Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mxPP407x3lOwcH4j2_RBFrvGReI.roa
File: mxPP407x3lOwcH4j2_RBFrvGReI.roa (raw, json)
Hash identifier: /d5AOTC7X9SxdbtWe+XIZv3LAPieLnhEt0lhOAh1R20=
Subject key identifier: 9B:13:CF:E3:4E:F1:DE:53:B0:70:7E:23:DB:F4:41:16:BB:C6:45:E2
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA541ABFDFDFEB82D007CB1FA62B43
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mxPP407x3lOwcH4j2_RBFrvGReI.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59961
IP address blocks: 87.107.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:54:1a:bf:df:df:eb:82:d0:07:cb:1f:a6:2b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b13cfe34ef1de53b0707e23dbf44116bbc645e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:de:37:16:e8:49:d9:4d:05:b1:5a:99:53:
55:fe:65:2d:99:b6:3f:94:ee:86:d8:7e:69:a0:6f:
b7:53:94:f4:28:b4:22:9a:d7:17:b8:44:87:c4:5e:
f5:c3:95:ca:06:7d:08:39:eb:a5:f1:c2:80:c3:72:
32:3c:bc:c1:7e:27:ec:f2:68:5b:e3:72:71:ce:1f:
c4:51:ec:66:d8:a5:50:a3:58:5f:64:8f:33:45:e3:
0c:e4:2f:c4:0f:db:d7:9c:fa:c7:42:6c:bf:c9:35:
f4:22:72:0e:8c:78:d8:60:4e:d3:4c:f0:9d:a2:ac:
39:ba:af:cb:1e:78:16:59:67:61:82:53:32:c3:d4:
80:08:05:7b:90:50:a5:8d:81:6f:27:f2:60:85:ac:
3d:91:2d:69:7d:06:a8:ca:26:c3:30:65:ef:92:1b:
2f:45:c7:4e:f2:ce:41:47:38:0b:29:0d:8c:9a:e4:
70:71:4c:0d:ad:4a:d3:27:93:a8:ec:9a:f1:70:4f:
84:d7:83:47:f9:01:ca:71:91:54:29:99:51:58:79:
8b:b8:21:90:91:f5:4b:1d:21:4d:88:88:25:7a:b3:
1a:fa:33:c9:8e:e2:cb:df:f2:6c:10:27:c4:76:43:
07:70:83:3c:73:50:d6:28:60:ac:c3:8f:39:d0:b7:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:CF:E3:4E:F1:DE:53:B0:70:7E:23:DB:F4:41:16:BB:C6:45:E2
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mxPP407x3lOwcH4j2_RBFrvGReI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.50.0/24
Signature Algorithm: sha256WithRSAEncryption
74:65:d3:38:02:d0:b7:27:0d:68:58:f3:5d:a4:c2:9f:ae:fe:
f0:3c:79:41:11:79:21:96:c9:e9:37:0c:6d:50:86:73:9c:6c:
40:64:53:fa:cd:73:a8:16:a0:27:8a:10:87:fb:a5:52:dc:ad:
fc:5f:fe:2a:e8:0d:c1:6f:8d:19:7f:d6:68:a8:37:9b:0b:a3:
d3:69:d2:ab:87:8b:f7:e3:e5:50:cb:df:5d:3e:ec:f2:b4:b2:
2b:18:72:91:c7:fe:ea:27:3c:25:3e:2f:8e:4f:d5:81:da:91:
ac:2d:10:e7:0b:44:78:bf:ad:8c:57:7f:73:27:f6:57:a4:08:
ff:b8:ad:86:5c:73:60:ef:1a:d3:9a:0e:3d:35:3e:45:b5:f3:
71:2f:5f:37:e7:05:0d:ca:57:de:10:cc:2c:14:dc:56:c0:30:
b4:ab:b3:ba:53:31:72:c2:cc:f3:0f:da:e8:09:48:7e:54:1d:
47:34:ef:10:3e:f8:27:53:b7:ae:07:43:95:38:cb:22:8b:a6:
56:af:50:cb:d6:cd:cf:36:d7:97:1b:10:77:cc:21:6a:cd:25:
99:dd:e8:51:61:e7:c9:19:e3:73:13:4d:ae:cc:f2:1f:b0:17:
a6:7a:64:9f:91:c7:57:c5:35:2d:9f:60:02:99:e1:5b:ff:26:
85:5e:a2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:31:21 2025 by rpki-client