Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/mrJC9W9EE59GYgtXbqXAdDLeR5M.roa
File: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (raw, json)
Hash identifier: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=
Subject key identifier: 9A:B2:42:F5:6F:44:13:9F:46:62:0B:57:6E:A5:C0:74:32:DE:47:93
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0196FD39A262003ADB71F93AC7B265E8A805
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/mrJC9W9EE59GYgtXbqXAdDLeR5M.roa
Signing time: Fri 23 May 2025 12:58:54 +0000
ROA not before: Fri 23 May 2025 12:58:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 37.34.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:39:a2:62:00:3a:db:71:f9:3a:c7:b2:65:e8:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 23 12:58:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ab242f56f44139f46620b576ea5c07432de4793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:d6:de:b1:42:63:2e:ad:e4:e7:4c:74:d8:
59:2f:78:40:77:d2:db:08:fa:bc:4a:84:9b:95:73:
c3:aa:99:81:e8:b8:75:26:02:3b:60:bc:da:b7:0b:
db:84:77:d3:92:4a:e0:7d:cc:39:df:79:97:97:c5:
63:49:76:af:4a:17:62:2b:f4:d4:4a:0d:fa:bb:d5:
0f:40:63:d0:b2:bf:99:17:e0:ac:8a:ed:53:d0:96:
77:f1:c5:87:db:f6:dc:d1:bb:58:05:c6:2e:a5:ab:
57:17:46:cd:1d:e4:8d:55:73:a1:3c:c8:39:f5:15:
e0:2a:3f:73:13:58:8e:53:e2:ff:9e:e0:01:b8:39:
a3:8a:e8:51:74:0c:8e:e5:a7:b6:1b:47:0f:f9:f2:
71:2f:7c:7d:7e:cd:19:c4:35:82:39:7a:da:79:fa:
32:6a:8a:a1:bb:d0:ab:8c:58:8e:74:22:69:2f:4b:
42:7f:f8:72:3e:26:14:3e:56:94:f9:68:d7:d3:27:
1e:f7:b3:59:41:8e:dc:62:0c:2f:a4:52:02:f2:e0:
c7:6c:54:ae:7d:b4:cf:a6:7a:1a:b1:1e:5d:a7:0a:
58:d8:ef:a2:ca:9b:fe:24:ce:3d:e1:89:cf:f1:c0:
b8:cf:bb:57:7c:3f:9b:89:9c:8a:1c:40:4e:fa:39:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:42:F5:6F:44:13:9F:46:62:0B:57:6E:A5:C0:74:32:DE:47:93
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/mrJC9W9EE59GYgtXbqXAdDLeR5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.88.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:c6:de:1a:e1:a6:9c:ca:ee:cd:cf:f9:f2:28:f5:20:e4:4e:
66:6c:38:07:01:76:61:7e:f0:ab:3b:5c:ad:7a:eb:fc:73:3c:
bc:91:b0:73:a7:34:21:b5:02:33:43:16:58:f7:6e:3c:23:30:
b7:bd:de:85:e9:72:08:0f:8e:ca:a3:8c:96:de:66:02:8d:97:
93:56:f2:22:6d:07:b3:16:d1:00:29:e2:7e:23:cc:e2:a9:f4:
29:41:45:f5:27:7e:e0:e0:46:63:7e:e7:b2:1e:ef:74:fc:bb:
aa:93:be:e8:28:6b:d0:aa:f4:7d:f8:5a:c8:c9:9a:f5:ac:f9:
4e:7b:84:84:42:66:b4:fd:ef:51:bc:64:40:6c:9f:c2:5b:98:
ae:43:c1:83:0c:fc:fa:7c:37:aa:a5:78:81:70:ba:d7:9f:c1:
db:56:8e:d6:c2:09:7c:82:72:fb:8a:f3:46:92:d4:f2:d7:c2:
fe:5b:20:ee:36:df:be:11:44:e9:08:29:56:a9:c1:f9:a8:44:
a9:76:a4:40:72:2a:50:3d:40:39:1b:80:aa:2b:f5:57:13:87:
57:c7:52:c2:10:f8:9e:3d:5e:dc:04:5a:11:0e:3d:0f:47:2e:
44:9b:aa:01:3a:a9:8f:6b:85:6e:d2:c9:f0:cd:23:3e:b6:a3:
82:0b:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:51 2025 by rpki-client