Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mxrKvr02YOKE0ctUyHUpDWDLdEs.roa
File: mxrKvr02YOKE0ctUyHUpDWDLdEs.roa (raw, json)
Hash identifier: JykPuszGMKsKDWYNcebb0IpPkCsuolBhLeHfL/BriJk=
Subject key identifier: 9B:1A:CA:BE:BD:36:60:E2:84:D1:CB:54:C8:75:29:0D:60:CB:74:4B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5A7576EAB9AD1DA016E1E8743056
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mxrKvr02YOKE0ctUyHUpDWDLdEs.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200111
IP address blocks: 2a12:bec0:120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5a:75:76:ea:b9:ad:1d:a0:16:e1:e8:74:30:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b1acabebd3660e284d1cb54c875290d60cb744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:c2:09:57:57:8d:ac:4a:e6:f9:00:12:64:
78:ac:a0:89:49:00:d9:ae:5c:95:d5:10:d4:1c:08:
3e:b0:5e:35:ff:b1:31:d5:2e:1e:e0:fe:8e:31:e6:
9f:b7:66:e3:c8:3d:82:ce:30:d9:d6:e0:1d:a7:60:
56:1b:da:4e:71:37:97:7f:6a:ec:ca:37:15:88:59:
06:83:a5:62:77:b2:48:0b:4d:be:05:3e:bb:e4:ab:
90:bb:3b:0d:d5:56:c0:54:8c:65:d4:fe:67:95:ee:
16:d3:a0:05:35:b0:78:15:47:ab:b4:ab:c3:c5:32:
7e:22:9b:50:b2:e2:e3:69:46:99:19:a8:81:d5:de:
3e:6e:e5:3e:cc:e1:97:8b:34:00:cd:15:f4:b2:0a:
a9:ec:1c:5a:84:75:6a:c7:5d:3e:4f:d7:c1:df:f2:
ce:ee:1e:b6:3a:2f:73:0c:47:d3:69:58:0d:70:08:
da:32:4b:0e:6d:1d:3e:00:b5:2f:d8:70:53:04:a2:
47:03:3c:13:68:c0:8c:3c:14:bc:b9:80:50:4f:15:
f8:2e:aa:cc:62:94:aa:e8:5e:0c:a6:dd:9f:c4:9d:
e9:31:bc:df:99:ce:e7:84:6c:20:50:b6:69:b5:9d:
6f:8c:65:bd:f9:9b:3f:3e:6b:77:0f:90:49:5a:a1:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1A:CA:BE:BD:36:60:E2:84:D1:CB:54:C8:75:29:0D:60:CB:74:4B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mxrKvr02YOKE0ctUyHUpDWDLdEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:120::/44
Signature Algorithm: sha256WithRSAEncryption
63:d1:79:4c:f5:57:f4:3f:e6:3c:fd:57:81:ac:7c:97:4a:d6:
e1:26:8a:c0:90:ac:c3:a1:77:c0:94:67:ec:ba:08:48:34:46:
0b:c1:cd:d3:7c:dd:63:eb:ac:d3:5e:26:56:db:44:6c:f1:23:
44:55:e0:18:9c:3b:b2:a3:2a:ef:25:fe:fd:cc:b8:15:3a:92:
74:0d:21:e3:3a:d6:44:ab:6f:63:85:9d:1c:17:e4:3e:0d:89:
82:22:5b:49:29:2e:16:33:e8:e0:c0:e8:43:9b:99:6f:bd:c6:
8c:52:0b:3b:2f:eb:69:61:e8:5b:9e:f3:38:6b:b5:82:47:f3:
37:5b:df:e6:8e:72:4b:ba:cc:0a:ac:9a:49:0a:dd:2f:fc:13:
d2:40:7d:2f:31:03:a5:74:c5:ca:d1:61:38:0c:09:21:d0:bf:
90:a0:83:7c:af:fe:64:2d:9f:d0:d6:13:00:4f:e4:bc:d8:9f:
ef:6c:29:16:06:cf:86:a6:fc:13:27:2c:3a:93:9e:5d:f9:62:
fc:f9:7f:4f:71:94:9a:4f:81:86:44:ba:15:81:e5:f2:af:d2:
54:a8:bf:2c:29:58:7c:d6:47:10:e9:a0:78:98:a4:72:c4:63:
01:7c:2d:c7:38:ff:da:e3:34:f5:97:b1:a5:fa:ba:7b:e0:0f:
e7:cb:40:e7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjFp1duq5rR2gFuHodDBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjFhY2FiZWJkMzY2MGUyODRkMWNiNTRjODc1MjkwZDYwY2I3NDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLLCCVdXjaxK5vkAEmR4rKCJSQDZ
rlyV1RDUHAg+sF41/7Ex1S4e4P6OMeaft2bjyD2CzjDZ1uAdp2BWG9pOcTeXf2rs
yjcViFkGg6Vid7JIC02+BT675KuQuzsN1VbAVIxl1P5nle4W06AFNbB4FUertKvD
xTJ+IptQsuLjaUaZGaiB1d4+buU+zOGXizQAzRX0sgqp7BxahHVqx10+T9fB3/LO
7h62Oi9zDEfTaVgNcAjaMksObR0+ALUv2HBTBKJHAzwTaMCMPBS8uYBQTxX4LqrM
YpSq6F4Mpt2fxJ3pMbzfmc7nhGwgULZptZ1vjGW9+Zs/Pmt3D5BJWqGmowIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJsayr69NmDihNHLVMh1KQ1gy3RLMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvbXhyS3ZyMDJZT0tFMGN0VXlIVXBEV0RMZEVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAEg
MA0GCSqGSIb3DQEBCwUAA4IBAQBj0XlM9Vf0P+Y8/VeBrHyXStbhJorAkKzDoXfA
lGfsughINEYLwc3TfN1j66zTXiZW20Rs8SNEVeAYnDuyoyrvJf79zLgVOpJ0DSHj
OtZEq29jhZ0cF+Q+DYmCIltJKS4WM+jgwOhDm5lvvcaMUgs7L+tpYehbnvM4a7WC
R/M3W9/mjnJLuswKrJpJCt0v/BPSQH0vMQOldMXK0WE4DAkh0L+QoIN8r/5kLZ/Q
1hMAT+S82J/vbCkWBs+GpvwTJyw6k55d+WL8+X9PcZSaT4GGRLoVgeXyr9JUqL8s
KVh81kcQ6aB4mKRyxGMBfC3HOP/a4zT1l7Gl+rp74A/ny0Dn
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:24:55 2025 by rpki-client