Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/MBq9_d6LT2vyQzQfNudTMEVPC5w.roa
File: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (raw, json)
Hash identifier: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=
Subject key identifier: 30:1A:BD:FD:DE:8B:4F:6B:F2:43:34:1F:36:E7:53:30:45:4F:0B:9C
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019424B36CEA58EC092356BE4188B9B6BF63
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/MBq9_d6LT2vyQzQfNudTMEVPC5w.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 2a13:e940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6c:ea:58:ec:09:23:56:be:41:88:b9:b6:bf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=301abdfdde8b4f6bf243341f36e75330454f0b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:4a:45:e6:bd:b9:b5:1f:65:85:f2:92:fa:
dd:20:c2:e9:3f:b6:f2:9a:c6:1b:37:6f:69:2e:7f:
a8:42:c4:47:fa:44:45:0f:00:0c:b0:a4:10:7f:87:
34:ae:0f:f5:83:15:6b:bd:b8:e5:18:c5:59:e3:6a:
d4:c0:17:99:a3:bd:27:ae:c6:88:a4:b3:00:06:02:
c6:ea:ae:85:ac:4a:5c:9e:46:2e:29:96:fa:c2:f1:
4e:58:ef:34:44:f1:f4:c4:43:fb:bd:f1:80:46:d8:
3c:8a:7a:37:e6:a7:0f:94:27:30:bb:35:63:43:81:
84:95:84:58:30:ae:08:a2:88:a8:3f:40:53:7d:41:
d5:54:22:6d:36:01:43:bd:41:5f:7f:77:27:a6:27:
fc:6b:9a:17:1b:6e:6c:00:8d:3b:7a:85:05:e2:e5:
c3:5a:f6:43:83:d8:aa:93:1b:ff:af:3a:00:59:a2:
92:19:fd:c7:ff:8c:48:47:d3:b9:77:ff:ba:f9:91:
6b:15:b4:25:8a:9a:89:b9:4a:7f:f7:48:01:f1:ce:
c5:c5:42:1c:c3:54:c5:9e:8a:21:a8:6d:a9:2b:be:
ce:6a:f0:de:e4:fd:79:18:df:b3:6a:96:c9:67:3e:
92:cd:bd:a3:fd:8f:43:7b:35:ac:32:58:0b:83:d7:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:BD:FD:DE:8B:4F:6B:F2:43:34:1F:36:E7:53:30:45:4F:0B:9C
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/MBq9_d6LT2vyQzQfNudTMEVPC5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e940::/29
Signature Algorithm: sha256WithRSAEncryption
4e:f1:39:2d:4f:20:ac:36:09:5a:7d:47:63:5b:6b:ff:8a:37:
f4:fc:bc:35:ae:c3:14:82:49:a8:69:55:1f:67:e5:01:20:c2:
f4:51:ae:3d:93:7e:7c:f5:1f:79:7d:91:a4:be:c5:26:fa:62:
c3:b9:da:33:4b:82:fd:55:0e:18:a9:e9:f7:ea:07:6c:4d:c1:
40:ad:41:fd:93:1a:4b:96:b1:c6:5d:ce:de:09:0e:47:0f:a5:
cc:08:9c:50:71:d6:b6:97:f8:b2:8b:cd:e3:70:92:07:e0:8b:
91:24:33:c3:6f:60:0b:a9:45:3c:bf:c2:01:8d:c6:82:86:56:
25:25:63:0e:21:02:05:f9:00:d1:e5:26:17:4a:c5:19:7a:43:
45:89:45:e8:91:78:1e:50:54:62:08:82:2e:29:b1:5d:1e:d8:
a2:a8:b2:30:5c:07:76:44:47:a7:23:9f:b5:b3:50:ba:65:9b:
c4:c5:84:e3:6d:86:cd:0d:ea:b8:dc:0c:60:a0:8e:90:5a:dd:
0b:11:71:e9:b8:d4:32:17:81:82:61:0b:6f:f1:45:e1:57:34:
db:f1:6f:d1:cb:d7:c4:9f:c4:4e:91:7f:ac:4c:83:4d:0b:b0:
de:c3:af:64:8c:f5:9e:61:1f:f4:bc:72:9d:8e:71:8f:8f:79:
33:f0:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:12 2025 by rpki-client