Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa
File: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (raw, json)
Hash identifier: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=
Subject key identifier: 99:FD:1D:84:0E:C1:82:36:8C:ED:E0:E3:7E:61:7B:0F:14:D2:55:F6
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 01942067CA0EFEACECAAFB718F25A77BB988
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210045
IP address blocks: 217.28.133.0/24 maxlen: 24
2a12:2140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ca:0e:fe:ac:ec:aa:fb:71:8f:25:a7:7b:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99fd1d840ec182368cede0e37e617b0f14d255f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:26:d4:67:f4:68:af:81:e5:0e:55:23:66:
58:2d:67:96:1b:32:43:2e:18:87:c8:f9:a5:34:d4:
37:ad:b9:64:8d:4d:aa:93:2f:c6:35:06:a6:10:99:
84:87:78:03:68:c2:c4:6b:19:38:4f:a3:d0:23:b2:
4e:24:63:89:98:21:68:b5:e8:68:16:00:ba:99:91:
be:b9:71:7f:62:52:e4:f5:5b:b5:33:e4:f8:e1:c6:
af:39:e1:a7:ff:05:fa:58:38:cb:58:a1:55:3a:ac:
d9:e2:c1:4b:27:24:e6:e5:ef:df:04:92:66:06:24:
f1:cc:91:e0:1e:21:08:01:75:e5:f2:86:66:96:21:
ae:73:da:80:5c:5c:c5:92:e2:0a:c2:29:9c:74:c9:
44:bb:c9:c8:58:b2:bf:20:71:ec:9d:bf:2e:69:cf:
67:10:19:22:3d:c1:f2:51:6d:c3:56:8f:ac:b4:a8:
2f:da:a0:28:32:00:49:51:09:a3:12:7a:ca:e3:27:
54:11:4e:01:96:e2:aa:25:2a:93:f7:fe:db:dd:d2:
6b:f5:24:6d:01:58:1e:47:15:26:15:8d:67:f2:14:
2d:e3:15:c8:18:06:96:ac:31:58:c5:e1:db:82:78:
1c:67:07:27:50:9b:c1:7a:e8:cf:fd:6c:53:05:ae:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FD:1D:84:0E:C1:82:36:8C:ED:E0:E3:7E:61:7B:0F:14:D2:55:F6
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.133.0/24
IPv6:
2a12:2140::/29
Signature Algorithm: sha256WithRSAEncryption
aa:12:a9:79:44:70:ae:0b:f7:d1:3e:f1:a5:ca:8f:23:f6:35:
bd:f2:4a:35:66:3e:47:40:0d:9b:50:96:e5:46:fa:c0:70:4f:
17:e5:6a:15:39:74:8e:cc:16:c4:24:39:c2:16:30:9b:2f:2b:
b8:3d:48:e5:38:ee:e3:d8:5f:c4:d7:11:49:92:31:d3:77:14:
85:db:cc:24:f5:21:b1:5f:d1:02:95:60:02:45:83:cd:34:ba:
4e:e5:51:7b:e8:c4:67:b1:81:db:91:eb:0a:93:e7:92:8f:f3:
07:32:cc:00:a9:b2:b5:b0:c0:a3:0d:31:d1:21:f4:5b:e7:4e:
64:71:66:99:1b:2a:67:3e:1f:29:1e:71:f3:3e:92:38:a6:74:
01:cf:16:6f:f2:c8:a0:fc:03:fb:d3:b0:00:56:e6:89:47:e5:
95:71:7d:2b:2d:e2:2a:af:09:0c:83:33:1e:18:47:d4:1c:63:
54:9c:8e:fa:14:1f:97:16:1c:19:ff:90:a3:89:72:61:1e:e8:
2b:fe:3a:07:15:92:5c:49:b1:e2:20:f3:29:f3:4d:d4:15:f0:
65:22:be:ff:0c:18:d5:8f:a0:0a:f5:5e:35:fc:50:71:86:0d:
e1:2a:ee:2f:e8:d3:1f:a6:10:44:2d:9c:65:f9:ad:27:a7:29:
66:6e:61:39
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgZ8oO/qzsqvtxjyWne7mIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZGM2OTRmMGMzMjU1ZDVkNTU3M2YxMzI4ZTUzNjU0Y2Zi
MjJjNGQwHhcNMjUwMTAxMDU0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWZkMWQ4NDBlYzE4MjM2OGNlZGUwZTM3ZTYxN2IwZjE0ZDI1NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqEm1Gf0aK+B5Q5VI2ZYLWeWGzJD
LhiHyPmlNNQ3rblkjU2qky/GNQamEJmEh3gDaMLEaxk4T6PQI7JOJGOJmCFoteho
FgC6mZG+uXF/YlLk9Vu1M+T44cavOeGn/wX6WDjLWKFVOqzZ4sFLJyTm5e/fBJJm
BiTxzJHgHiEIAXXl8oZmliGuc9qAXFzFkuIKwimcdMlEu8nIWLK/IHHsnb8uac9n
EBkiPcHyUW3DVo+stKgv2qAoMgBJUQmjEnrK4ydUEU4BluKqJSqT9/7b3dJr9SRt
AVgeRxUmFY1n8hQt4xXIGAaWrDFYxeHbgngcZwcnUJvBeujP/WxTBa50LwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJn9HYQOwYI2jO3g435hew8U0lX2MB8GA1UdIwQY
MBaAFGzcaU8MMlXV1Vc/EyjlNlTPsixNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEt
NTM2ZTFmMGM0ZmY5LzEvbWYwZGhBN0JnamFNN2VEamZtRjdEeFRTVmZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEtNTM2ZTFmMGM0ZmY5
LzEvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA2RyFMA0E
AgACMAcDBQMqEiFAMA0GCSqGSIb3DQEBCwUAA4IBAQCqEql5RHCuC/fRPvGlyo8j
9jW98ko1Zj5HQA2bUJblRvrAcE8X5WoVOXSOzBbEJDnCFjCbLyu4PUjlOO7j2F/E
1xFJkjHTdxSF28wk9SGxX9EClWACRYPNNLpO5VF76MRnsYHbkesKk+eSj/MHMswA
qbK1sMCjDTHRIfRb505kcWaZGypnPh8pHnHzPpI4pnQBzxZv8sig/AP707AAVuaJ
R+WVcX0rLeIqrwkMgzMeGEfUHGNUnI76FB+XFhwZ/5CjiXJhHugr/joHFZJcSbHi
IPMp803UFfBlIr7/DBjVj6AK9V41/FBxhg3hKu4v6NMfphBELZxl+a0npylmbmE5
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:00 2025 by rpki-client