Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/_MVzD4pFko36vb7bZAI5sOTrlTY.roa
File: _MVzD4pFko36vb7bZAI5sOTrlTY.roa (raw, json)
Hash identifier: 4kDpbOv6yGlgck5RYKh7zUEfHJ48+3Dq7lTqvnttFsk=
Subject key identifier: FC:C5:73:0F:8A:45:92:8D:FA:BD:BE:DB:64:02:39:B0:E4:EB:95:36
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019427476E8BD672AC9C6634DFF21BFE9F2E
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/_MVzD4pFko36vb7bZAI5sOTrlTY.roa
Signing time: Thu 02 Jan 2025 13:49:39 +0000
ROA not before: Thu 02 Jan 2025 13:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 87.254.9.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:6e:8b:d6:72:ac:9c:66:34:df:f2:1b:fe:9f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 13:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcc5730f8a45928dfabdbedb640239b0e4eb9536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:fc:09:b9:53:03:39:eb:85:02:d0:f7:ad:
ae:c5:21:b8:c7:82:43:91:27:db:94:74:a0:d7:c2:
e2:92:df:e0:49:cb:9d:a1:47:fe:81:47:dc:18:7f:
85:28:be:a8:05:78:3f:db:00:82:c1:ba:08:c1:71:
73:fc:29:6f:8e:e5:a0:48:3d:2b:99:9e:46:cf:3b:
cd:4b:ad:e3:a5:d4:0e:a9:a5:29:c7:2f:2f:a5:a4:
62:48:24:95:bc:3e:e2:2d:27:46:bf:f0:53:64:51:
53:ec:0d:40:83:d4:e1:a4:0b:3a:3b:67:fc:8e:42:
17:40:95:b6:fe:03:d7:47:2e:fa:f5:dc:4e:cd:ff:
69:51:c2:72:70:93:f5:d3:ff:6b:81:c5:ee:b2:c8:
7f:44:21:cc:7c:02:74:61:c2:8a:9c:4e:04:3d:1a:
06:4d:46:80:1b:47:f7:8e:6f:60:ad:6e:e2:0b:32:
ea:4e:38:e8:1e:83:af:e8:6a:b3:85:bc:85:c9:cf:
b0:cb:de:3e:e2:70:ac:a2:12:48:34:fd:30:e0:de:
13:b9:09:59:c7:e8:16:68:9a:1a:5c:a2:30:d5:1c:
1a:6c:de:0c:f6:b9:bd:65:1b:b8:e9:64:77:d5:70:
43:8c:89:68:4c:58:8b:21:eb:31:d9:ff:6e:3c:30:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:73:0F:8A:45:92:8D:FA:BD:BE:DB:64:02:39:B0:E4:EB:95:36
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/_MVzD4pFko36vb7bZAI5sOTrlTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c7:82:5b:5a:2c:8f:ac:98:bb:bf:98:e7:71:68:ee:7d:a7:
a9:17:ef:6e:a8:a0:3a:29:69:4d:8a:80:5f:f7:ae:a9:51:75:
75:9d:bf:6e:9d:e3:8e:e3:62:37:19:40:45:11:6f:90:2d:f6:
f0:49:c6:6b:57:e9:cf:0d:94:50:d0:18:1a:c9:fa:5b:41:c1:
82:0e:cc:3e:9e:03:6a:56:4a:c2:c1:8b:c6:95:94:0a:b3:c4:
0f:25:5c:20:18:a7:1b:f0:c9:95:88:21:1f:4b:fe:c9:0b:16:
43:89:33:27:04:ae:6c:ec:56:27:34:f5:0c:6b:77:1b:9c:d0:
08:78:9e:a4:42:d6:28:0e:73:a9:5f:39:4d:60:c2:4d:8f:63:
b0:c1:f7:31:fc:b5:67:59:ec:45:c0:1e:98:98:92:63:4c:13:
94:e5:66:69:1f:de:31:16:8e:d4:2e:2f:ef:26:14:6d:0b:25:
d4:b6:43:69:8f:4c:2f:81:46:59:35:9a:d0:bc:ae:93:a2:39:
d7:fc:9b:ce:a7:c4:03:4f:d2:3e:3b:59:7f:fc:a4:e3:fd:b6:
4d:c5:8f:e6:6b:16:de:fd:12:85:7d:17:6f:f1:bd:31:43:70:
80:b0:8c:c1:97:ec:52:22:18:ca:11:a1:18:85:c7:cb:fa:ce:
dc:a0:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:00:03 2025 by rpki-client