Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/MWfGbekGdiIlL_QnOkQ9r-npSTo.roa
File: MWfGbekGdiIlL_QnOkQ9r-npSTo.roa (raw, json)
Hash identifier: NlhTGNa3FSPX/6OYQDRDJHu85zHjDwDvfSYqtIACw6M=
Subject key identifier: 31:67:C6:6D:E9:06:76:22:25:2F:F4:27:3A:44:3D:AF:E9:E9:49:3A
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 0194FAFA699C669C1F9DE7766A2B2AA126D7
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/MWfGbekGdiIlL_QnOkQ9r-npSTo.roa
Signing time: Wed 12 Feb 2025 16:25:02 +0000
ROA not before: Wed 12 Feb 2025 16:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216289
IP address blocks: 2a14:f300:a0fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:fa:69:9c:66:9c:1f:9d:e7:76:6a:2b:2a:a1:26:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Feb 12 16:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3167c66de9067622252ff4273a443dafe9e9493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:23:3a:d8:a0:94:a7:18:22:b1:da:93:a0:
7c:50:9e:ad:08:90:0b:84:74:a4:4a:85:f1:89:51:
76:cc:4d:0b:48:5c:fa:c7:64:f5:e3:d5:9c:c0:09:
76:26:31:0e:8e:12:29:7b:89:1e:47:ae:a6:64:42:
af:0f:8c:3f:f5:be:a1:6d:20:8d:1b:e4:79:86:44:
2d:a7:a2:3a:1f:d3:47:5e:70:eb:fd:0d:b6:e1:ea:
48:15:d1:8e:89:4b:3c:83:ef:70:eb:95:8d:a3:8b:
d0:4b:c0:32:5f:e4:d0:62:ec:4c:71:ce:03:f2:a5:
88:b9:d3:0b:44:97:db:14:2e:00:fe:9c:3a:05:7e:
4a:a1:fd:4d:54:e9:cb:77:50:08:e3:8b:3b:52:5c:
10:bd:ea:32:d0:05:b8:d9:a1:3d:f3:1f:b3:be:bd:
b8:57:32:11:79:95:20:5b:b5:23:61:43:16:c5:ee:
eb:2e:18:3e:b1:47:61:5e:53:0b:26:9d:fc:69:ce:
ba:11:42:96:cd:b1:49:40:4e:82:f6:b2:20:f7:23:
73:1f:a3:bd:fc:56:d1:af:44:ee:1e:26:76:25:3d:
cc:d0:59:67:1b:a0:2b:89:ed:f8:0b:1d:20:1d:80:
93:1a:e0:1b:03:7a:d4:e4:c0:4d:f9:04:00:31:6e:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:C6:6D:E9:06:76:22:25:2F:F4:27:3A:44:3D:AF:E9:E9:49:3A
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/MWfGbekGdiIlL_QnOkQ9r-npSTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f300:a0fe::/48
Signature Algorithm: sha256WithRSAEncryption
39:46:76:ca:3b:66:38:55:c1:12:4f:ef:c7:3d:70:e7:67:3a:
1d:a0:0a:4e:45:35:5f:d4:de:3a:aa:9d:10:cd:2b:62:2c:2d:
0e:b1:e1:da:95:35:64:f6:c2:ab:98:45:cd:3b:3d:1b:c8:89:
d2:1a:3c:65:a1:a4:a7:5d:f7:1d:cc:ac:20:9f:4c:05:6a:ee:
35:69:7b:31:d2:cc:e3:2f:c2:79:5c:f1:dc:e3:ea:f7:52:3a:
d8:ce:4a:4e:dc:fd:0c:4d:08:4f:65:f5:17:eb:b8:b1:d4:7a:
d7:02:63:40:3f:8f:64:92:a8:5d:cf:c1:58:56:c9:45:a6:23:
a9:71:c4:50:44:2b:7f:69:2f:79:7e:73:8f:6b:cd:c1:73:9a:
10:2d:3e:22:23:e9:84:21:8b:c0:17:f3:3c:68:9b:d4:e7:a6:
f7:1b:59:68:44:4b:89:7e:a8:8a:c1:b3:d0:df:49:e6:44:4f:
8b:ff:93:7b:f3:c6:8f:44:c2:5c:c3:cd:2a:3a:a1:cf:f9:30:
01:ed:f1:c6:07:9f:6b:e0:fb:2f:64:e0:7f:b2:34:d8:f3:c1:
24:6f:4c:5b:3b:d6:7b:9e:1b:0b:73:61:2f:62:ca:a9:07:11:
68:da:48:6f:f5:97:4a:8c:c1:e7:42:5c:f2:c2:55:46:cb:32:
46:1b:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:18:12 2025 by rpki-client