Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MqoeHqO3EjwgdoY6OkFtP6M6GmE.roa
File: MqoeHqO3EjwgdoY6OkFtP6M6GmE.roa (raw, json)
Hash identifier: q9CibJbYjQROfA29PmLusXF3Rg65/icNUHqyZPrQs7s=
Subject key identifier: 32:AA:1E:1E:A3:B7:12:3C:20:76:86:3A:3A:41:6D:3F:A3:3A:1A:61
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019566F2D0907F2CF94F0D5E14BD2A6E2416
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MqoeHqO3EjwgdoY6OkFtP6M6GmE.roa
Signing time: Wed 05 Mar 2025 15:35:43 +0000
ROA not before: Wed 05 Mar 2025 15:35:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53730
IP address blocks: 87.236.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:f2:d0:90:7f:2c:f9:4f:0d:5e:14:bd:2a:6e:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 5 15:35:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32aa1e1ea3b7123c2076863a3a416d3fa33a1a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:cf:b4:2b:d4:45:08:bf:a8:cc:c1:b8:ee:
ed:52:f1:29:fb:9c:35:6f:6f:3b:76:77:43:72:02:
5e:fe:02:54:97:bb:f5:c8:11:5b:48:65:36:5b:c8:
87:28:75:25:2e:1e:d2:0a:09:45:97:fc:09:d7:d2:
4c:20:b8:9e:84:f9:eb:61:a3:d3:2d:c7:42:81:ad:
a9:b1:c1:5e:e1:a4:33:5b:f1:b3:e2:ad:8c:ab:3d:
d1:fc:d4:9e:76:64:07:80:0d:bb:6a:e4:cf:2a:92:
e3:5c:19:c6:80:59:bb:21:7f:b9:01:32:f2:ea:45:
c8:ff:13:52:df:f3:81:97:92:91:86:05:07:a4:56:
f8:40:dd:c2:22:e8:ef:ad:ff:68:15:42:20:4b:b9:
ff:78:68:5d:0b:10:fb:dd:19:2d:f1:97:d5:e9:12:
8b:77:c7:a9:40:0e:7a:e0:e0:0c:c9:f8:45:0e:7e:
84:76:9d:52:61:11:52:69:ab:7d:15:e5:b2:8e:70:
ed:4f:98:3e:20:04:62:e4:a0:f2:1b:73:03:fc:94:
b4:0e:30:fe:5f:ea:21:95:8b:df:07:b0:f4:98:84:
72:43:0a:6f:73:21:5f:ad:80:84:1b:86:ec:45:1b:
62:6a:d7:f7:88:2b:04:63:10:cf:47:eb:36:a8:d7:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:1E:1E:A3:B7:12:3C:20:76:86:3A:3A:41:6D:3F:A3:3A:1A:61
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MqoeHqO3EjwgdoY6OkFtP6M6GmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1d:12:01:bd:de:59:a3:05:41:44:73:a2:ae:d9:ec:51:13:
f4:ba:01:4e:d6:e9:39:b0:ec:c5:69:c9:e8:91:c8:10:f8:ca:
f1:81:68:ce:19:12:77:03:a1:ff:ef:3a:77:df:30:76:48:d1:
64:29:af:0d:ad:93:1d:63:4a:41:cb:47:4c:2a:42:f4:d4:ec:
94:e4:eb:86:80:c3:ff:68:0b:67:a7:68:50:26:42:04:54:25:
ff:8f:74:64:ba:f5:ba:ae:4b:ed:54:eb:01:df:5f:dc:86:9c:
5e:92:bf:fb:05:33:c0:48:20:70:5d:cb:9c:61:71:c7:fc:9b:
0e:a0:df:77:54:8c:5a:21:60:72:cb:19:53:15:dc:5a:29:1b:
44:d8:8c:43:bc:9f:b7:cf:8e:35:38:36:c6:b8:90:86:d5:c6:
8e:56:64:c4:ac:07:72:2f:dd:5d:e7:e1:a0:f1:29:ff:d5:4e:
9d:ec:b8:3c:9e:c2:2d:a0:bd:dc:0a:4e:9f:e4:06:74:2d:48:
ef:16:03:29:db:ca:cb:cf:b9:d0:24:c2:9d:aa:28:f2:cf:83:
63:ab:7e:38:88:5c:fe:da:d9:9d:21:26:15:7d:fa:b5:d4:0a:
9e:2e:0e:58:45:49:f4:2b:50:54:20:67:71:e7:24:3d:70:e4:
f5:e0:7e:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVm8tCQfyz5Tw1eFL0qbiQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMzA1MTUzNTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmFhMWUxZWEzYjcxMjNjMjA3Njg2M2EzYTQxNmQzZmEzM2ExYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjbPtCvURQi/qMzBuO7tUvEp+5w1
b287dndDcgJe/gJUl7v1yBFbSGU2W8iHKHUlLh7SCglFl/wJ19JMILiehPnrYaPT
LcdCga2pscFe4aQzW/Gz4q2Mqz3R/NSedmQHgA27auTPKpLjXBnGgFm7IX+5ATLy
6kXI/xNS3/OBl5KRhgUHpFb4QN3CIujvrf9oFUIgS7n/eGhdCxD73Rkt8ZfV6RKL
d8epQA564OAMyfhFDn6Edp1SYRFSaat9FeWyjnDtT5g+IARi5KDyG3MD/JS0DjD+
X+ohlYvfB7D0mIRyQwpvcyFfrYCEG4bsRRtiatf3iCsEYxDPR+s2qNfskwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDKqHh6jtxI8IHaGOjpBbT+jOhphMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvTXFvZUhxTzNFandnZG9ZNk9rRnRQNk02R21FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+ynMA0G
CSqGSIb3DQEBCwUAA4IBAQCGHRIBvd5ZowVBRHOirtnsURP0ugFO1uk5sOzFacno
kcgQ+MrxgWjOGRJ3A6H/7zp33zB2SNFkKa8NrZMdY0pBy0dMKkL01OyU5OuGgMP/
aAtnp2hQJkIEVCX/j3RkuvW6rkvtVOsB31/chpxekr/7BTPASCBwXcucYXHH/JsO
oN93VIxaIWByyxlTFdxaKRtE2IxDvJ+3z441ODbGuJCG1caOVmTErAdyL91d5+Gg
8Sn/1U6d7Lg8nsItoL3cCk6f5AZ0LUjvFgMp28rLz7nQJMKdqijyz4Njq344iFz+
2tmdISYVffq11AqeLg5YRUn0K1BUIGdx5yQ9cOT14H4t
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:35 2025 by rpki-client