Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/MgottoMWUSXikTIVLYaGJdVlB4g.roa
File: MgottoMWUSXikTIVLYaGJdVlB4g.roa (raw, json)
Hash identifier: g5AcxzgqT57GZxOz0QKAVqkpUfgwHV5H2y4+I4+BQOI=
Subject key identifier: 32:0A:2D:B6:83:16:51:25:E2:91:32:15:2D:86:86:25:D5:65:07:88
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C6A17AB1BA5F43BC9FBB63F36202C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/MgottoMWUSXikTIVLYaGJdVlB4g.roa
Signing time: Thu 02 Jan 2025 09:50:26 +0000
ROA not before: Thu 02 Jan 2025 09:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28860
IP address blocks: 81.27.144.0/20 maxlen: 20
81.27.144.0/24 maxlen: 24
81.27.149.0/24 maxlen: 24
81.27.150.0/24 maxlen: 24
81.27.151.0/24 maxlen: 24
81.27.152.0/24 maxlen: 24
81.27.158.0/24 maxlen: 24
217.24.112.0/20 maxlen: 20
217.24.112.0/24 maxlen: 24
217.24.113.0/24 maxlen: 24
217.24.114.0/24 maxlen: 24
217.24.115.0/24 maxlen: 24
217.24.116.0/24 maxlen: 24
217.24.117.0/24 maxlen: 24
217.24.118.0/24 maxlen: 24
217.24.120.0/24 maxlen: 24
217.24.121.0/24 maxlen: 24
217.24.122.0/24 maxlen: 24
217.24.123.0/24 maxlen: 24
217.24.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:6a:17:ab:1b:a5:f4:3b:c9:fb:b6:3f:36:20:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=320a2db683165125e29132152d868625d5650788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:5a:a9:90:99:54:eb:72:61:35:93:96:a0:
a0:d7:9e:8c:9c:e5:ae:f1:98:16:6d:70:8a:da:e9:
82:cd:df:87:a9:3e:76:6e:dd:ef:49:c3:1a:64:23:
19:ea:c8:22:1b:1c:d6:a8:9b:e8:61:fa:a3:f8:04:
fd:f1:4f:df:ca:67:75:45:6b:43:a8:d4:a7:ee:0d:
fc:8d:99:38:0e:63:68:f4:07:f9:52:f4:de:a1:07:
8c:44:57:2a:a7:9b:8e:84:b0:bc:24:71:b4:73:fb:
a5:d3:39:97:99:33:7b:d4:ee:05:3b:fd:8f:af:7f:
91:57:61:4d:fe:c5:d2:6d:30:64:84:e7:a2:e9:6f:
0a:97:bc:51:9d:91:af:82:df:69:e7:b0:9c:a3:b9:
91:8e:d4:81:6e:2e:ec:97:82:20:1a:6e:d8:ec:94:
e6:15:1f:89:be:7f:db:cc:50:d9:3d:a9:0b:d9:11:
91:e0:7f:f3:b2:67:b0:7b:3e:8c:8b:4f:2d:da:23:
c9:42:b1:3a:85:b2:bb:49:de:3a:94:58:8f:ef:a2:
c5:23:15:71:88:12:5b:9d:1e:d2:9e:90:81:6d:7f:
2e:c8:e8:8a:ca:4d:dc:85:66:36:44:f4:d2:b7:e6:
ac:b5:05:cb:35:b7:75:f8:b5:7a:46:0a:ed:ac:f7:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0A:2D:B6:83:16:51:25:E2:91:32:15:2D:86:86:25:D5:65:07:88
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/MgottoMWUSXikTIVLYaGJdVlB4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.144.0/20
217.24.112.0/20
Signature Algorithm: sha256WithRSAEncryption
08:c6:20:76:12:0e:72:c8:17:f1:79:28:de:dd:74:e8:c8:dd:
b8:9f:83:5a:7b:d8:3a:3e:d6:61:1d:5c:ad:cd:92:30:97:83:
e0:0f:7f:10:5e:a1:53:ac:2b:05:ef:1c:20:e4:08:17:57:cf:
da:4c:ea:d4:d6:da:10:94:ae:a1:97:f3:db:26:0d:c4:fb:98:
e6:d4:d9:93:c6:b1:2d:eb:4a:57:28:ae:91:17:0a:7a:3a:23:
fd:e9:63:7c:26:31:1f:c7:c8:19:76:1a:85:12:40:23:6a:79:
e1:cd:47:f7:1a:72:36:55:04:b2:23:03:9e:13:48:17:81:3b:
33:20:07:f8:b3:6a:24:df:91:21:04:2c:b4:33:95:88:98:80:
ea:3d:83:a0:a7:21:b4:90:af:36:9f:65:45:bb:20:4f:65:25:
0d:74:4c:a3:d5:7d:9f:c6:07:78:f9:00:57:c9:8b:72:30:30:
96:e8:81:b1:1f:af:a9:40:78:19:df:b8:5b:c8:f4:e8:a4:49:
92:d9:28:d1:6f:93:af:b5:5c:65:af:5f:3d:e2:ae:a9:23:35:
d7:e3:90:18:07:38:f2:13:bc:dd:61:db:8c:4e:a2:1b:3e:d4:
99:5c:e1:e7:bc:6b:34:00:ad:8d:e1:a8:ae:06:59:9d:34:35:
95:fa:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:55:09 2025 by rpki-client