Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mvjla0bo-b4smMyT4MbECv-Xg3g.roa
File: mvjla0bo-b4smMyT4MbECv-Xg3g.roa (raw, json)
Hash identifier: Vqa7w/SLiL/4k4HQ/RKtBsHmvexhX5wGtbX9qiUFZ2c=
Subject key identifier: 9A:F8:E5:6B:46:E8:F9:BE:2C:98:CC:93:E0:C6:C4:0A:FF:97:83:78
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01973FAC7B7C93EAA8DFE9F9745441F7C3E7
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mvjla0bo-b4smMyT4MbECv-Xg3g.roa
Signing time: Thu 05 Jun 2025 10:39:17 +0000
ROA not before: Thu 05 Jun 2025 10:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34119
IP address blocks: 158.120.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:ac:7b:7c:93:ea:a8:df:e9:f9:74:54:41:f7:c3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jun 5 10:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9af8e56b46e8f9be2c98cc93e0c6c40aff978378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:c6:63:e8:d5:41:5b:59:5a:23:fe:a8:c2:
98:d4:4d:56:38:79:f5:56:ee:aa:f8:8e:8c:03:37:
94:8f:70:30:45:60:f0:71:2a:dd:35:97:d0:f4:8b:
2d:cf:50:64:82:a1:ea:6a:68:b3:7e:c5:26:2b:24:
aa:38:92:b5:58:46:64:36:ba:7a:48:5c:82:b5:8d:
e4:d7:3e:da:19:e4:8c:a8:ec:2d:c1:e2:6e:df:a4:
3d:2f:59:af:23:00:2e:d6:b6:ae:32:4b:b1:2e:4f:
6f:d5:5f:e9:e7:53:e6:28:93:0e:54:98:a7:74:d1:
52:39:e4:8f:2f:df:83:80:13:1b:73:1d:b4:9d:49:
58:a2:de:3a:17:44:f3:ae:fe:d3:bf:e7:ed:c2:6d:
a5:b7:26:a7:d7:d1:ef:19:3c:9f:18:96:ca:4b:f2:
e5:58:70:99:a7:ca:aa:f7:26:a5:28:1a:91:b6:d8:
4a:e2:0e:b0:08:9c:79:fc:91:5f:2a:9c:76:3a:51:
b2:24:2e:1d:0a:c8:95:22:6f:cf:7d:0a:b9:b4:02:
a4:e9:7b:ce:06:3d:d4:04:80:68:60:ee:b2:c0:ed:
00:fb:c4:a9:85:74:e5:6c:e1:68:a8:e1:b6:5b:13:
0b:bb:ed:34:8f:21:91:c1:46:d9:19:4b:29:ef:da:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F8:E5:6B:46:E8:F9:BE:2C:98:CC:93:E0:C6:C4:0A:FF:97:83:78
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mvjla0bo-b4smMyT4MbECv-Xg3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.120.72.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:d6:4f:06:40:b9:5f:0f:a1:1f:e9:3a:72:d4:b8:83:d0:ae:
f9:2b:16:1e:e9:62:e0:f5:43:d6:18:ac:42:35:12:1a:ac:4a:
02:65:e4:50:00:28:45:85:9f:2f:c7:48:50:b3:16:12:33:73:
1f:55:56:d8:f8:53:73:f7:5f:aa:04:c9:cd:48:9f:77:60:8f:
f8:5a:eb:98:22:7a:02:ba:ba:56:f0:ae:8c:04:32:29:df:5b:
20:85:14:b4:5c:10:c5:96:93:71:6b:c8:94:3e:58:69:6c:6f:
4c:25:fc:d6:bf:a8:d4:73:34:5e:84:c6:c5:a9:5f:c1:f2:78:
6b:19:d8:ba:b6:37:57:f0:83:f4:99:ef:fe:43:be:45:58:5c:
22:9b:0d:b4:63:8f:c0:57:3a:c9:e5:5f:01:e9:fd:b3:fe:8c:
04:2d:58:77:e2:4c:d3:7e:d7:ea:fd:2c:8c:0d:2b:6b:3c:44:
eb:07:59:5d:42:c5:b5:13:c2:54:30:d1:1e:d8:36:f5:a9:16:
80:53:a4:f6:b3:ad:d3:e7:12:e7:e1:79:ec:d7:68:91:3a:41:
64:02:ef:08:b0:b6:89:1e:18:4f:c4:3d:af:f6:a6:2d:de:7b:
dd:49:f8:05:ff:17:63:08:89:14:08:f3:8f:cd:ab:ee:f4:5e:
86:9b:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:04:09 2025 by rpki-client