Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MsRs365bdC8m7rP_LW-kMb51Frk.roa
File: MsRs365bdC8m7rP_LW-kMb51Frk.roa (raw, json)
Hash identifier: sKWweV+263NZR+80PeyJEjHfdffBDxhi2f9NLW8d3eQ=
Subject key identifier: 32:C4:6C:DF:AE:5B:74:2F:26:EE:B3:FF:2D:6F:A4:31:BE:75:16:B9
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019427476B0FFD54679EABF1AB3F3BDEE524
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MsRs365bdC8m7rP_LW-kMb51Frk.roa
Signing time: Thu 02 Jan 2025 13:49:39 +0000
ROA not before: Thu 02 Jan 2025 13:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.8.0/24 maxlen: 24
87.254.9.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:6b:0f:fd:54:67:9e:ab:f1:ab:3f:3b:de:e5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 13:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32c46cdfae5b742f26eeb3ff2d6fa431be7516b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:a4:b4:ee:d4:9d:83:f4:88:3b:32:4d:20:
c0:5b:3f:59:a7:ae:25:84:cf:95:45:79:6f:18:3c:
17:57:09:9d:7a:b3:f1:04:c1:0c:b4:8b:ec:c9:62:
52:32:31:c2:d2:97:a3:ca:b2:ca:ff:b7:fb:8d:d5:
bd:9d:83:82:38:e8:3f:bc:a6:2d:77:0d:27:d6:7f:
21:89:fa:63:44:c9:05:78:1b:2a:65:45:00:bf:c8:
19:86:23:78:96:52:5f:a0:1b:8f:46:05:c3:e3:9c:
77:a2:18:a1:73:76:a9:8b:0e:bf:fc:ca:40:b9:88:
b5:1a:ad:ca:f6:e5:c5:5f:b0:19:6f:1b:61:76:12:
3c:03:f1:14:a5:d9:b2:22:03:47:57:7d:ae:b1:c4:
39:77:6b:2e:22:af:58:b4:7e:2b:f4:98:6e:5e:52:
d0:66:75:56:0c:d4:25:05:bf:d4:e2:64:d5:49:49:
0a:5b:81:0d:bd:ec:18:79:2f:22:07:77:dd:80:b8:
1a:62:3a:5f:85:9a:99:d5:33:4d:1e:d6:d0:06:34:
31:07:f6:70:fc:11:ae:f4:8d:7f:67:9f:61:c5:fe:
e3:3c:b4:9e:47:45:2f:b1:2b:de:ac:5f:63:5c:05:
58:f1:15:0a:cd:d8:58:8b:1f:0e:3b:ac:00:2d:88:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:6C:DF:AE:5B:74:2F:26:EE:B3:FF:2D:6F:A4:31:BE:75:16:B9
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MsRs365bdC8m7rP_LW-kMb51Frk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/23
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
88:41:c4:bc:b6:0e:e5:af:8c:e7:15:a4:d1:86:47:50:26:d4:
e7:ae:9d:74:27:41:6e:8f:a0:41:45:0f:d5:0a:19:db:38:4e:
40:61:1c:fa:9f:0e:8e:d9:7c:6e:a9:e1:b1:f6:f8:53:54:a4:
da:1a:60:bd:a6:f6:7b:36:c2:2f:6b:97:3f:80:8e:5d:a5:b8:
17:12:17:3d:5a:5b:de:fe:fc:c5:e7:3b:3e:ca:dd:9e:70:45:
a2:b7:3e:9a:63:55:d7:74:36:72:61:6d:dc:0f:9b:0a:2c:dd:
97:06:e1:35:10:43:0d:6e:92:4f:45:31:c6:e7:80:87:e1:fb:
27:f8:0f:1a:69:c7:0d:15:b4:b2:04:c2:85:a2:73:2a:7e:bc:
f7:11:ec:3c:8e:7b:bc:a9:b5:5f:4e:fe:42:88:f7:93:67:a4:
ec:ee:a2:f8:b4:31:67:5f:66:ed:71:98:6f:32:33:84:d8:65:
1e:83:bf:7d:64:ca:26:16:4b:99:bb:b8:27:70:51:f4:1a:3e:
d5:a5:dc:cd:07:02:ce:70:0c:db:5c:e2:9d:3c:b5:a0:0a:8f:
ef:1d:3e:42:24:8b:84:2d:bc:67:be:56:23:92:62:c9:ee:2d:
bd:4c:27:ba:f0:71:9d:4b:72:5c:7c:3f:6b:3a:8f:d3:74:a9:
6d:25:fa:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR2sP/VRnnqvxqz873uUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjUwMTAyMTM0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmM0NmNkZmFlNWI3NDJmMjZlZWIzZmYyZDZmYTQzMWJlNzUxNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZmktO7UnYP0iDsyTSDAWz9Zp64l
hM+VRXlvGDwXVwmderPxBMEMtIvsyWJSMjHC0pejyrLK/7f7jdW9nYOCOOg/vKYt
dw0n1n8hifpjRMkFeBsqZUUAv8gZhiN4llJfoBuPRgXD45x3ohihc3apiw6//MpA
uYi1Gq3K9uXFX7AZbxthdhI8A/EUpdmyIgNHV32uscQ5d2suIq9YtH4r9JhuXlLQ
ZnVWDNQlBb/U4mTVSUkKW4ENvewYeS8iB3fdgLgaYjpfhZqZ1TNNHtbQBjQxB/Zw
/BGu9I1/Z59hxf7jPLSeR0UvsSverF9jXAVY8RUKzdhYix8OO6wALYhFbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDLEbN+uW3QvJu6z/y1vpDG+dRa5MB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvTXNSczM2NWJkQzhtN3JQX0xXLWtNYjUxRnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV/4IAwQB
V/4SMA0GCSqGSIb3DQEBCwUAA4IBAQCIQcS8tg7lr4znFaTRhkdQJtTnrp10J0Fu
j6BBRQ/VChnbOE5AYRz6nw6O2XxuqeGx9vhTVKTaGmC9pvZ7NsIva5c/gI5dpbgX
Ehc9Wlve/vzF5zs+yt2ecEWitz6aY1XXdDZyYW3cD5sKLN2XBuE1EEMNbpJPRTHG
54CH4fsn+A8aaccNFbSyBMKFonMqfrz3Eew8jnu8qbVfTv5CiPeTZ6Ts7qL4tDFn
X2btcZhvMjOE2GUeg799ZMomFkuZu7gncFH0Gj7VpdzNBwLOcAzbXOKdPLWgCo/v
HT5CJIuELbxnvlYjkmLJ7i29TCe68HGdS3JcfD9rOo/TdKltJfrj
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:08:32 2025 by rpki-client