Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mvNjDhnAvjFF9Y-87fkPkywsBRg.roa
File: mvNjDhnAvjFF9Y-87fkPkywsBRg.roa (raw, json)
Hash identifier: zMf07nBSVovhB14kkNvllFfaoI77m/yIXu6GXF0m3VA=
Subject key identifier: 9A:F3:63:0E:19:C0:BE:31:45:F5:8F:BC:ED:F9:0F:93:2C:2C:05:18
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252276C9FAB531DB4CAC691360A6F803
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mvNjDhnAvjFF9Y-87fkPkywsBRg.roa
Signing time: Thu 02 Jan 2025 03:50:03 +0000
ROA not before: Thu 02 Jan 2025 03:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213971
IP address blocks: 2a0e:97c0:230::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:76:c9:fa:b5:31:db:4c:ac:69:13:60:a6:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9af3630e19c0be3145f58fbcedf90f932c2c0518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:c1:19:0d:ac:4e:c3:4b:06:1f:5e:e7:47:
bf:a6:86:a1:f4:bd:87:f6:79:2b:30:61:98:da:ab:
97:15:63:27:11:e4:fe:9a:4a:bb:1b:19:10:ec:72:
a3:2b:f9:db:46:6d:4c:f9:15:10:b5:96:2d:2c:e5:
22:e5:a5:da:90:cf:d6:05:58:5d:d0:0e:a5:40:46:
94:92:32:29:30:4e:46:2e:46:a1:90:8c:35:ae:25:
e6:86:dc:c5:d5:50:f6:ad:d4:70:13:b1:7c:f7:35:
58:ab:63:2b:1d:19:ed:54:84:6a:f8:90:48:9f:6b:
7b:99:c1:09:25:7d:6a:bf:01:8f:37:2f:f7:38:86:
b5:39:38:66:67:55:7e:00:42:e7:ee:fd:13:c2:d0:
0e:0d:7a:7c:00:d3:2e:3e:f3:17:e8:c4:a3:a4:a2:
f3:80:52:44:50:da:cf:e8:89:82:7a:80:72:6e:81:
87:35:9a:8f:91:82:c8:13:64:26:ab:8d:b7:cc:8d:
b1:1d:65:60:dd:b5:5c:bf:7d:7f:46:eb:7b:a5:f5:
89:ee:2f:11:e2:b9:00:b2:3a:b5:a4:b1:ef:61:4d:
b6:dc:3d:66:a3:ca:dd:0c:01:38:c5:d3:6f:c6:83:
4b:af:8c:77:e7:c5:e0:4e:a2:52:86:f4:f7:d7:1f:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F3:63:0E:19:C0:BE:31:45:F5:8F:BC:ED:F9:0F:93:2C:2C:05:18
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mvNjDhnAvjFF9Y-87fkPkywsBRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:230::/44
Signature Algorithm: sha256WithRSAEncryption
74:e6:92:f4:1f:e6:90:a8:af:39:03:d1:cc:c0:ae:28:3e:32:
c2:28:7e:9c:4e:50:5e:98:04:8c:84:5a:86:13:cd:60:fe:73:
bb:9f:44:b2:ad:73:c8:22:41:31:b0:87:d3:7f:fa:05:c4:4e:
92:5c:6a:62:96:cb:32:2c:87:3c:4b:e0:1c:1d:7e:37:2e:23:
1b:40:5e:56:1d:ac:cb:8f:2c:e0:bf:fa:fd:74:26:92:c8:c3:
8e:bb:59:0d:c6:2e:cc:29:f8:e2:3e:7c:83:8a:72:33:6a:d4:
ae:15:bb:27:e1:f7:1e:30:73:2d:24:15:ba:59:5f:53:37:68:
bc:81:3a:f5:dd:3d:3f:12:0d:9e:c9:f8:ce:6d:61:72:f7:e5:
f0:72:14:11:74:a9:37:95:8d:d6:7c:7a:8c:96:f2:87:f6:8e:
c5:1c:85:a5:b2:5a:3c:30:d2:98:8f:3f:39:a9:20:78:cb:70:
70:35:64:37:5d:4c:07:58:52:55:72:5b:f0:39:59:1b:c5:84:
dc:68:70:d5:58:db:6d:07:46:71:2d:42:89:d1:dc:b0:a2:1e:
ba:8f:60:a7:3a:71:b5:46:21:c1:18:4e:6a:dc:59:97:63:a4:
c0:3a:3b:92:7b:9e:7c:2d:d1:4d:33:56:81:85:fb:05:8c:e0:
9a:e1:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:52 2025 by rpki-client