Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa
File: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (raw, json)
Hash identifier: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=
Subject key identifier: 9A:32:C1:F9:B1:0C:3F:F9:80:8C:C1:D8:62:4B:96:9C:7C:87:F2:CB
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAF91B7295F35A217E0F28C8E2195E
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131668
IP address blocks: 2a0f:607:1051::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f9:1b:72:95:f3:5a:21:7e:0f:28:c8:e2:19:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a32c1f9b10c3ff9808cc1d8624b969c7c87f2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:0c:0a:9f:b7:24:bc:af:46:b1:6d:84:9a:
48:ba:5f:15:c3:bf:da:04:de:8d:b7:61:04:cb:0b:
5a:01:ae:40:07:fa:51:7a:b5:50:e5:7f:75:af:8d:
b7:8f:35:58:3a:91:b1:dc:e3:16:df:2c:95:69:3b:
75:14:df:ad:27:b5:2e:aa:f6:9e:8a:0c:52:8d:b3:
80:e8:01:37:8a:fc:ca:04:42:94:f8:b0:8b:f5:f9:
6f:0f:88:a1:5c:cd:74:04:e7:1a:49:63:21:87:19:
4f:62:9a:82:80:7a:92:98:2d:df:75:bd:75:ab:71:
c7:ff:2f:93:77:ff:2e:f6:81:7d:d4:0b:85:d5:7c:
d3:80:b0:54:a1:77:93:ff:91:4c:53:f2:50:69:72:
a0:33:24:32:a2:fb:a6:9f:db:6b:85:6c:42:37:86:
39:27:a2:a2:b1:e3:74:02:10:31:23:1f:2d:9b:ce:
c4:51:b1:54:ee:c2:4a:4e:3a:38:e0:5b:20:4b:b2:
dd:6e:4c:71:7e:2a:1e:6e:e5:61:63:be:34:68:90:
53:82:ef:c2:ed:48:69:43:7f:ff:4b:ec:7e:3c:02:
4a:15:7b:02:8e:ef:07:84:e6:fa:ed:ee:d5:61:40:
2f:60:6d:d7:e8:87:48:25:2e:1d:73:28:43:96:92:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:C1:F9:B1:0C:3F:F9:80:8C:C1:D8:62:4B:96:9C:7C:87:F2:CB
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1051::/48
Signature Algorithm: sha256WithRSAEncryption
93:7e:92:2a:75:f4:1a:6a:87:39:52:34:37:ae:b8:2e:bc:65:
c7:4b:88:d2:a9:46:70:7b:94:6e:cf:b2:2e:2d:f3:67:20:e9:
41:8e:0b:5e:58:46:a5:9d:92:0a:04:10:bc:e6:20:4f:51:74:
47:1b:ee:0c:ed:02:15:cc:7a:fb:bf:cb:80:8f:8d:e2:97:0d:
84:f5:2c:37:39:85:08:62:62:1e:47:29:3a:58:8d:5c:66:e3:
74:8a:dc:f9:a8:28:8b:16:96:d7:6b:5d:5c:78:bb:ce:88:a9:
e7:de:a6:f0:92:b7:f1:7d:f6:fa:b9:87:78:e1:ed:4c:c9:a3:
fe:7b:a6:90:fe:2d:98:d6:82:71:aa:41:5e:37:7a:b5:cc:78:
ce:de:ea:0e:3d:bd:26:02:fa:a8:b5:72:15:f7:8c:8e:2d:55:
40:b6:68:62:60:6c:69:5b:1b:03:a4:53:02:cf:f0:85:e3:f9:
76:33:4b:d9:c2:34:66:e5:b5:b1:ea:85:73:b3:fd:c0:b4:8e:
8e:90:44:be:e8:c5:a9:20:ac:d8:91:39:34:fe:65:72:e3:49:
3a:48:3a:69:e3:2f:e1:1f:52:f2:1e:e1:35:dd:93:9d:87:4f:
a8:b5:2f:3b:df:d1:c4:65:aa:54:fb:28:15:55:74:97:fc:a9:
d7:b5:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:50 2025 by rpki-client