Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MjHI-5taJ79D0o6vuzpwUl5BXxg.roa
File: MjHI-5taJ79D0o6vuzpwUl5BXxg.roa (raw, json)
Hash identifier: 2xe82sDNFCxI50FRGmxkzF+cYrkznOh9tJuQ9XnkEME=
Subject key identifier: 32:31:C8:FB:9B:5A:27:BF:43:D2:8E:AF:BB:3A:70:52:5E:41:5F:18
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEC92334CC65CCA8E60C291580466
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MjHI-5taJ79D0o6vuzpwUl5BXxg.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213288
IP address blocks: 2a0c:9a40:1022::/48 maxlen: 48
2a0c:9a40:10a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ec:92:33:4c:c6:5c:ca:8e:60:c2:91:58:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3231c8fb9b5a27bf43d28eafbb3a70525e415f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:8a:e7:35:ed:8a:86:76:5d:31:71:4a:41:
73:ef:b2:6d:7c:d2:d2:ee:fd:e1:be:e1:55:54:88:
90:e4:31:42:e4:8b:21:26:ac:f9:c5:1d:37:cc:98:
fe:5c:a1:93:5f:ee:d8:67:e6:88:0b:cf:30:1e:49:
fe:13:60:64:07:f4:6c:22:37:38:02:6e:50:32:2e:
9c:a2:c2:27:d0:a4:e6:bc:3b:8d:89:71:87:a4:55:
6a:bc:47:91:37:6c:97:a9:f5:82:c4:72:21:00:fc:
76:50:a2:a8:7d:65:b3:d7:18:56:6c:eb:f4:a0:48:
68:55:9b:b8:82:2b:87:54:19:4c:2c:44:24:a7:86:
9d:cf:54:b2:27:ff:bd:2c:19:42:ab:7a:37:5e:ba:
0a:62:84:53:c7:17:e1:05:e5:e8:2d:f1:d4:6e:80:
6b:52:28:6c:67:05:34:90:c9:32:2f:51:bd:d9:dc:
12:76:0d:a5:f0:4b:42:e1:9f:1c:b6:c0:50:59:5e:
04:c6:60:73:bb:36:aa:a6:d0:b7:33:0c:b7:35:18:
51:ee:3c:55:c0:ed:1e:fe:91:8b:eb:d4:f3:41:0a:
16:62:4d:dc:ec:ef:eb:92:e6:bc:fc:d8:19:27:3e:
10:38:eb:d5:36:54:03:31:6b:7d:c7:3b:33:8f:aa:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:31:C8:FB:9B:5A:27:BF:43:D2:8E:AF:BB:3A:70:52:5E:41:5F:18
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MjHI-5taJ79D0o6vuzpwUl5BXxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:1022::/48
2a0c:9a40:10a0::/44
Signature Algorithm: sha256WithRSAEncryption
10:15:01:d2:06:cb:d1:75:6a:f4:b2:ac:27:44:40:76:1f:47:
ac:94:d9:ab:76:4c:93:ed:25:22:f9:18:30:22:04:c4:d9:90:
79:4b:08:10:2e:95:33:1c:99:9b:98:3c:2f:06:e5:46:d5:a9:
ed:f9:d2:5d:8d:e1:bf:31:1e:c3:ea:c4:2a:3a:ca:2f:ee:1c:
90:59:1a:99:ed:26:ff:b5:cf:88:cf:84:82:55:3a:95:5b:14:
bc:b7:7f:7f:57:88:50:92:2b:e3:ee:db:1c:09:64:69:38:8f:
22:6b:2b:ac:dc:9e:ea:7f:35:9e:f8:32:00:ec:1b:7e:83:30:
c9:a9:92:46:8b:7d:db:f0:9b:7f:15:cd:01:d0:76:ca:fb:d3:
c0:8b:b0:7d:6a:3d:e6:92:ae:43:e9:57:a0:50:e6:89:14:51:
91:07:79:4c:2b:4d:e0:a4:b9:99:20:55:dd:ef:61:4d:bf:a4:
a4:34:02:81:63:f9:83:09:e3:cb:b7:87:d2:f0:ae:65:77:f7:
27:09:ae:81:5a:5e:39:ff:1c:0e:ac:7b:fb:ed:50:31:10:0d:
6e:bd:6c:77:18:dc:86:a0:91:54:79:73:58:0a:47:30:df:e0:
62:a9:f1:d8:4e:c6:ba:47:10:14:14:4d:6f:ac:c3:66:c3:28:
21:1e:2e:1f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi++ySM0zGXMqOYMKRWARmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjMxYzhmYjliNWEyN2JmNDNkMjhlYWZiYjNhNzA1MjVlNDE1ZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumCK5zXtioZ2XTFxSkFz77JtfNLS
7v3hvuFVVIiQ5DFC5IshJqz5xR03zJj+XKGTX+7YZ+aIC88wHkn+E2BkB/RsIjc4
Am5QMi6cosIn0KTmvDuNiXGHpFVqvEeRN2yXqfWCxHIhAPx2UKKofWWz1xhWbOv0
oEhoVZu4giuHVBlMLEQkp4adz1SyJ/+9LBlCq3o3XroKYoRTxxfhBeXoLfHUboBr
UihsZwU0kMkyL1G92dwSdg2l8EtC4Z8ctsBQWV4ExmBzuzaqptC3Mwy3NRhR7jxV
wO0e/pGL69TzQQoWYk3c7O/rkua8/NgZJz4QOOvVNlQDMWt9xzszj6plWQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDIxyPubWie/Q9KOr7s6cFJeQV8YMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvTWpISS01dGFKNzlEMG82dnV6cHdVbDVCWHhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgyaQBAi
AwcEKgyaQBCgMA0GCSqGSIb3DQEBCwUAA4IBAQAQFQHSBsvRdWr0sqwnREB2H0es
lNmrdkyT7SUi+RgwIgTE2ZB5SwgQLpUzHJmbmDwvBuVG1ant+dJdjeG/MR7D6sQq
Osov7hyQWRqZ7Sb/tc+Iz4SCVTqVWxS8t39/V4hQkivj7tscCWRpOI8iayus3J7q
fzWe+DIA7Bt+gzDJqZJGi33b8Jt/Fc0B0HbK+9PAi7B9aj3mkq5D6VegUOaJFFGR
B3lMK03gpLmZIFXd72FNv6SkNAKBY/mDCePLt4fS8K5ld/cnCa6BWl45/xwOrHv7
7VAxEA1uvWx3GNyGoJFUeXNYCkcw3+BiqfHYTsa6RxAUFE1vrMNmwyghHi4f
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:59 2025 by rpki-client