Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/_MxMNpyNBthjBmfib_9uhPuqPf0.roa
File: _MxMNpyNBthjBmfib_9uhPuqPf0.roa (raw, json)
Hash identifier: EolAt4dLQVvdwjyApcTjs0rowC2XcqD4wINaXLiU8UM=
Subject key identifier: FC:CC:4C:36:9C:8D:06:D8:63:06:67:E2:6F:FF:6E:84:FB:AA:3D:FD
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 01941F8C6C43CF62E5ACC876A987806197E0
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/_MxMNpyNBthjBmfib_9uhPuqPf0.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21232
IP address blocks: 194.147.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6c:43:cf:62:e5:ac:c8:76:a9:87:80:61:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fccc4c369c8d06d8630667e26fff6e84fbaa3dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:20:ba:d4:0a:22:99:b2:fd:87:17:60:d1:
fe:d4:58:7d:f6:cb:b5:49:45:5b:a8:d6:85:d6:9e:
ea:7e:82:a2:f4:e1:68:24:5c:a7:84:ee:78:57:48:
54:0c:91:be:ed:4c:09:2a:bd:cc:47:f4:0e:65:fd:
ac:4b:eb:c8:2c:f7:4a:f0:0c:d9:2b:06:b3:f1:c9:
26:2f:69:7d:a0:e4:ea:10:6f:e3:26:89:d0:d0:c6:
ee:d8:c3:b3:e0:67:fb:55:2f:f5:a9:9f:20:b3:8c:
55:c4:ad:82:65:b9:74:c5:ea:f0:b8:27:d4:37:71:
c7:d7:05:3e:82:aa:a0:29:71:2f:47:de:c5:01:05:
f5:97:15:71:11:22:e4:18:d6:45:7a:79:a6:68:d6:
09:57:c1:45:71:2b:be:53:e8:21:f1:a7:b1:8d:b0:
1d:96:46:85:d2:10:35:be:48:8f:e4:b5:fb:50:9d:
da:b8:f6:fd:c4:ab:ad:82:b9:79:dd:4f:96:e0:c6:
23:76:7d:de:79:19:8d:36:1e:58:9d:60:28:bd:80:
97:43:99:4e:38:20:b7:47:87:be:ce:8e:1a:e5:c3:
1b:10:fa:0d:11:e6:4e:00:d0:31:b5:08:58:bf:03:
6f:f7:74:98:a4:e6:19:3e:3c:e9:3a:e7:c8:34:95:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CC:4C:36:9C:8D:06:D8:63:06:67:E2:6F:FF:6E:84:FB:AA:3D:FD
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/_MxMNpyNBthjBmfib_9uhPuqPf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:dd:45:a7:9c:6e:4d:b7:c8:e4:3f:1b:8b:44:31:2f:15:af:
fc:4a:53:6a:bb:94:79:27:0c:10:4b:73:25:f6:ba:0c:c4:32:
f8:7f:5d:8e:af:65:5b:6f:a6:36:cf:33:f2:8b:ee:ab:b5:af:
33:70:66:af:36:35:12:37:4f:35:6f:f1:15:a2:f3:bc:f8:3b:
05:af:1b:6d:c3:ba:d1:dd:08:91:52:a8:f5:ec:b9:34:f8:31:
8f:14:1a:3e:76:f4:e0:f1:70:79:d4:f2:7b:f6:a1:c7:23:aa:
ae:0b:e0:34:ec:52:d9:e1:3d:8b:4f:b9:ce:6f:5e:1f:4d:cf:
92:20:ed:a2:9e:34:60:79:f3:7f:a2:c3:bd:da:9e:68:10:9a:
47:b2:b9:a4:37:88:5e:cb:b2:89:3e:57:b9:07:31:fd:d5:3f:
ce:c7:bc:f9:50:18:5d:26:9c:88:c7:a6:e6:3e:5b:57:09:78:
76:64:fd:77:55:53:c3:ce:ab:15:dd:87:02:47:7b:62:9a:d1:
c7:bb:ec:fb:d4:e2:66:35:f2:fb:72:ba:d8:38:79:95:3a:f8:
72:25:ae:35:88:9e:7f:5d:63:a0:df:2e:4d:47:25:08:27:fa:
2b:48:64:c2:4f:69:aa:0c:d5:1f:cb:41:1f:84:be:29:c8:9a:
29:6b:d7:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjGxDz2LlrMh2qYeAYZfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWNjZmQyMWFiZDdmZTNmYTBkNmJiMzFkZjQ4MjBiZmI1
YTQxODgwHhcNMjUwMTAxMDE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2NjNGMzNjljOGQwNmQ4NjMwNjY3ZTI2ZmZmNmU4NGZiYWEzZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn8gutQKIpmy/YcXYNH+1Fh99su1
SUVbqNaF1p7qfoKi9OFoJFynhO54V0hUDJG+7UwJKr3MR/QOZf2sS+vILPdK8AzZ
Kwaz8ckmL2l9oOTqEG/jJonQ0Mbu2MOz4Gf7VS/1qZ8gs4xVxK2CZbl0xerwuCfU
N3HH1wU+gqqgKXEvR97FAQX1lxVxESLkGNZFenmmaNYJV8FFcSu+U+gh8aexjbAd
lkaF0hA1vkiP5LX7UJ3auPb9xKutgrl53U+W4MYjdn3eeRmNNh5YnWAovYCXQ5lO
OCC3R4e+zo4a5cMbEPoNEeZOANAxtQhYvwNv93SYpOYZPjzpOufINJU8uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzMTDacjQbYYwZn4m//boT7qj39MB8GA1UdIwQY
MBaAFOmsz9IavX/j+g1rsx30ggv7WkGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMt
NzViNjg0Zjg5MGI0LzEvX014TU5weU5CdGhqQm1maWJfOXVoUHVxUGYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMtNzViNjg0Zjg5MGI0
LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNxMA0G
CSqGSIb3DQEBCwUAA4IBAQCp3UWnnG5Nt8jkPxuLRDEvFa/8SlNqu5R5JwwQS3Ml
9roMxDL4f12Or2Vbb6Y2zzPyi+6rta8zcGavNjUSN081b/EVovO8+DsFrxttw7rR
3QiRUqj17Lk0+DGPFBo+dvTg8XB51PJ79qHHI6quC+A07FLZ4T2LT7nOb14fTc+S
IO2injRgefN/osO92p5oEJpHsrmkN4hey7KJPle5BzH91T/Ox7z5UBhdJpyIx6bm
PltXCXh2ZP13VVPDzqsV3YcCR3timtHHu+z71OJmNfL7crrYOHmVOvhyJa41iJ5/
XWOg3y5NRyUIJ/orSGTCT2mqDNUfy0EfhL4pyJopa9fn
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:11:45 2025 by rpki-client