Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa
File: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (raw, json)
Hash identifier: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=
Subject key identifier: 9A:02:99:85:4A:0C:A5:01:FC:AB:A3:28:E7:F5:C8:B7:FD:9B:56:F5
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01942827197B2AEC0E9B2838538AFEE39C90
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa
Signing time: Thu 02 Jan 2025 17:53:58 +0000
ROA not before: Thu 02 Jan 2025 17:53:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150090
IP address blocks: 2a0e:46c4:1803::/48 maxlen: 48
2a0e:46c4:1804::/48 maxlen: 48
2a0e:46c4:1805::/48 maxlen: 48
2a0e:46c4:1806::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:19:7b:2a:ec:0e:9b:28:38:53:8a:fe:e3:9c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a0299854a0ca501fcaba328e7f5c8b7fd9b56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:5d:c4:ca:1b:9c:07:89:09:6c:4f:17:39:
e1:57:91:a3:2f:f6:0c:9e:33:ac:bd:6c:c4:f1:63:
df:f0:c2:a2:90:cf:95:88:5f:d5:3f:4c:c0:37:0f:
87:6d:3a:c9:02:4f:28:8b:92:5e:31:48:9b:ed:40:
6f:4f:18:cf:80:c1:86:4e:59:a7:5f:f9:57:e3:3d:
f6:8b:dd:8f:25:43:c8:05:1c:57:3d:ad:8b:94:da:
ed:0a:fa:9a:37:92:25:e5:7a:a8:5e:56:60:4e:ed:
51:f8:67:c8:3b:34:ad:24:b1:9c:fe:3a:73:93:33:
6f:d5:f3:6a:e8:5a:7d:fd:d6:f1:90:9b:f3:1a:ed:
81:79:62:54:3a:b2:69:f4:c1:fe:2a:0b:15:e8:0d:
fc:61:af:11:e3:0e:b1:0f:5c:4e:90:c9:bd:f3:36:
3e:84:54:f6:3c:f3:6a:01:57:48:10:f6:38:85:34:
e8:dc:db:15:1b:a6:0c:61:a6:64:0c:85:e4:84:7e:
de:70:e1:93:27:39:f2:e8:dc:ab:40:16:50:11:a5:
59:e9:4d:15:2c:f6:1c:bd:bb:b5:75:8a:b5:e5:7d:
9a:b0:d8:51:ae:1e:d4:99:cd:97:8d:ab:fc:f6:cc:
6f:cf:07:d0:f3:cc:ef:f2:58:d1:e3:8b:f6:92:c9:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:02:99:85:4A:0C:A5:01:FC:AB:A3:28:E7:F5:C8:B7:FD:9B:56:F5
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1803::-2a0e:46c4:1806:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:67:29:4a:64:36:de:87:30:49:40:fc:8d:5f:72:a3:92:c0:
b9:ea:d0:41:9e:f6:f6:f4:02:9e:89:83:c4:da:d2:33:92:07:
14:14:af:cd:70:a2:1a:32:a5:7a:e3:dc:7c:a4:42:3b:5c:17:
8d:53:6b:02:64:bf:41:3c:ed:f4:38:4e:84:94:7e:38:68:f5:
57:78:0e:2c:0e:45:bf:b0:bf:1b:61:43:f6:b3:c1:8a:d7:3d:
df:0a:6e:d8:9f:23:77:73:16:cc:e3:4b:cb:08:ec:ad:bd:dc:
2f:38:cc:ba:4e:28:7c:da:bc:3a:68:8d:95:4e:ac:fa:d0:1a:
00:b8:30:0b:2e:2e:c5:db:6f:2b:d1:66:71:51:3f:08:99:86:
8c:68:47:02:46:92:dc:f5:ee:fe:7b:d8:4c:08:17:91:8d:8b:
b5:d7:bf:9e:d1:d9:36:13:67:65:cc:ae:a6:57:cd:90:2d:e9:
a3:aa:fa:45:11:98:70:92:2d:16:79:20:a6:b3:11:53:24:b3:
bc:23:2c:7f:d6:85:7f:8e:fb:4a:0a:81:d2:b9:95:69:84:6d:
8b:f8:d5:1a:9b:a2:f7:a1:6b:31:ef:ae:20:d9:e7:d0:1f:d8:
f6:26:6f:45:a8:58:55:7f:a0:86:ae:2d:ad:44:3e:20:2f:37:
ed:f4:fe:cf
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQoJxl7KuwOmyg4U4r+45yQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjUwMTAyMTc1MzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTAyOTk4NTRhMGNhNTAxZmNhYmEzMjhlN2Y1YzhiN2ZkOWI1NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTZdxMobnAeJCWxPFznhV5GjL/YM
njOsvWzE8WPf8MKikM+ViF/VP0zANw+HbTrJAk8oi5JeMUib7UBvTxjPgMGGTlmn
X/lX4z32i92PJUPIBRxXPa2LlNrtCvqaN5Il5XqoXlZgTu1R+GfIOzStJLGc/jpz
kzNv1fNq6Fp9/dbxkJvzGu2BeWJUOrJp9MH+KgsV6A38Ya8R4w6xD1xOkMm98zY+
hFT2PPNqAVdIEPY4hTTo3NsVG6YMYaZkDIXkhH7ecOGTJzny6NyrQBZQEaVZ6U0V
LPYcvbu1dYq15X2asNhRrh7Umc2Xjav89sxvzwfQ88zv8ljR44v2kslHkwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJoCmYVKDKUB/KujKOf1yLf9m1b1MB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEvbWdLWmhVb01wUUg4cTZNbzVfWEl0XzJiVnZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDkbE
GAMDBwAqDkbEGAYwDQYJKoZIhvcNAQELBQADggEBAF1nKUpkNt6HMElA/I1fcqOS
wLnq0EGe9vb0Ap6Jg8Ta0jOSBxQUr81wohoypXrj3HykQjtcF41TawJkv0E87fQ4
ToSUfjho9Vd4DiwORb+wvxthQ/azwYrXPd8KbtifI3dzFszjS8sI7K293C84zLpO
KHzavDpojZVOrPrQGgC4MAsuLsXbbyvRZnFRPwiZhoxoRwJGktz17v572EwIF5GN
i7XXv57R2TYTZ2XMrqZXzZAt6aOq+kURmHCSLRZ5IKazEVMks7wjLH/WhX+O+0oK
gdK5lWmEbYv41RqbovehazHvriDZ59Af2PYmb0WoWFV/oIauLa1EPiAvN+30/s8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:35 2025 by rpki-client