Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/MwlTna0ke4fMkgBxDifihFV6g70.roa
File: MwlTna0ke4fMkgBxDifihFV6g70.roa (raw, json)
Hash identifier: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=
Subject key identifier: 33:09:53:9D:AD:24:7B:87:CC:92:00:71:0E:27:E2:84:55:7A:83:BD
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 0194282657B8033895AC11A00B4766D19F1F
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/MwlTna0ke4fMkgBxDifihFV6g70.roa
Signing time: Thu 02 Jan 2025 17:53:09 +0000
ROA not before: Thu 02 Jan 2025 17:53:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57031
IP address blocks: 89.22.0.0/24 maxlen: 24
89.22.2.0/24 maxlen: 24
89.22.3.0/24 maxlen: 24
89.22.4.0/24 maxlen: 24
89.22.5.0/24 maxlen: 24
89.22.6.0/24 maxlen: 24
89.22.7.0/24 maxlen: 24
2001:67c:7c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:57:b8:03:38:95:ac:11:a0:0b:47:66:d1:9f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Jan 2 17:53:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3309539dad247b87cc9200710e27e284557a83bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:2f:85:b9:05:b0:db:ed:22:3a:b2:ba:f7:
f1:ac:08:bd:f3:b4:fb:b9:88:37:83:66:34:ff:34:
6b:1b:71:cd:83:3b:ad:28:6d:d5:47:1d:6c:ca:a8:
cd:31:20:53:40:93:d1:e7:e0:a1:a5:55:3a:d2:0b:
fe:4c:ee:70:31:b8:86:87:b9:ba:c2:14:ed:e1:d7:
5f:99:f6:e0:59:b3:2e:dc:46:42:44:22:f5:9f:18:
a4:96:66:0c:58:4c:e1:9e:85:a2:5a:1c:3f:39:e6:
41:aa:5c:e3:c0:91:ab:08:77:e4:cd:0c:96:2a:e7:
4e:b4:1b:79:14:23:f1:7e:53:8c:9c:09:38:78:94:
02:0c:f7:32:ef:ff:48:7f:25:2a:57:23:ba:1f:2f:
e3:71:d7:59:70:b5:4e:20:bd:69:3a:6e:e3:26:b9:
a1:19:94:da:95:99:5c:04:b7:ec:c9:ad:24:65:e5:
b5:89:aa:51:53:e3:1f:60:b4:52:0a:3b:80:a6:1b:
bc:00:43:3f:16:65:da:25:41:1a:d2:1b:d6:c1:04:
d2:c2:e0:01:db:9f:08:46:47:70:e0:4f:b6:c5:c0:
ce:97:e1:b6:17:bf:f0:f2:48:47:b9:a9:15:07:d0:
67:e9:28:28:c5:b9:61:55:4d:f2:42:a1:aa:78:0e:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:09:53:9D:AD:24:7B:87:CC:92:00:71:0E:27:E2:84:55:7A:83:BD
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/MwlTna0ke4fMkgBxDifihFV6g70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.0.0/24
89.22.2.0-89.22.7.255
IPv6:
2001:67c:7c2::/48
Signature Algorithm: sha256WithRSAEncryption
1b:12:64:a9:18:15:dc:b4:b5:49:26:3b:65:d9:5e:dc:fc:0c:
34:f7:f7:17:d7:56:da:88:b7:b4:52:23:86:49:a1:4f:3b:f1:
64:62:92:af:77:e3:85:09:83:21:1c:ee:b1:26:98:87:05:10:
dd:d7:5d:77:5b:75:fa:82:1d:0f:f0:77:9a:d3:89:6a:5b:9e:
80:ce:79:d8:b7:aa:2c:41:b8:2c:8e:ee:27:a8:f9:8b:94:f4:
fa:97:0f:2e:4b:20:7c:f7:24:f1:b5:78:2a:41:92:cb:47:ee:
67:94:55:31:4f:cc:d7:f4:79:ab:4c:16:4b:7e:6b:01:06:95:
18:9d:70:2a:69:bd:2d:6d:14:5e:70:69:ad:df:cc:8b:68:db:
43:2b:02:30:af:da:e4:e1:03:df:a9:c2:6b:f3:e5:03:63:b3:
c9:34:90:84:59:b7:18:37:e9:4f:08:c7:f3:4a:5d:fc:f0:56:
b5:05:28:25:50:bb:c4:83:52:85:88:d1:b8:b9:e2:dc:8f:39:
b3:df:9c:68:b0:74:6c:18:b1:d0:18:fa:98:70:b0:74:da:70:
76:1f:3f:84:fe:e8:18:e3:f0:3b:61:34:10:53:23:f0:0d:a7:
4b:76:fe:db:5b:75:51:9e:b0:72:16:a6:09:5d:58:07:64:fb:
f5:8a:0b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:18 2025 by rpki-client