Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/mJz6Vh5vX_Z8nl77wAqDRKiONe0.roa
File: mJz6Vh5vX_Z8nl77wAqDRKiONe0.roa (raw, json)
Hash identifier: kZsXj53UOHVZH65D+DagMxEuLkLg5qPiHvCvjzQpYs0=
Subject key identifier: 98:9C:FA:56:1E:6F:5F:F6:7C:9E:5E:FB:C0:0A:83:44:A8:8E:35:ED
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B4B9C5C6110FD1DE7D4E04C54AE50
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/mJz6Vh5vX_Z8nl77wAqDRKiONe0.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215324
IP address blocks: 2a12:f8c3:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4b:9c:5c:61:10:fd:1d:e7:d4:e0:4c:54:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=989cfa561e6f5ff67c9e5efbc00a8344a88e35ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:6d:3a:61:c1:ea:72:58:f3:ca:61:ef:66:
07:cf:5a:01:3a:19:78:39:82:93:88:2c:98:f9:45:
1a:32:7a:a8:99:53:9e:45:cf:9b:1a:4a:97:eb:71:
d2:e7:d1:bb:b1:1a:a9:67:eb:09:bc:19:1a:17:5d:
17:e9:c6:80:6a:b8:eb:0d:ae:e2:95:22:de:88:7c:
4e:b9:e8:cb:6f:d6:fb:dc:60:2f:c0:ab:4f:ad:76:
66:0e:31:4b:18:40:ab:13:f3:27:18:12:dc:d3:69:
d0:73:06:90:31:0c:eb:98:f5:78:a6:1d:a5:13:54:
d7:b3:cc:5c:0e:20:c6:34:cd:ef:95:c0:d3:68:0a:
1e:42:8c:d6:c6:5f:83:47:4c:0b:43:f1:4d:91:25:
5f:9f:c7:9d:56:d0:1a:71:2b:72:a4:b6:a2:50:92:
67:08:f0:7f:75:32:f3:3d:59:6a:4e:47:66:af:b1:
1f:27:b3:ab:43:32:f0:b3:41:12:58:a0:00:3e:3f:
a2:d1:48:f8:fe:88:ff:85:3b:8a:75:b6:f4:dc:11:
35:b2:61:6e:e3:da:3e:c3:be:5b:d4:20:2d:46:b1:
e5:a7:e0:ae:ed:c2:56:cd:05:ce:80:50:31:b8:b4:
aa:f5:e4:01:0d:91:1e:5b:b9:41:aa:33:06:b7:09:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9C:FA:56:1E:6F:5F:F6:7C:9E:5E:FB:C0:0A:83:44:A8:8E:35:ED
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/mJz6Vh5vX_Z8nl77wAqDRKiONe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c3:5000::/36
Signature Algorithm: sha256WithRSAEncryption
64:68:13:16:72:66:fb:5e:d9:53:11:a1:57:d7:aa:5e:25:0d:
8e:98:cd:81:cd:8d:cb:17:ec:0f:39:5a:e0:ec:7b:e0:32:21:
1f:2a:4b:00:16:2f:ce:de:29:fd:b6:95:17:e1:be:11:e4:f6:
e1:7f:06:83:93:60:61:00:10:c7:e9:c3:52:36:6e:7f:53:17:
22:44:1e:3a:62:f2:cb:45:0f:4e:ad:a4:5b:07:cc:e1:5e:5e:
d3:48:93:a6:e8:5d:0b:d6:6a:e8:67:c1:39:99:e8:3b:83:5a:
5a:78:02:2d:5f:88:90:2d:8f:2d:3a:7c:12:d3:ef:22:60:7c:
d6:93:a4:ba:13:13:ef:41:a6:0f:20:29:c1:5f:47:87:79:68:
11:8e:c1:13:aa:32:8a:40:d8:e9:b1:6d:c5:17:1d:cd:bd:c9:
1e:74:0e:63:53:b1:11:c8:c7:3b:b7:9e:88:c8:84:a2:c0:6d:
d7:43:69:b0:ed:72:56:a1:6b:58:3e:19:c5:01:d4:39:07:3a:
a8:f5:d8:35:5d:60:89:6d:62:9c:49:d1:0c:4e:d5:e5:e6:da:
bf:ce:b2:60:06:05:2d:2a:ad:ff:d5:69:9c:96:ad:65:eb:0e:
df:95:7d:b9:bd:e1:37:33:4e:e7:94:e6:d9:4a:f4:40:1b:20:
b8:44:03:fe
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQma0ucXGEQ/R3n1OBMVK5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjUwMTAyMDk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODljZmE1NjFlNmY1ZmY2N2M5ZTVlZmJjMDBhODM0NGE4OGUzNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEhtOmHB6nJY88ph72YHz1oBOhl4
OYKTiCyY+UUaMnqomVOeRc+bGkqX63HS59G7sRqpZ+sJvBkaF10X6caAarjrDa7i
lSLeiHxOuejLb9b73GAvwKtPrXZmDjFLGECrE/MnGBLc02nQcwaQMQzrmPV4ph2l
E1TXs8xcDiDGNM3vlcDTaAoeQozWxl+DR0wLQ/FNkSVfn8edVtAacStypLaiUJJn
CPB/dTLzPVlqTkdmr7EfJ7OrQzLws0ESWKAAPj+i0Uj4/oj/hTuKdbb03BE1smFu
49o+w75b1CAtRrHlp+Cu7cJWzQXOgFAxuLSq9eQBDZEeW7lBqjMGtwm/bQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJic+lYeb1/2fJ5e+8AKg0SojjXtMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvbUp6NlZoNXZYX1o4bmw3N3dBcURSS2lPTmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhL4w1Aw
DQYJKoZIhvcNAQELBQADggEBAGRoExZyZvte2VMRoVfXql4lDY6YzYHNjcsX7A85
WuDse+AyIR8qSwAWL87eKf22lRfhvhHk9uF/BoOTYGEAEMfpw1I2bn9TFyJEHjpi
8stFD06tpFsHzOFeXtNIk6boXQvWauhnwTmZ6DuDWlp4Ai1fiJAtjy06fBLT7yJg
fNaTpLoTE+9Bpg8gKcFfR4d5aBGOwROqMopA2OmxbcUXHc29yR50DmNTsRHIxzu3
nojIhKLAbddDabDtclaha1g+GcUB1DkHOqj12DVdYIltYpxJ0QxO1eXm2r/OsmAG
BS0qrf/VaZyWrWXrDt+Vfbm94TczTueU5tlK9EAbILhEA/4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:19 2025 by rpki-client