Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/MdwNzYBJU13swBaE5UOOOcRBz5k.roa
File: MdwNzYBJU13swBaE5UOOOcRBz5k.roa (raw, json)
Hash identifier: +Fd+WQi5wLctEErQiuTXcED6kILUDNrn9fQ2BbzAxhc=
Subject key identifier: 31:DC:0D:CD:80:49:53:5D:EC:C0:16:84:E5:43:8E:39:C4:41:CF:99
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 019422FB6E30B4F38526DD67FA8ACB5A4B57
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/MdwNzYBJU13swBaE5UOOOcRBz5k.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57630
IP address blocks: 80.88.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6e:30:b4:f3:85:26:dd:67:fa:8a:cb:5a:4b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31dc0dcd8049535decc01684e5438e39c441cf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:27:5c:19:95:03:5f:85:6d:8c:0c:d1:6a:
c5:b6:27:e1:c9:72:6f:bc:e4:23:63:71:8e:3a:c4:
9c:ab:8d:7a:dc:a7:54:62:a0:6a:8b:70:eb:24:e9:
c9:e5:55:39:a1:a3:2a:b1:b6:50:74:8c:a7:98:cd:
14:00:43:59:a3:58:da:75:15:68:53:7e:99:de:f0:
3c:a7:19:7b:1f:a2:bc:e3:e0:83:5e:ae:7e:e4:eb:
48:a4:5a:2e:7a:96:f7:fa:3a:93:70:df:e7:fe:49:
1b:8e:e1:82:d1:0f:1c:25:d7:bd:45:bf:83:e5:2e:
6d:f9:1d:fe:0e:0d:fd:73:50:e1:e3:4e:b8:e2:ad:
09:fa:d9:1f:e2:1f:80:54:74:66:d0:8d:dc:b6:41:
a9:0c:fa:b9:ff:d7:ac:74:77:47:b4:66:91:a8:dd:
43:45:52:84:2b:18:28:66:60:89:b1:ad:53:ec:cd:
4d:b5:31:3a:e3:31:a5:32:cc:49:aa:8f:1e:74:a3:
97:39:e1:09:77:c7:10:52:c3:93:43:6e:0e:c6:a9:
95:aa:3b:8c:55:e6:a0:59:ee:29:08:6a:e5:9a:36:
a6:87:f1:6d:e8:e4:fd:31:8d:af:8e:03:71:1c:5c:
ff:9b:fc:9d:b5:7d:a9:9a:3d:2c:7e:0e:e3:d9:e4:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:0D:CD:80:49:53:5D:EC:C0:16:84:E5:43:8E:39:C4:41:CF:99
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/MdwNzYBJU13swBaE5UOOOcRBz5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.126.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0e:4b:5d:dd:8a:93:b3:b8:63:90:50:3f:2a:05:86:1c:c2:
8b:da:c6:e2:32:e2:be:94:ea:e2:30:ba:f5:74:7f:83:d5:08:
67:9b:12:7d:99:6f:70:cb:28:76:bb:d7:91:5b:21:a4:4e:85:
67:b2:6c:03:a1:f0:2b:34:70:e5:ae:67:e9:a4:03:79:55:34:
6e:b5:f2:e8:b3:5f:ae:98:40:78:e0:f5:ff:4b:1e:11:66:8f:
e6:3c:07:e4:68:6a:0c:74:a1:90:16:0c:73:3d:ec:93:0a:bc:
fe:ec:ba:71:a4:10:4e:3b:ec:d3:b4:c9:ac:8b:cf:d6:e1:45:
00:4e:b9:03:8a:af:f1:5f:46:f3:cc:fe:7f:fe:9c:ea:ec:fc:
19:f8:0b:25:c4:f4:cb:d3:1b:e2:d8:f1:18:9a:6e:0a:95:2d:
9a:09:dc:4a:65:77:c0:91:4e:f8:82:f2:ac:e2:33:6e:27:f8:
f7:36:ab:62:a3:49:91:40:1f:37:df:f1:d0:3d:96:37:ea:69:
f1:87:57:46:c3:1d:89:df:10:a1:a6:b5:2d:fd:37:9a:64:26:
5d:21:24:56:30:3d:61:1f:6b:ea:ec:ff:86:fb:51:54:c1:e2:
0a:12:6d:b7:b8:4e:ca:03:73:44:9f:06:c3:fe:e5:1a:c7:a8:
e8:14:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:42 2025 by rpki-client