Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa
File: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (raw, json)
Hash identifier: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=
Subject key identifier: 9A:F0:76:C5:8D:34:AD:0E:CE:CF:51:9D:71:3C:92:20:83:3A:B0:FD
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01941FFA3CC5E64B92F48250AB31F7403B00
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213045
IP address blocks: 2a13:1c47:ffd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3c:c5:e6:4b:92:f4:82:50:ab:31:f7:40:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9af076c58d34ad0ececf519d713c9220833ab0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:15:69:99:8c:5c:8b:da:54:77:93:56:15:
74:1c:cb:f4:dc:0b:b6:aa:55:c2:5c:f3:5f:63:82:
f1:a2:d8:e7:46:21:ac:1d:72:29:0c:7f:97:8d:c1:
ab:10:2d:3b:7b:80:d0:dc:c3:0f:5b:78:c9:d3:b8:
77:33:06:d9:dc:0d:5a:13:b2:82:fb:0d:94:41:aa:
91:93:ee:93:1b:96:b3:93:8b:28:4d:26:b4:2b:78:
41:74:55:07:23:42:73:47:cc:ce:47:c5:67:3a:df:
a6:ca:b2:4b:3f:42:bf:c0:b9:7e:0b:d7:a8:e7:46:
2d:95:df:0b:3e:a7:20:b8:61:33:61:ab:2d:4e:e1:
d1:c6:63:26:2d:f6:73:49:6c:32:fc:4e:bb:1c:3f:
76:a2:7e:41:61:3a:fd:f0:c3:94:5f:c8:59:fa:15:
59:3a:e6:6b:b9:13:bb:f3:7b:29:79:29:8b:91:e0:
92:e5:e8:ac:98:0e:e0:72:cd:55:6d:8b:d9:8a:13:
fc:49:89:db:3f:76:0d:bd:5e:e2:29:20:31:c0:1c:
c6:96:5a:4c:65:5d:c0:6c:ba:a6:30:da:cf:4c:55:
c2:24:48:83:ba:0c:a1:6e:65:d7:21:ce:58:39:05:
44:75:f9:61:f0:8d:ab:3d:dd:da:6b:bd:08:c3:da:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F0:76:C5:8D:34:AD:0E:CE:CF:51:9D:71:3C:92:20:83:3A:B0:FD
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:ffd0::/44
Signature Algorithm: sha256WithRSAEncryption
7f:35:23:51:15:a9:58:03:27:0d:f9:70:ed:82:1b:2c:78:10:
84:90:5c:25:ef:59:f5:f9:50:e8:05:b1:ad:60:d7:07:4d:42:
cb:31:1d:d6:64:ec:c4:52:94:c9:70:00:06:ba:cd:b7:83:8f:
f0:ca:b8:82:28:d5:87:85:c6:92:0b:56:1b:bf:c3:34:13:1a:
8f:a2:e9:51:16:1b:22:a8:df:3f:1b:9f:c0:24:9c:38:5b:50:
d8:16:4e:6f:c6:6b:85:f3:a8:99:8c:c3:2f:73:b8:63:17:e9:
93:2c:c5:86:24:cf:cf:4f:8a:27:45:0a:ac:f6:c6:58:ae:26:
4f:32:f5:4a:70:96:33:10:ff:65:a6:b0:aa:dc:13:fa:c5:21:
2b:6d:e8:4a:d3:a7:d0:b8:ca:88:6f:5e:60:18:91:c6:b1:9f:
25:34:d6:49:1a:6e:6f:03:78:27:26:2e:c0:a5:bf:1c:d0:03:
9b:3f:c6:26:f6:5d:8a:32:d4:cc:28:52:39:8a:5a:3f:a9:61:
f8:a7:f7:85:d7:51:6a:b2:45:4c:d4:1e:34:34:f4:48:18:ea:
d7:13:64:5c:8e:0c:7b:7d:bd:07:f0:31:c9:3b:63:41:49:57:
c6:f2:08:54:20:da:dc:b0:ae:e5:40:63:99:43:9d:f7:cf:45:
cc:1b:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:58:02 2025 by rpki-client