Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mW_nMdpcjcz86oxJqQ-tv4lxz-M.roa
File: mW_nMdpcjcz86oxJqQ-tv4lxz-M.roa (raw, json)
Hash identifier: Cm+R39+Fn4aMIOFEXp8I4KbcX6ermIZSh7SvY23bIZ0=
Subject key identifier: 99:6F:E7:31:DA:5C:8D:CC:FC:EA:8C:49:A9:0F:AD:BF:89:71:CF:E3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824FCB2B36D43510DC78D1D728927D9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mW_nMdpcjcz86oxJqQ-tv4lxz-M.roa
Signing time: Thu 02 Jan 2025 17:51:40 +0000
ROA not before: Thu 02 Jan 2025 17:51:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201409
IP address blocks: 194.87.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:fc:b2:b3:6d:43:51:0d:c7:8d:1d:72:89:27:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=996fe731da5c8dccfcea8c49a90fadbf8971cfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:63:b1:58:21:5d:41:1c:b1:06:79:82:84:
fa:ec:6d:16:98:05:5b:c8:d1:bb:2b:a2:16:a4:45:
83:be:16:02:dc:9a:d7:f9:d4:4b:68:25:d7:27:11:
38:bf:f1:60:2a:e0:11:49:d6:e9:a2:99:8d:99:92:
17:bd:2e:06:76:b6:bc:70:4b:d1:32:3f:24:79:4d:
c0:09:0f:0b:dd:11:ce:5a:72:fa:87:2e:fa:cf:f6:
64:f7:cd:e5:6b:9c:a4:15:84:66:07:a8:61:9e:92:
19:32:59:3f:8b:58:6e:31:e4:ca:c2:0f:d3:31:c0:
8e:19:ae:71:3d:57:9b:be:7b:52:db:b8:25:5e:33:
68:82:bc:41:f0:dd:74:9d:bb:25:cf:9a:82:b5:74:
70:10:35:2e:33:67:4d:56:b4:c6:8e:04:8a:3b:bb:
45:48:e0:71:08:7c:10:b2:80:d3:8e:44:6b:19:24:
1c:86:39:ae:4e:cf:36:b0:2b:b6:ad:f6:0a:e7:89:
46:dc:02:ae:f6:63:11:2c:94:6d:ba:4b:49:05:3c:
7e:ba:85:48:78:64:31:c7:cd:e9:95:66:9b:d8:3d:
57:f8:ad:8a:93:49:5b:3a:f4:5f:da:a7:ea:b1:a4:
fb:e4:87:b4:79:8f:f8:51:72:5a:e8:35:b2:d2:53:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:E7:31:DA:5C:8D:CC:FC:EA:8C:49:A9:0F:AD:BF:89:71:CF:E3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mW_nMdpcjcz86oxJqQ-tv4lxz-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b2:9f:22:58:10:da:e7:14:46:b8:fc:8a:96:8a:c2:56:61:
e0:e6:ae:85:ae:5b:49:ea:d6:af:d3:82:2a:db:fb:ec:75:00:
1d:6c:47:67:7b:40:34:e1:bc:02:15:7a:d4:ce:a0:17:f6:d9:
be:4c:93:d1:1d:c5:44:50:6a:e2:ec:96:74:ed:f6:02:07:da:
a1:36:81:da:ba:b6:2b:81:0c:7b:22:11:28:f0:ab:36:44:2e:
a5:97:76:8b:c1:d1:0d:8c:b9:2d:27:72:7f:f3:f7:36:75:80:
f4:97:c2:73:a4:67:37:2f:dd:7f:09:5b:f3:d0:2c:e8:17:c5:
21:55:c2:4c:95:96:0a:73:ef:94:95:c8:9a:4a:4b:b2:94:9a:
c9:6e:b8:f3:29:a8:32:de:ee:67:d4:eb:b6:31:23:2d:41:1c:
0d:d6:01:7e:69:35:56:2e:da:84:26:f0:d2:df:41:5e:40:73:
68:68:27:31:dc:ac:4c:6d:ca:7f:89:3b:89:3d:08:60:d8:d7:
c8:15:7a:c8:56:93:eb:08:fc:44:09:80:b1:28:da:3c:fa:24:
87:6a:f0:75:86:4c:f2:14:c0:91:17:81:82:b6:b2:46:1c:48:
21:6c:62:bc:a8:d7:00:9a:3b:82:f1:0e:75:37:cc:1d:0b:76:
7d:7b:6f:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJPyys21DUQ3HjR1yiSfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTZmZTczMWRhNWM4ZGNjZmNlYThjNDlhOTBmYWRiZjg5NzFjZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y9jsVghXUEcsQZ5goT67G0WmAVb
yNG7K6IWpEWDvhYC3JrX+dRLaCXXJxE4v/FgKuARSdbpopmNmZIXvS4Gdra8cEvR
Mj8keU3ACQ8L3RHOWnL6hy76z/Zk983la5ykFYRmB6hhnpIZMlk/i1huMeTKwg/T
McCOGa5xPVebvntS27glXjNogrxB8N10nbslz5qCtXRwEDUuM2dNVrTGjgSKO7tF
SOBxCHwQsoDTjkRrGSQchjmuTs82sCu2rfYK54lG3AKu9mMRLJRtuktJBTx+uoVI
eGQxx83plWab2D1X+K2Kk0lbOvRf2qfqsaT75Ie0eY/4UXJa6DWy0lOXDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlv5zHaXI3M/OqMSakPrb+Jcc/jMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbVdfbk1kcGNqY3o4Nm94SnFRLXR2NGx4ei1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlcOMA0G
CSqGSIb3DQEBCwUAA4IBAQBbsp8iWBDa5xRGuPyKlorCVmHg5q6FrltJ6tav04Iq
2/vsdQAdbEdne0A04bwCFXrUzqAX9tm+TJPRHcVEUGri7JZ07fYCB9qhNoHaurYr
gQx7IhEo8Ks2RC6ll3aLwdENjLktJ3J/8/c2dYD0l8JzpGc3L91/CVvz0CzoF8Uh
VcJMlZYKc++UlciaSkuylJrJbrjzKagy3u5n1Ou2MSMtQRwN1gF+aTVWLtqEJvDS
30FeQHNoaCcx3KxMbcp/iTuJPQhg2NfIFXrIVpPrCPxECYCxKNo8+iSHavB1hkzy
FMCRF4GCtrJGHEghbGK8qNcAmjuC8Q51N8wdC3Z9e2/F
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:53 2025 by rpki-client