Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa
File: mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa (raw, json)
Hash identifier: 4o5/uQYVaiCLx5hp640nZnYAh3ZNcq2J4p5PzINcxjY=
Subject key identifier: 9A:65:B3:47:75:53:78:13:70:4D:62:50:4B:3E:A2:01:60:4B:DA:7E
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019428278F4C38DAE0558193377D240664AE
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa
Signing time: Thu 02 Jan 2025 17:54:28 +0000
ROA not before: Thu 02 Jan 2025 17:54:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54128
IP address blocks: 213.86.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:8f:4c:38:da:e0:55:81:93:37:7d:24:06:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a65b34775537813704d62504b3ea201604bda7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:04:89:ef:89:76:a2:73:82:28:97:a6:93:
fd:39:f9:e0:18:a9:13:5b:f6:e9:c8:6e:7c:cf:30:
68:7f:b1:a7:09:3d:b3:04:01:66:a6:cf:99:cd:a3:
0f:8d:2b:15:88:e1:21:c3:27:d7:22:a0:56:de:c4:
f8:85:6d:7e:52:9d:48:ff:e8:b3:51:f1:19:c2:08:
22:53:04:aa:88:82:4c:f8:9a:64:78:21:22:0c:11:
a8:83:1a:67:35:c2:34:63:46:92:31:32:04:50:17:
6a:f6:9d:ad:33:dd:7f:81:26:5e:83:29:e6:d4:4b:
4e:2b:a6:5e:3e:be:eb:5d:f5:cf:ed:43:97:0d:b7:
38:74:38:bd:96:29:63:19:45:70:8d:12:e3:f5:b6:
ea:51:58:4e:2f:99:6e:93:d1:8e:f1:60:9e:0a:a4:
11:3b:19:cb:63:33:49:64:d5:08:de:ca:e8:21:14:
c8:9c:9e:ea:b2:86:5a:e7:b5:f0:ed:04:70:53:59:
9f:e5:4f:24:7a:35:02:7f:be:52:91:f7:13:58:ba:
f9:ae:2d:85:6c:70:2e:31:34:86:87:fc:db:19:5c:
e1:9c:99:97:d6:2b:73:fe:76:0e:90:7c:de:9c:3b:
65:90:79:02:88:f9:9d:8b:f2:f9:33:2f:0c:32:2a:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:65:B3:47:75:53:78:13:70:4D:62:50:4B:3E:A2:01:60:4B:DA:7E
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.86.124.0/24
Signature Algorithm: sha256WithRSAEncryption
26:38:c6:8b:72:f3:84:52:83:f2:0c:b9:13:8c:bf:91:53:ac:
7d:27:fe:fe:c6:cd:53:55:6c:f4:0c:86:91:07:6b:86:28:04:
aa:bf:b2:e7:1e:4a:31:1f:a4:f5:0d:8e:28:50:71:e8:ea:2c:
4d:a0:8f:9e:d7:eb:ad:8e:d2:68:19:3c:25:93:5b:26:a2:14:
4b:47:b3:44:f5:ae:87:25:1a:c8:7f:97:be:2b:8e:50:ad:8b:
35:c7:4d:a8:b6:57:6d:8f:5e:b2:d5:05:d0:70:61:81:a9:97:
e6:a5:f0:4b:b8:c1:4a:b5:b6:fd:8f:7e:ce:63:c5:02:06:75:
10:15:ae:70:60:6a:44:f2:c0:e2:a0:2a:8b:30:a1:9b:24:1b:
cf:04:45:a3:54:47:bc:65:8d:0f:f4:3f:0b:4d:21:1f:a0:eb:
9d:3b:3f:f6:c6:bf:13:40:a2:88:9c:b7:9d:b2:43:41:6d:8c:
19:f7:1b:3d:b7:6a:52:98:c7:01:c8:16:b1:c7:a0:a3:57:64:
5a:db:d3:08:cd:90:5b:ee:cf:8e:23:a0:24:42:1e:14:9f:72:
b7:55:da:ee:c3:e2:01:b7:30:a1:08:c3:61:e4:9d:86:fb:f0:
a4:a5:f0:00:d0:61:b6:ee:e3:8e:be:47:cf:47:aa:cd:94:89:
97:73:ba:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ49MONrgVYGTN30kBmSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjUwMTAyMTc1NDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTY1YjM0Nzc1NTM3ODEzNzA0ZDYyNTA0YjNlYTIwMTYwNGJkYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IoEie+JdqJzgiiXppP9OfngGKkT
W/bpyG58zzBof7GnCT2zBAFmps+ZzaMPjSsViOEhwyfXIqBW3sT4hW1+Up1I/+iz
UfEZwggiUwSqiIJM+JpkeCEiDBGogxpnNcI0Y0aSMTIEUBdq9p2tM91/gSZegynm
1EtOK6ZePr7rXfXP7UOXDbc4dDi9liljGUVwjRLj9bbqUVhOL5luk9GO8WCeCqQR
OxnLYzNJZNUI3sroIRTInJ7qsoZa57Xw7QRwU1mf5U8kejUCf75SkfcTWLr5ri2F
bHAuMTSGh/zbGVzhnJmX1itz/nYOkHzenDtlkHkCiPmdi/L5My8MMir6rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJpls0d1U3gTcE1iUEs+ogFgS9p+MB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvbW1XelIzVlRlQk53VFdKUVN6NmlBV0JMMm40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VZ8MA0G
CSqGSIb3DQEBCwUAA4IBAQAmOMaLcvOEUoPyDLkTjL+RU6x9J/7+xs1TVWz0DIaR
B2uGKASqv7LnHkoxH6T1DY4oUHHo6ixNoI+e1+utjtJoGTwlk1smohRLR7NE9a6H
JRrIf5e+K45QrYs1x02otldtj16y1QXQcGGBqZfmpfBLuMFKtbb9j37OY8UCBnUQ
Fa5wYGpE8sDioCqLMKGbJBvPBEWjVEe8ZY0P9D8LTSEfoOudOz/2xr8TQKKInLed
skNBbYwZ9xs9t2pSmMcByBaxx6CjV2Ra29MIzZBb7s+OI6AkQh4Un3K3Vdruw+IB
tzChCMNh5J2G+/CkpfAA0GG27uOOvkfPR6rNlImXc7qF
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:11 2025 by rpki-client