Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa
File: MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa (raw, json)
Hash identifier: 9t6kBtgaiu9wCZTnovzIZuJxrTyQ2HBBvSidXlmnqaM=
Subject key identifier: 33:13:18:3C:9B:89:D9:A8:42:2A:54:8A:4D:08:D5:33:85:B7:ED:9C
Certificate issuer: /CN=39f086ca6211bb95d0643089c7da576fe67c2152
Certificate serial: 019420682C54EDEA2E8750DE55A3B26D1CE2
Authority key identifier: 39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a0f:bf40::/29 maxlen: 29
2a11:1580::/29 maxlen: 29
2a11:1fc0::/29 maxlen: 29
2a11:3640::/29 maxlen: 29
2a12:3a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2c:54:ed:ea:2e:87:50:de:55:a3:b2:6d:1c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f086ca6211bb95d0643089c7da576fe67c2152
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3313183c9b89d9a8422a548a4d08d53385b7ed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:70:0f:62:57:47:40:15:38:d8:87:76:91:
4e:5a:03:2d:68:84:40:6b:e9:72:bd:98:fd:0b:73:
ce:86:ef:b3:13:b5:6c:67:c4:6e:80:cb:5c:73:66:
00:2d:ee:a9:93:de:ff:de:8b:ce:58:7b:f1:08:4e:
76:f1:14:0f:c0:4b:a5:7a:80:a0:9e:1a:59:79:50:
42:96:d0:c3:d9:75:dd:01:71:32:34:ca:55:f3:66:
08:4e:26:95:63:65:3a:7a:4b:4c:a2:c5:9d:f1:6b:
73:ae:49:67:f1:76:1e:14:3b:18:72:4a:66:2b:5c:
ba:e9:3a:dc:39:09:07:74:1c:e3:f9:ca:68:a2:39:
88:96:24:e5:d4:e0:3b:bf:3d:20:6d:42:c2:bb:92:
f1:5c:c0:a4:84:e0:14:9b:b5:4e:2c:a2:f8:4f:ba:
4d:36:7b:db:9c:b5:86:3a:1b:3f:f0:fb:51:6d:6f:
0d:8a:c2:e7:3a:97:e1:a2:ed:15:10:7e:22:55:07:
aa:06:49:0b:dd:ee:76:2e:65:36:24:32:ea:76:9e:
67:f3:94:e0:e3:a1:ff:b6:5c:f4:63:9b:fe:a8:00:
23:cc:5c:75:38:53:e5:3b:0e:1f:8e:4b:12:ab:b9:
15:11:16:30:2d:c5:bf:ce:c8:f1:70:00:3f:be:95:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:18:3C:9B:89:D9:A8:42:2A:54:8A:4D:08:D5:33:85:B7:ED:9C
X509v3 Authority Key Identifier:
keyid:39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bf40::/29
2a11:1580::/29
2a11:1fc0::/29
2a11:3640::/29
2a12:3a40::/29
Signature Algorithm: sha256WithRSAEncryption
35:69:5c:ce:d7:93:9b:cc:08:dd:dd:e2:b0:46:ae:9e:96:4a:
16:b9:72:d9:5c:d3:b3:a8:03:12:d6:22:c9:c6:cc:1a:b2:5a:
e0:1e:20:c7:70:79:7d:f4:9c:6a:c9:10:5c:28:01:75:3c:3e:
c1:4d:a5:43:04:13:3c:29:a9:95:f9:25:e5:3d:b7:93:80:1c:
7a:2f:5e:60:17:aa:d9:0f:36:c3:8a:07:8f:a2:50:0b:b7:4b:
fe:e4:02:54:5e:f8:89:9c:dd:d5:6c:9a:40:01:6d:38:18:3a:
33:6f:b2:f8:27:c0:7a:f7:e7:40:35:2e:e1:57:95:5d:5b:e5:
c4:5a:29:8c:05:f3:00:24:d5:bc:5f:3f:77:35:73:09:cf:c8:
d5:3a:18:49:8b:71:12:c0:a7:6b:de:a5:20:87:69:9c:55:55:
c3:ee:13:13:32:46:02:3f:c2:b9:84:d6:f2:86:f6:c4:58:2c:
dc:ed:36:c5:e6:56:fa:86:0f:11:87:7b:66:ca:7f:25:24:ef:
41:74:dc:f9:a4:f8:fb:44:2a:1b:3d:18:79:1d:dd:f8:27:cd:
31:79:48:b9:d4:89:71:17:f0:36:d6:df:de:c2:5d:90:7c:5d:
87:9e:4a:15:4e:6a:b5:ee:70:c3:66:4a:ac:39:5b:04:44:a1:
cc:be:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:28:29 2025 by rpki-client