Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mfjilu4i2bFB_oiV2k3kb1IXMO4.roa
File: Mfjilu4i2bFB_oiV2k3kb1IXMO4.roa (raw, json)
Hash identifier: aouSaMJmLDUgnszVxtE+0ZmlKyIIElRAUppu4aVFolU=
Subject key identifier: 31:F8:E2:96:EE:22:D9:B1:41:FE:88:95:DA:4D:E4:6F:52:17:30:EE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D94AC904D6AF0FCB72460116BB30F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mfjilu4i2bFB_oiV2k3kb1IXMO4.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30371
IP address blocks: 2001:668:1f8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:94:ac:90:4d:6a:f0:fc:b7:24:60:11:6b:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31f8e296ee22d9b141fe8895da4de46f521730ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:f5:6e:1c:07:1e:09:d5:a7:b7:b2:64:68:
53:fb:3a:dc:a5:14:a3:67:d3:04:0d:65:b9:36:a3:
fa:e9:19:db:9b:4e:f4:14:30:95:cf:cb:cf:0d:a6:
f7:e2:08:47:20:7e:44:8e:7e:1c:38:32:12:53:69:
64:03:ba:f4:21:1b:62:de:23:e9:22:9c:9d:d0:cf:
2f:b8:a9:f0:1a:22:d7:49:77:35:6f:85:12:25:bb:
c7:80:29:25:32:60:a7:5f:1e:92:24:c9:6b:2d:c8:
42:5d:10:9d:92:a2:11:6e:fd:b9:e7:fd:ae:a7:a3:
1b:e8:8b:d0:73:3b:ef:26:98:f5:c8:f1:8d:a6:e8:
8e:f0:e5:82:08:4c:c1:f2:51:06:97:97:12:c9:e6:
ae:a0:12:a9:87:4f:80:71:00:a3:bd:6b:4c:ca:03:
f2:d5:98:0a:85:d8:73:37:10:b4:0e:fd:05:87:64:
63:e3:d0:10:a5:57:49:65:0e:f9:2a:6e:44:11:3e:
64:a7:c8:a3:ac:cf:fe:82:83:1f:69:5a:9f:36:0f:
42:f2:4d:e0:8b:fd:21:6e:4c:cc:14:d3:84:f0:4f:
39:57:36:56:b1:f5:97:4e:5b:f9:53:92:7b:fe:b6:
2a:12:73:41:5b:10:3c:c8:7c:f8:47:9b:56:af:10:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F8:E2:96:EE:22:D9:B1:41:FE:88:95:DA:4D:E4:6F:52:17:30:EE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mfjilu4i2bFB_oiV2k3kb1IXMO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:668:1f8::/46
Signature Algorithm: sha256WithRSAEncryption
73:4b:99:4b:c0:6b:da:32:d1:6b:ec:e1:d3:ac:4f:7f:12:0d:
7e:0d:4a:88:05:a4:a2:6b:30:88:41:cd:36:8b:8a:52:a9:70:
38:ec:45:3a:88:83:8c:68:ac:d4:db:4d:84:bd:22:83:c1:a1:
e9:34:0a:cd:81:3e:f9:16:c0:2c:17:25:33:de:a0:5e:3d:11:
66:74:5f:8e:07:98:10:b5:ed:34:12:73:fc:e7:9f:0b:b0:a5:
fd:e5:ec:59:d5:ac:ba:3b:95:04:a3:bd:c0:8a:d3:b3:dc:0e:
84:c2:13:ad:97:f4:34:5a:30:31:3d:4e:96:a6:df:25:ed:a3:
4c:a5:b1:14:30:44:76:89:d4:2a:57:47:a9:a6:b7:57:32:ac:
61:a8:37:82:95:4e:32:e4:64:a8:58:15:67:8a:ce:4e:95:a4:
af:1a:f2:1d:aa:9c:44:91:68:15:67:f3:d7:1c:2c:e1:56:3a:
43:0b:a6:72:54:59:15:b4:b0:5f:25:81:c9:bb:17:de:78:0d:
e1:81:1c:91:2a:30:69:bd:28:5d:d4:8c:2d:32:2a:6e:ac:2d:
92:da:7a:24:68:68:9b:ea:ed:b8:5f:a6:23:dc:d5:18:7a:85:
66:9f:ce:62:4c:8f:a1:f2:ec:4a:89:29:4d:ff:3a:cc:3d:2c:
45:58:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:09 2025 by rpki-client