Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MGabRljhNLzSe2R8m_b1_T9vm_Q.roa
File: MGabRljhNLzSe2R8m_b1_T9vm_Q.roa (raw, json)
Hash identifier: +loAvqT4aTK1Qr85FLJJTo+f8XuQU7wbeXzH7ICAAKM=
Subject key identifier: 30:66:9B:46:58:E1:34:BC:D2:7B:64:7C:9B:F6:F5:FD:3F:6F:9B:F4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71EB8572F726D8956E7E933993675
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MGabRljhNLzSe2R8m_b1_T9vm_Q.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202306
IP address blocks: 2a04:5200:5977::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1e:b8:57:2f:72:6d:89:56:e7:e9:33:99:36:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30669b4658e134bcd27b647c9bf6f5fd3f6f9bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:b7:43:ba:e2:7d:62:58:e4:32:0a:e1:14:
a4:d3:89:72:be:26:3c:8f:3c:cb:5f:e7:09:54:13:
72:2b:8e:75:c2:ee:b9:19:f4:67:01:4e:cf:00:34:
a6:22:b7:78:f0:6d:ff:69:e6:b9:dd:23:a0:ed:75:
b4:4c:12:df:a3:91:92:22:ad:d8:88:1c:e1:8d:81:
65:bb:92:07:6c:b2:86:41:09:d5:45:9e:27:f0:f4:
4b:43:ef:a3:8f:fe:f8:02:df:4d:15:9a:4a:10:ba:
8a:45:62:cd:82:b3:cc:15:98:ec:00:f7:df:84:2c:
63:8b:1f:aa:a6:50:8b:59:32:9e:d3:0b:d7:bc:92:
0f:da:c3:d6:ba:80:7f:de:b3:9d:d0:d3:e2:9f:0f:
29:a4:a0:2e:2e:e2:23:67:5a:e9:72:6a:b1:b6:b5:
a4:a8:12:28:d7:0a:4a:80:14:ac:0a:6d:08:ac:e6:
c9:53:7d:34:d1:9f:77:a4:a4:60:73:79:62:eb:9b:
90:b7:df:a5:ce:cb:96:43:ea:ce:57:c2:93:35:db:
9b:7b:a6:a6:43:f4:38:20:b9:b4:7e:67:17:73:c9:
81:06:69:97:6f:52:c0:b1:f0:7e:a7:63:54:78:5e:
b6:6b:fa:b3:94:e0:4c:9e:74:6f:88:fe:d0:dc:74:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:9B:46:58:E1:34:BC:D2:7B:64:7C:9B:F6:F5:FD:3F:6F:9B:F4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MGabRljhNLzSe2R8m_b1_T9vm_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5200:5977::/48
Signature Algorithm: sha256WithRSAEncryption
68:95:82:f6:51:21:eb:73:6d:2f:a4:5e:35:3a:ff:b5:d6:41:
11:ec:00:34:47:d4:a8:25:f4:61:84:7d:fb:9a:74:4f:28:d6:
2e:89:9a:16:ea:9f:ab:f5:a8:89:2b:d3:c4:9f:3f:b2:f4:ed:
e3:59:fc:50:27:a1:54:cf:94:91:01:6a:2b:0f:70:7a:3d:a4:
10:b8:f0:47:0b:eb:0a:69:e3:d8:5b:67:28:9f:46:2b:6e:5e:
e2:f2:db:37:03:8c:79:14:89:83:b8:d4:bb:42:fd:95:51:b1:
8e:e8:8e:94:a6:a9:79:e8:eb:0f:6a:d7:3a:8c:ea:67:a3:59:
92:39:06:fd:39:3a:f4:62:75:cc:d6:8c:29:1e:83:7c:c9:ff:
d5:32:24:3d:ac:e3:bc:ad:5a:a7:52:4c:07:a0:13:eb:f7:57:
17:26:e9:0b:39:93:6b:c6:61:e9:55:10:2e:b5:27:9c:ac:aa:
ac:d7:47:89:8e:23:12:ac:88:1f:62:63:de:3c:5d:8c:d4:0f:
9c:52:93:90:b1:96:a5:6c:8c:c0:09:30:1a:6a:fc:cf:28:fb:
87:64:8d:8c:de:19:08:04:fb:e4:75:92:09:f4:14:3f:77:5c:
f9:16:01:b6:24:41:23:cc:7f:e5:d9:ea:34:03:7a:d5:56:8f:
b2:50:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:17 2025 by rpki-client