Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/McmEoR42go_NL-e1B7HnbupLbKE.roa
File: McmEoR42go_NL-e1B7HnbupLbKE.roa (raw, json)
Hash identifier: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=
Subject key identifier: 31:C9:84:A1:1E:36:82:8F:CD:2F:E7:B5:07:B1:E7:6E:EA:4B:6C:A1
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 019736F1AEE5E9E7330BA254C9D8B8F168B1
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/McmEoR42go_NL-e1B7HnbupLbKE.roa
Signing time: Tue 03 Jun 2025 17:58:17 +0000
ROA not before: Tue 03 Jun 2025 17:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 141.98.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:f1:ae:e5:e9:e7:33:0b:a2:54:c9:d8:b8:f1:68:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jun 3 17:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31c984a11e36828fcd2fe7b507b1e76eea4b6ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:ab:93:7d:32:8e:09:7e:9e:59:d4:15:9f:
91:29:a8:ac:26:a0:a7:7a:4a:de:96:71:54:5d:75:
22:48:18:2a:aa:ed:c5:c9:62:82:eb:d2:a6:99:07:
2a:b2:da:88:a3:8f:7a:31:82:72:5f:47:db:d8:89:
fa:43:b0:ec:06:86:79:e6:e0:70:42:4b:59:28:3c:
95:85:6e:8c:60:8d:48:25:c3:83:ef:df:c0:c5:3f:
16:18:d0:8f:a3:3f:b3:5a:24:a3:58:51:bf:21:05:
40:a4:3f:6f:2f:a1:30:64:84:a6:94:d2:9c:38:1a:
82:c5:1f:b9:40:35:4b:bf:71:10:87:b9:c4:b7:70:
bb:33:b3:95:36:2d:77:fb:07:9f:41:9d:d7:cd:b0:
05:b2:20:f7:36:42:3a:2f:72:8e:ce:d7:13:07:4f:
f5:13:27:0a:6b:3d:38:69:19:a8:d8:7b:67:f2:f1:
cd:cf:d6:b8:f0:4a:e9:19:46:c1:fe:cf:e2:40:34:
a2:3d:7d:2b:3f:79:82:7f:bb:13:38:35:53:4f:c0:
a8:59:e7:0a:75:9f:d3:d9:c0:35:e0:3d:9d:09:54:
dd:16:e5:23:f3:b0:fd:d3:d8:df:6a:13:6e:08:7b:
ce:36:dd:6c:81:76:03:e9:cf:25:46:99:b0:65:70:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:84:A1:1E:36:82:8F:CD:2F:E7:B5:07:B1:E7:6E:EA:4B:6C:A1
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/McmEoR42go_NL-e1B7HnbupLbKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a1:08:de:14:e6:40:95:37:c5:46:7b:ac:e7:8a:46:87:f0:
8f:97:70:38:d8:3c:15:54:fd:ca:31:ea:a2:56:25:57:63:65:
e5:db:86:b3:fd:05:5a:bf:c7:dd:75:c7:7c:fa:33:26:c1:e3:
2c:6f:0b:b8:55:4f:e3:ab:1d:17:1d:97:36:7f:93:b1:e7:9f:
26:50:fa:42:67:f9:56:22:6c:02:c7:5a:19:f4:ef:e0:9b:31:
17:2a:0b:f5:90:03:2b:62:d4:52:0d:43:1c:9c:ac:f1:af:a7:
ab:b6:b2:eb:ff:ee:cc:de:eb:4f:c8:7f:05:80:b1:78:e6:40:
a0:5e:35:f8:fa:23:8b:99:14:28:41:8c:2d:61:88:6a:8a:ce:
0c:ed:e2:73:02:ad:e2:b6:72:06:1f:48:52:84:22:fc:c8:b0:
98:34:46:a6:53:99:73:a9:6d:d1:3e:75:83:59:7e:6d:5c:02:
62:74:f7:86:dd:cb:48:ea:dd:28:9c:e9:4d:06:fc:b0:b5:35:
0d:f5:fb:20:8a:36:b9:a5:97:fa:75:1c:94:e1:ac:8f:c3:1c:
12:96:50:41:e5:b7:57:ba:61:b6:b2:3d:c2:59:cb:f7:d3:9c:
ba:c2:5a:14:0b:5a:56:6e:77:57:00:7e:ff:4e:40:84:9e:8c:
42:53:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:53 2025 by rpki-client