Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MRXNXI85dWMVubwTEI5OsYMnvV4.roa
File: MRXNXI85dWMVubwTEI5OsYMnvV4.roa (raw, json)
Hash identifier: I4tVIYSz9UUp+FQAmn9G4Rosb3pc1OEa7y+j2kjzuGQ=
Subject key identifier: 31:15:CD:5C:8F:39:75:63:15:B9:BC:13:10:8E:4E:B1:83:27:BD:5E
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0194274639E70C63918FAC175369FF308EE3
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MRXNXI85dWMVubwTEI5OsYMnvV4.roa
Signing time: Thu 02 Jan 2025 13:48:21 +0000
ROA not before: Thu 02 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401363
IP address blocks: 2a0c:e643::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:39:e7:0c:63:91:8f:ac:17:53:69:ff:30:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3115cd5c8f39756315b9bc13108e4eb18327bd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:54:2b:dd:24:8d:14:db:a2:7a:4e:f0:40:
97:81:86:ee:99:fc:4d:35:39:a9:e3:0d:b0:6f:bb:
a0:1e:63:2c:14:05:47:f2:e1:9d:f6:06:66:86:c5:
04:e4:ba:64:06:f2:59:cd:c8:39:7a:5d:83:db:36:
aa:01:b5:0a:9b:0f:86:5a:09:d6:65:ff:07:03:96:
37:fd:7d:bc:ff:3e:60:2f:b5:8b:a8:9f:95:f2:69:
c3:e7:3a:33:d3:d9:1c:5e:41:bc:ab:de:1a:b7:82:
b1:ce:45:47:a6:cd:c2:07:26:6d:6d:c8:86:a4:76:
5a:b5:d9:08:53:73:81:db:f5:2f:08:87:12:09:d6:
f2:60:5a:75:f3:20:fa:9a:d9:ef:3e:7e:57:aa:26:
7e:e7:8c:e9:da:0a:7a:83:dc:01:c3:91:99:7f:9c:
bb:9b:6b:46:34:fe:2b:28:75:d3:4d:07:eb:77:62:
26:d7:2c:16:04:b8:41:c1:96:25:8c:4c:77:2c:11:
2c:69:0d:06:08:68:7e:bc:77:5b:12:13:f4:cb:36:
c7:44:a8:3e:ff:26:f5:32:aa:40:30:07:d8:4c:0f:
00:d9:8d:39:29:02:7d:ed:d8:d2:b8:aa:8b:66:cd:
33:cb:30:71:c7:c0:88:a4:09:7a:58:51:43:30:46:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:15:CD:5C:8F:39:75:63:15:B9:BC:13:10:8E:4E:B1:83:27:BD:5E
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MRXNXI85dWMVubwTEI5OsYMnvV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e643::/32
Signature Algorithm: sha256WithRSAEncryption
24:e2:bf:f5:ec:46:78:8d:44:91:23:b0:bf:d5:83:c4:37:da:
17:02:7f:21:43:16:d7:60:ca:a5:26:0b:46:0d:67:84:d7:13:
89:65:f8:09:3d:60:bd:a7:c6:bd:b2:3c:06:f4:41:2f:d9:2b:
4a:7c:3c:3d:76:46:1d:f2:8b:83:8a:fe:b9:e8:82:44:cb:73:
3f:e7:55:ce:3f:98:20:76:64:b6:8a:7f:a7:87:94:f8:17:8b:
49:94:8e:c2:df:96:e5:19:01:ca:39:64:28:15:5d:4b:09:67:
17:20:7d:3e:44:fb:f9:a1:91:79:ff:c6:30:96:ee:f2:2c:a0:
aa:22:7f:ba:72:70:59:22:d5:ae:bc:ad:b1:92:49:0c:e1:89:
70:c2:7f:2e:70:7b:c9:b8:d0:5e:f2:d2:3f:df:64:01:e6:f7:
bc:5d:ff:f6:f4:fa:6d:d8:a2:b6:46:57:43:40:11:2b:95:15:
b8:0c:71:e6:6f:95:4f:1b:07:00:5f:21:f0:b6:fe:36:3d:75:
90:26:f3:11:3a:25:ff:81:5d:40:39:69:b2:10:5d:5d:c4:b0:
20:40:d8:dc:81:64:be:2f:82:71:83:08:75:91:de:fe:dd:fc:
dc:a8:68:4f:79:f5:81:0a:ef:68:7d:15:f8:94:f0:08:9f:b9:
83:98:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:52 2025 by rpki-client