Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/MR_mra2KXDxOhSmirjUVkdnLe2A.roa
File: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (raw, json)
Hash identifier: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=
Subject key identifier: 31:1F:E6:AD:AD:8A:5C:3C:4E:85:29:A2:AE:35:15:91:D9:CB:7B:60
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01968507E9B63D0D19F0947103DFD8D7653F
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/MR_mra2KXDxOhSmirjUVkdnLe2A.roa
Signing time: Wed 30 Apr 2025 04:50:10 +0000
ROA not before: Wed 30 Apr 2025 04:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43022
IP address blocks: 77.93.32.0/19 maxlen: 24
2a04:7dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:07:e9:b6:3d:0d:19:f0:94:71:03:df:d8:d7:65:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Apr 30 04:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311fe6adad8a5c3c4e8529a2ae351591d9cb7b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:5e:d0:7e:7e:56:92:53:f7:62:f1:8a:5d:
05:86:bb:f2:42:01:da:be:dd:6f:eb:66:97:d9:42:
7c:91:35:52:c9:6a:2d:89:e1:a5:c1:2b:a0:90:ab:
92:d7:b1:13:c4:af:a3:fd:ce:23:7a:e7:c3:4b:f4:
eb:68:2f:e2:da:52:1f:48:62:1d:d1:0f:7a:0f:bc:
65:e9:fe:c7:01:1f:7b:81:66:f5:88:fc:33:fb:13:
c8:d8:b6:92:fe:61:8d:13:35:b3:85:0a:4c:8d:d3:
24:d5:62:1c:7d:8f:55:fb:90:d7:90:08:9d:10:fc:
ea:e9:45:20:9f:0b:0b:03:34:75:96:72:c3:aa:7b:
40:3c:5f:38:b3:01:2b:a1:f2:2d:03:a7:08:31:a6:
bf:0e:cc:51:c5:06:a4:eb:63:ad:c1:f2:df:15:fa:
36:c8:2a:91:81:79:c3:84:34:66:89:1f:76:e9:83:
0d:84:fc:59:61:a5:3b:cd:85:63:f2:41:36:5d:f2:
6b:55:c2:dd:7e:1b:66:23:6b:ba:2c:f1:a0:72:1e:
58:dd:28:a2:72:9e:ff:24:b3:29:5e:ca:66:b5:d5:
57:80:88:28:15:a0:c2:ea:d8:54:ae:4b:84:11:f7:
71:eb:96:29:d1:22:7b:05:7b:5f:36:2f:53:a3:e3:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:E6:AD:AD:8A:5C:3C:4E:85:29:A2:AE:35:15:91:D9:CB:7B:60
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/MR_mra2KXDxOhSmirjUVkdnLe2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.32.0/19
IPv6:
2a04:7dc0::/29
Signature Algorithm: sha256WithRSAEncryption
66:af:23:70:45:b5:bb:49:59:4b:59:42:fb:21:e9:ad:43:2c:
62:73:0c:33:14:7e:3c:89:16:6a:58:ef:65:86:1b:2d:35:4e:
08:43:4b:6c:4d:f7:de:57:e5:37:5b:61:11:7c:db:b5:64:77:
88:ab:a2:81:27:94:b3:fd:27:cd:96:4a:17:ef:a9:8f:7c:22:
19:9a:97:50:b9:d9:7b:64:68:80:4b:19:be:c7:e5:7b:ff:9b:
bb:d9:6a:0d:eb:ac:4d:ab:35:15:9e:7e:31:44:ef:cc:f5:79:
93:aa:07:bc:65:f9:9c:5a:d2:de:31:b8:73:7c:b7:0e:e9:16:
20:79:21:bf:41:8e:b0:11:12:64:8e:a7:2e:ff:fb:26:e4:81:
b6:3a:ed:d3:32:95:55:d3:17:29:aa:91:54:47:6e:28:d4:fd:
70:16:9c:d9:01:5d:e6:c9:05:6a:a3:4f:a6:14:25:97:b1:da:
ec:f2:49:be:dc:eb:88:35:04:42:19:7c:0f:0a:26:8a:e9:78:
58:fc:62:9c:20:aa:71:87:e2:b8:cc:c0:55:40:0d:43:7c:68:
e5:ee:1a:55:e3:dd:6e:77:80:8e:e2:59:0f:89:17:f6:c1:da:
3e:b9:39:bd:69:e0:9b:57:9b:86:2f:ba:80:24:a0:d8:f6:a8:
5c:82:89:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:11:41 2025 by rpki-client