Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/MbrCU5EWrzqFZBAeUe4bUJd8wew.roa
File: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (raw, json)
Hash identifier: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=
Subject key identifier: 31:BA:C2:53:91:16:AF:3A:85:64:10:1E:51:EE:1B:50:97:7C:C1:EC
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 0194228D7CFFA16DE1A42079C0BBB42CBB7C
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/MbrCU5EWrzqFZBAeUe4bUJd8wew.roa
Signing time: Wed 01 Jan 2025 15:48:05 +0000
ROA not before: Wed 01 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57074
IP address blocks: 37.0.104.0/21 maxlen: 24
37.26.248.0/24 maxlen: 24
37.26.249.0/24 maxlen: 24
37.26.251.0/24 maxlen: 24
89.22.8.0/21 maxlen: 21
91.230.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 14:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7c:ff:a1:6d:e1:a4:20:79:c0:bb:b4:2c:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Jan 1 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31bac2539116af3a8564101e51ee1b50977cc1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:fe:4e:27:85:b9:05:b4:e0:1f:d3:1f:66:
4e:fe:08:2c:ff:1d:9a:44:67:d4:4d:72:76:be:ee:
15:ab:a2:11:b9:5d:62:50:de:16:80:7d:e7:3d:ee:
5c:f7:7f:cc:dd:a9:37:28:01:07:94:38:5b:ac:a6:
35:05:3b:05:e8:78:c3:23:35:01:cc:ff:6d:54:79:
ff:29:e2:6c:3e:ad:18:69:50:d3:de:87:de:31:d3:
89:63:15:d6:96:ac:fb:78:47:5b:34:0f:4f:9b:37:
57:b8:90:e3:da:67:69:1d:04:1b:5e:5c:10:2b:9a:
6a:a5:a3:ba:53:6e:f3:0a:64:dc:37:75:ca:74:b5:
b9:06:0f:24:02:bf:ad:b6:ac:f3:c6:22:23:d0:6a:
7b:9a:67:2f:b7:3b:b7:1b:f2:19:26:47:d7:e3:e4:
38:cc:5c:93:8a:9a:b6:53:c7:96:a2:d1:63:cb:90:
0a:f2:e1:ff:76:84:da:c6:d8:91:0e:3f:61:f6:94:
bc:a0:17:f1:6d:ce:20:f5:2d:c6:aa:31:f2:00:86:
7f:96:32:64:fe:e3:e8:4b:4d:09:e3:01:30:a8:b5:
62:7f:b3:7f:79:1f:12:a8:50:89:4e:4b:0e:91:c9:
2f:ac:6f:bb:49:e6:70:13:ce:de:87:8e:d1:aa:3a:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:C2:53:91:16:AF:3A:85:64:10:1E:51:EE:1B:50:97:7C:C1:EC
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/MbrCU5EWrzqFZBAeUe4bUJd8wew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.104.0/21
37.26.248.0/23
37.26.251.0/24
89.22.8.0/21
91.230.104.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:1e:bd:07:8b:0e:a6:5a:9c:4b:16:79:bd:85:3a:26:34:a3:
4f:72:86:3f:d4:ba:0e:75:57:b7:2f:08:88:79:87:d3:6a:43:
6a:18:c7:ce:6b:d6:0a:52:e1:77:cb:5d:88:04:22:ee:77:5c:
5c:c7:db:36:67:28:a3:4d:d2:d8:b0:6e:8e:f4:bf:a3:9c:72:
9c:e2:06:ae:ca:8b:7f:c1:10:34:dc:c2:3b:f1:83:07:f5:b4:
cc:b9:e2:6b:dd:49:1a:8b:ef:3e:85:f4:bb:2c:3b:1d:db:9d:
78:0b:1c:06:a1:96:33:44:cb:d1:30:1b:b0:b3:67:d2:65:40:
38:30:ab:cf:ef:6c:49:5b:7a:0e:f6:ae:3b:4c:2a:5a:d4:61:
64:30:21:de:b6:d5:56:ac:33:48:50:c0:9c:d8:a4:ef:f8:30:
3f:52:43:83:ba:25:25:65:9f:ec:4e:5b:c0:a9:b2:77:82:ec:
97:e4:7d:e5:e4:95:08:f5:e1:58:dc:d4:ce:b7:d5:73:43:6f:
c1:7b:6f:49:d8:48:c2:de:42:17:bf:70:56:29:5a:0e:2c:b2:
77:07:c6:48:78:4a:00:fd:56:a5:6e:69:9a:6b:83:e0:ea:5c:
a8:75:de:b8:26:23:7e:ff:a0:85:8b:16:1c:02:b6:da:de:31:
95:a5:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:33:15 2025 by rpki-client