Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mBkC0yCLCHoevfpgMVpPVwzTN1Y.roa
File: mBkC0yCLCHoevfpgMVpPVwzTN1Y.roa (raw, json)
Hash identifier: PM2R2PRZEvkesY0QdKhKVuDGVymyFYvuNRbOWnTckk4=
Subject key identifier: 98:19:02:D3:20:8B:08:7A:1E:BD:FA:60:31:5A:4F:57:0C:D3:37:56
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425221E96CCE7762EF4DD8AB61B6786A5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mBkC0yCLCHoevfpgMVpPVwzTN1Y.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205043
IP address blocks: 2a0e:97c0:b10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1e:96:cc:e7:76:2e:f4:dd:8a:b6:1b:67:86:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=981902d3208b087a1ebdfa60315a4f570cd33756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:d2:94:5a:5b:af:31:22:45:fd:f2:10:82:
86:08:43:7b:e2:49:32:3d:08:5e:6e:e2:40:fa:e9:
84:1f:c8:77:49:ce:c1:37:33:19:cc:6f:87:b7:6c:
9e:13:4e:ff:84:b9:15:53:2f:59:c5:ba:34:f7:94:
b4:44:43:1e:ed:ff:3d:5d:36:61:1e:f1:44:ec:89:
22:45:b8:49:18:bf:a7:08:73:72:e8:5e:d2:a4:bd:
d2:21:d0:56:dd:b4:0e:d7:b8:90:70:96:09:28:75:
2a:9c:e3:23:8f:c6:9a:81:07:78:57:b8:dc:54:b5:
17:f8:4a:ba:ae:95:ce:dd:1a:29:90:50:8c:6f:db:
09:48:1c:b8:97:f5:94:93:44:06:1e:00:56:f1:cb:
a6:b3:ca:92:8e:5a:a4:31:0d:ea:68:8b:b3:06:b2:
e0:c6:57:c2:aa:de:41:c9:d8:38:66:28:8a:47:c3:
0a:df:72:a5:7c:e9:b6:c8:2b:4b:7d:05:31:5b:60:
76:4b:2d:5d:6d:45:6f:bc:bf:12:d4:7c:41:38:ec:
7b:0f:ff:0a:e4:31:b7:dc:85:8a:50:80:68:8a:49:
e7:e2:d9:1c:9d:19:85:3d:c3:f7:d0:b4:30:44:68:
f8:8f:9e:47:7d:ea:ee:41:4f:d0:36:06:83:59:1d:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:02:D3:20:8B:08:7A:1E:BD:FA:60:31:5A:4F:57:0C:D3:37:56
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mBkC0yCLCHoevfpgMVpPVwzTN1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b10::/44
Signature Algorithm: sha256WithRSAEncryption
b7:8f:5e:41:96:97:a9:8b:a2:e5:31:32:b6:4b:e0:bc:a6:db:
11:fc:3f:3b:56:60:bf:6a:9e:d0:03:85:f4:f0:87:57:18:96:
3d:18:ac:34:ee:0f:ff:56:f3:7e:5c:e2:b2:06:18:3d:aa:18:
8c:19:dc:72:2b:9f:97:3b:56:8b:53:27:7d:63:4b:32:6a:73:
0f:0a:c7:54:7b:26:a4:00:0e:c5:da:85:ec:62:63:4a:bd:d3:
46:9d:0c:9c:59:a6:03:5a:23:29:36:9e:7b:45:72:18:a9:de:
0b:f8:19:52:e2:68:65:b5:85:2b:48:62:72:c5:dd:4f:25:08:
b2:3c:4c:88:49:86:b0:6a:a5:16:fe:44:3a:d5:ed:a4:f7:0a:
c1:8b:fe:e4:97:28:38:57:dd:2b:76:a1:ae:2f:2d:cb:20:b0:
5a:77:d8:97:61:a2:54:a7:b8:6f:f5:a0:a3:e5:cc:61:ad:05:
8e:09:f3:81:71:e6:f7:e4:9c:c8:93:e5:5e:fe:36:7d:a7:c3:
29:18:48:c9:20:3d:f8:4a:39:48:a7:01:72:66:d8:1e:ef:bc:
f2:e8:ce:f0:21:e6:86:c2:5b:9b:6a:9f:a4:11:d4:5a:8d:2c:
20:35:a8:d2:6d:c4:27:ff:a3:19:78:fb:19:99:79:8e:c1:10:
9b:16:a4:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIh6WzOd2LvTdirYbZ4alMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODE5MDJkMzIwOGIwODdhMWViZGZhNjAzMTVhNGY1NzBjZDMzNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33fSlFpbrzEiRf3yEIKGCEN74kky
PQhebuJA+umEH8h3Sc7BNzMZzG+Ht2yeE07/hLkVUy9Zxbo095S0REMe7f89XTZh
HvFE7IkiRbhJGL+nCHNy6F7SpL3SIdBW3bQO17iQcJYJKHUqnOMjj8aagQd4V7jc
VLUX+Eq6rpXO3RopkFCMb9sJSBy4l/WUk0QGHgBW8cums8qSjlqkMQ3qaIuzBrLg
xlfCqt5Bydg4ZiiKR8MK33KlfOm2yCtLfQUxW2B2Sy1dbUVvvL8S1HxBOOx7D/8K
5DG33IWKUIBoiknn4tkcnRmFPcP30LQwRGj4j55HferuQU/QNgaDWR13PwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJgZAtMgiwh6Hr36YDFaT1cM0zdWMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbUJrQzB5Q0xDSG9ldmZwZ01WcFBWd3pUTjFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAsQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC3j15Blpepi6LlMTK2S+C8ptsR/D87VmC/ap7Q
A4X08IdXGJY9GKw07g//VvN+XOKyBhg9qhiMGdxyK5+XO1aLUyd9Y0syanMPCsdU
eyakAA7F2oXsYmNKvdNGnQycWaYDWiMpNp57RXIYqd4L+BlS4mhltYUrSGJyxd1P
JQiyPEyISYawaqUW/kQ61e2k9wrBi/7klyg4V90rdqGuLy3LILBad9iXYaJUp7hv
9aCj5cxhrQWOCfOBceb35JzIk+Ve/jZ9p8MpGEjJID34SjlIpwFyZtge77zy6M7w
IeaGwlubap+kEdRajSwgNajSbcQn/6MZePsZmXmOwRCbFqQM
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:21:28 2025 by rpki-client