Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/MuKsPf92gYpb4VkgQi1f9xcWVfE.roa
File: MuKsPf92gYpb4VkgQi1f9xcWVfE.roa (raw, json)
Hash identifier: 8DECBi25scQbmewrZN0eRe0LEc/MBejb+MDaRq8CQ1k=
Subject key identifier: 32:E2:AC:3D:FF:76:81:8A:5B:E1:59:20:42:2D:5F:F7:17:16:55:F1
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 01966C3F4EDB0C6757D44C1EE2BA0F60512C
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/MuKsPf92gYpb4VkgQi1f9xcWVfE.roa
Signing time: Fri 25 Apr 2025 09:20:10 +0000
ROA not before: Fri 25 Apr 2025 09:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 91.239.23.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
146.19.84.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
2a11:7e41::/48 maxlen: 48
2a11:7e41:1::/48 maxlen: 48
2a11:7e41:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:3f:4e:db:0c:67:57:d4:4c:1e:e2:ba:0f:60:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Apr 25 09:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32e2ac3dff76818a5be15920422d5ff7171655f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:10:b6:4d:e0:bb:67:f1:f9:d2:56:e3:10:
b9:dd:9d:5f:7f:ce:51:35:4f:73:4a:55:76:c4:9a:
2d:66:81:7f:80:b0:19:3c:0d:87:29:6f:fe:c0:7b:
6a:7f:79:56:1a:81:02:99:51:35:7e:69:81:f2:cf:
07:40:d1:66:3f:76:5a:7e:fc:96:96:0b:19:d0:a7:
0b:e2:84:51:90:f1:d6:41:07:8d:01:21:b7:fb:d1:
e3:b9:32:3f:7d:5c:e3:09:6d:3d:71:60:cf:b2:08:
66:69:08:94:d7:f4:2f:7d:4e:b3:06:ca:49:a7:70:
ea:e6:94:b9:86:a4:3e:45:6d:4d:56:79:ce:8b:23:
c9:80:df:74:d4:37:4e:33:8a:2c:54:80:c7:04:88:
c6:d6:88:c7:8e:99:c5:d1:ed:0f:e1:b3:6e:cb:79:
97:c1:2c:41:0c:27:bd:ad:03:ce:48:ac:84:7b:ff:
1a:bd:56:fc:50:8c:d3:07:61:64:f0:f6:9a:c7:22:
c3:d8:09:bc:79:da:9b:00:17:42:b0:7b:22:d2:65:
de:22:bf:20:be:ca:35:9b:b1:08:cd:14:6a:57:06:
fb:99:a3:24:f6:6b:05:c0:01:b3:dc:2f:fe:58:eb:
b8:33:19:86:d6:4e:9f:38:c7:c6:02:c0:b7:e2:c1:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E2:AC:3D:FF:76:81:8A:5B:E1:59:20:42:2D:5F:F7:17:16:55:F1
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/MuKsPf92gYpb4VkgQi1f9xcWVfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.23.0/24
94.247.137.0/24
146.19.84.0/24
176.116.0.0/24
IPv6:
2a11:7e41::-2a11:7e41:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:f8:6c:72:02:f2:13:81:b2:e7:b3:fe:3d:af:b2:b9:1b:6e:
f7:3e:2e:d6:15:d6:11:9c:88:3b:5e:5f:3a:d9:22:28:97:22:
4a:a7:e3:8b:c2:c5:c7:08:66:90:65:b2:2e:03:a7:28:37:f2:
f0:ce:ca:5a:69:a8:a4:d7:36:aa:93:ff:77:be:8b:f3:ba:1a:
f5:28:e9:f9:4c:12:10:82:6a:18:96:d0:c4:dc:fb:ee:f4:18:
3e:d8:79:e8:74:8a:0e:29:51:c7:49:84:1e:90:6f:7d:d5:69:
36:99:88:77:80:d9:07:c4:40:da:12:95:0b:ff:1b:03:29:13:
12:11:77:71:05:61:21:87:d8:e2:6d:66:4f:fc:f3:64:50:e2:
b3:7a:c6:97:dd:cc:f8:cb:c8:35:1b:44:f5:32:a0:5c:99:8c:
a3:59:e7:18:42:87:93:92:70:09:a3:ad:8f:a8:03:61:01:da:
a2:95:39:41:30:4a:ab:fb:f8:ec:44:88:ad:0a:16:28:1f:11:
78:4a:b7:23:fe:4f:2a:bd:27:da:9d:81:d0:2a:64:ce:1e:58:
2d:cd:d6:8d:bd:f1:67:82:3c:ef:99:0f:e6:e8:a4:04:a2:15:
1a:38:a2:2a:50:d1:cd:18:d5:ac:59:e2:db:db:ed:a3:4e:e8:
05:17:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:31 2025 by rpki-client