c:
3a:23:b0:8f:a4:26:27:61:d6:79:2a:05:a2:49:1a:
31:8b:71:04:54:28:85:4e:96:30:a1:80:24:a2:e6:
af:b4:4c:44:18:76:bb:8a:9d:a2:85:b7:d2:56:6b:
12:e4:d0:63:d9:d4:82:f2:b0:b7:60:51:61:1d:1b:
6d:df:b5:19:ad:64:17:c8:45:2a:c7:cf:01:82:1e:
c4:b6:a8:cc:0b:de:48:ad:c3:82:d0:30:bd:e8:1f:
84:74:18:02:7b:40:72:9b:48:6a:2c:05:73:62:1f:
be:db:45:17:ac:cd:9b:7c:fd:10:e6:d5:5c:6f:57:
a5:f1:e8:5a:fa:34:1f:86:ea:db:50:70:b7:27:11:
6f:73:3f:b4:3d:87:12:f9:2b:89:14:8f:78:02:15:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F9:D5:31:40:C4:2F:04:53:D7:F2:C7:6E:B7:09:81:DE:0D:9B:01
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/MPnVMUDELwRT1_LHbrcJgd4NmwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.202.0/24
IPv6:
2a07:9180::/29
2a09:5980::/29
2a09:f340::/29
2a0d:8040::/29
2a0f:a1c0::/29
2a11:1800::/29
Signature Algorithm: sha256WithRSAEncryption
56:48:95:25:78:c5:b4:37:d5:a5:41:d8:7d:bc:52:6a:ad:4a:
52:ca:9f:7e:0f:dd:e1:73:f6:00:7e:0a:4b:8f:1b:8e:34:74:
68:0a:96:30:3a:94:06:91:1d:6d:df:b9:fd:b8:03:d6:b3:e1:
d3:7b:a5:76:ef:d7:bd:07:1c:a6:25:02:52:8b:32:52:e9:14:
ab:b5:44:f5:43:db:cf:1b:18:a3:b0:67:3c:27:66:98:bd:c3:
24:2a:e4:9f:4e:de:c4:e5:e9:fa:c2:a5:a4:f3:d5:15:2b:5d:
b2:ec:98:fd:52:6b:66:0c:a6:7d:3d:6b:ec:03:7e:5f:e8:7e:
a7:52:16:7b:5f:31:e9:0f:5c:3f:35:33:52:77:6f:ad:19:e8:
53:6a:8a:ba:7d:a8:b3:01:b1:a8:28:f0:19:a4:95:04:a3:9b:
4f:56:e5:d8:b6:74:65:23:17:71:30:1f:4d:91:4c:5a:ab:e8:
37:78:1e:19:40:1c:81:c3:39:be:5b:89:5c:38:71:c9:6e:71:
ba:6b:d8:22:62:aa:ed:b0:e6:33:ca:66:2f:0f:4d:55:1e:12:
1c:1c:55:73:f3:aa:a2:4f:7e:bf:da:82:1c:a2:be:33:3b:af:
73:fb:d9:4b:e9:a8:64:30:52:86:7b:ee:1c:7d:98:74:aa:04:
f7:21:2c:ac
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZQhsba9/dox6BN5RJPq2JCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NTBlMDZlZTAyYzVhMzJlNTRkYzg5ODUzYjRhYTM3OGY4
NjA0ZjcwHhcNMjUwMTAxMTE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGY5ZDUzMTQwYzQyZjA0NTNkN2YyYzc2ZWI3MDk4MWRlMGQ5YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSewWL8Xzz+pdsFLHflVSMJF4anW
/BZAUoSUQtt+x8dLMrLwU3PIblhQOf6VMgAfwpzBs619GfuJJG+TzdvXqzwOfr0i
NB8s86tQirxl5ku/cG+iBk4hRd2f0kmk8L73QXmnQV9Gl2w6I7CPpCYnYdZ5KgWi
SRoxi3EEVCiFTpYwoYAkouavtExEGHa7ip2ihbfSVmsS5NBj2dSC8rC3YFFhHRtt
37UZrWQXyEUqx88Bgh7EtqjMC95IrcOC0DC96B+EdBgCe0Bym0hqLAVzYh++20UX
rM2bfP0Q5tVcb1el8eha+jQfhurbUHC3JxFvcz+0PYcS+SuJFI94AhX2XQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFDD51TFAxC8EU9fyx263CYHeDZsBMB8GA1UdIwQY
MBaAFFVQ4G7gLFoy5U3ImFO0qjePhgT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAt
N2NhYTk3OTI3MTQyLzEvTVBuVk1VREVMd1JUMV9MSGJyY0pnZDRObXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAtN2NhYTk3OTI3MTQy
LzEvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAMBAIAATAGAwQAVcrKMDAE
AgACMCoDBQMqB5GAAwUDKglZgAMFAyoJ80ADBQMqDYBAAwUDKg+hwAMFAyoRGAAw
DQYJKoZIhvcNAQELBQADggEBAFZIlSV4xbQ31aVB2H28UmqtSlLKn34P3eFz9gB+
CkuPG440dGgKljA6lAaRHW3fuf24A9az4dN7pXbv170HHKYlAlKLMlLpFKu1RPVD
288bGKOwZzwnZpi9wyQq5J9O3sTl6frCpaTz1RUrXbLsmP1Sa2YMpn09a+wDfl/o
fqdSFntfMekPXD81M1J3b60Z6FNqirp9qLMBsago8BmklQSjm09W5di2dGUjF3Ew
H02RTFqr6Dd4HhlAHIHDOb5biVw4cclucbpr2CJiqu2w5jPKZi8PTVUeEhwcVXPz
qqJPfr/aghyivjM7r3P72UvpqGQwUoZ77hx9mHSqBPchLKw=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:02 2025 by rpki-client