Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/MtUZJrG93YjlOedI7qMBnb84kTo.roa
File: MtUZJrG93YjlOedI7qMBnb84kTo.roa (raw, json)
Hash identifier: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=
Subject key identifier: 32:D5:19:26:B1:BD:DD:88:E5:39:E7:48:EE:A3:01:9D:BF:38:91:3A
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 01941F8C929A5A0FFE870DBFBA07F59E7A26
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/MtUZJrG93YjlOedI7qMBnb84kTo.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13128
IP address blocks: 141.15.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:92:9a:5a:0f:fe:87:0d:bf:ba:07:f5:9e:7a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32d51926b1bddd88e539e748eea3019dbf38913a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:5f:59:4e:ee:af:cb:56:ee:5a:ba:a5:2c:
58:fa:15:55:f3:f6:09:ab:84:f8:00:36:fe:a1:38:
9f:57:dc:8f:72:92:c9:35:0f:87:da:c6:4c:e6:d0:
c0:60:af:d1:fa:62:2c:ec:f7:10:67:a3:4e:2a:48:
ad:66:29:39:ef:40:f9:56:b5:4d:5c:ab:18:1a:75:
88:07:8a:ee:39:ca:bf:4f:53:92:8b:90:e2:9d:4a:
eb:75:18:b1:6f:74:3d:44:22:fc:b5:83:36:19:ca:
f1:a9:f5:53:aa:e3:4a:70:40:56:fb:92:51:fe:3c:
60:83:46:91:99:84:d5:7d:58:7d:2f:6d:68:5b:a7:
42:f5:da:c1:76:3b:26:e7:5e:97:05:9e:9a:66:54:
71:77:12:8c:4a:b5:ca:8b:15:a2:6b:ac:eb:ec:26:
c6:78:56:0e:37:d5:f2:a9:54:30:a2:94:5f:f2:b3:
8c:70:a4:00:74:bc:41:5a:9f:38:79:58:bc:d9:92:
e4:e6:f8:4b:b5:a9:57:07:77:b9:0f:71:53:3e:26:
f1:67:80:13:b8:29:64:2a:e9:21:3e:17:37:d3:18:
cf:57:23:83:60:46:6f:51:a6:51:18:a4:6e:85:23:
a8:31:8f:cf:e2:32:06:7b:21:3d:8f:a3:62:6f:0c:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:19:26:B1:BD:DD:88:E5:39:E7:48:EE:A3:01:9D:BF:38:91:3A
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/MtUZJrG93YjlOedI7qMBnb84kTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:a2:b4:4b:32:af:13:cf:b6:f8:a4:4c:e1:99:a3:37:8b:57:
19:a1:4d:f3:76:03:43:9e:38:0c:50:a8:a0:4e:7c:e8:19:f8:
6c:59:3d:3b:91:79:6a:3c:01:76:55:95:65:69:c4:67:e3:27:
19:83:5d:42:d8:24:55:2a:26:bd:07:ea:bd:c7:58:4a:10:9b:
c1:66:58:d2:6e:1d:f0:29:10:f2:89:89:81:37:4c:2d:38:e7:
d9:d5:94:c6:b1:ad:12:d9:e0:a6:78:8e:8c:3f:45:8b:0a:ad:
5b:45:b2:e6:42:7b:ad:44:5e:19:60:cf:0a:69:af:b7:25:28:
72:f5:04:b9:3d:f3:51:c4:b5:da:f0:b2:ad:21:87:5d:96:e6:
04:2c:32:57:85:37:e4:b6:2b:5a:de:07:48:4b:3c:94:0e:67:
71:a8:9a:4f:f4:4e:e0:2d:1e:59:b3:ab:98:15:f4:50:ee:5b:
b0:36:48:b3:50:3d:df:56:31:b1:d9:7c:c9:39:4b:96:73:d8:
a9:fc:3d:2f:0c:4d:7a:5d:de:2d:e4:cd:42:77:f9:34:b7:10:
ac:ff:7a:b0:19:b6:bd:40:0c:72:6a:a2:be:62:d7:7d:c5:01:
6a:0f:2e:90:3d:cb:83:be:99:79:03:55:6e:5e:2a:14:b7:69:
e4:ad:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:42 2025 by rpki-client