Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/Mzj29HFabYUUzd0b2x71rCWYxpc.roa
File: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (raw, json)
Hash identifier: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=
Subject key identifier: 33:38:F6:F4:71:5A:6D:85:14:CD:DD:1B:DB:1E:F5:AC:25:98:C6:97
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 01946A265DB4DC535A7E7C91A8AA3B5B0912
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/Mzj29HFabYUUzd0b2x71rCWYxpc.roa
Signing time: Wed 15 Jan 2025 13:28:06 +0000
ROA not before: Wed 15 Jan 2025 13:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 45.67.72.0/24 maxlen: 24
45.67.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:26:5d:b4:dc:53:5a:7e:7c:91:a8:aa:3b:5b:09:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Jan 15 13:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3338f6f4715a6d8514cddd1bdb1ef5ac2598c697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:d1:a7:c7:68:16:6b:a4:d2:3c:5f:bd:cd:
cd:37:14:6a:a3:11:ab:3c:e2:ee:7c:57:54:3f:cd:
03:d1:0a:7e:05:f8:c6:9d:2f:42:af:71:77:67:ce:
2e:d9:8e:1a:01:ae:da:38:a2:48:27:03:62:25:7b:
8f:25:1b:e9:01:91:04:eb:fd:3c:bf:25:51:79:89:
60:82:df:81:9c:5e:9c:1c:68:c0:1c:2a:01:7f:d6:
d0:42:bc:b0:c8:8e:e5:dd:a7:25:7f:71:1f:c9:8a:
01:d2:6d:ba:d8:58:07:8f:f2:a9:fe:c3:00:40:2f:
55:81:5d:f8:27:5b:b6:a1:5d:36:52:8f:82:fe:7b:
9a:7d:9d:e2:4a:d6:03:2f:b2:64:b6:b8:49:5f:29:
7d:3b:20:b0:1f:4d:3c:f3:b5:d2:3b:79:3a:11:b2:
69:77:a4:f9:c5:b0:cb:ee:e9:6e:ad:0d:31:c9:7d:
85:a3:be:dd:e2:7c:67:ee:1f:25:b4:ad:b0:6d:22:
2f:63:1c:39:52:8d:75:76:46:b9:5c:00:26:54:ac:
af:43:e5:73:f9:e0:27:62:f4:ee:2d:9c:97:a1:4c:
eb:20:02:86:63:03:4e:2c:b6:9e:eb:a6:2a:6e:04:
77:31:7d:79:cb:17:3e:f7:f7:91:31:c1:bf:a0:62:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:F6:F4:71:5A:6D:85:14:CD:DD:1B:DB:1E:F5:AC:25:98:C6:97
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/Mzj29HFabYUUzd0b2x71rCWYxpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.72.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:5b:f6:c8:5a:89:e6:d2:ce:d4:1a:d3:61:21:a8:98:fa:0b:
f1:e6:93:6c:05:d6:3d:fe:11:48:97:d5:bc:96:65:6f:12:0c:
46:a2:d1:7a:c8:02:81:41:c0:96:af:15:43:c6:db:21:ca:03:
49:9f:8f:ad:d6:3b:35:11:a8:93:95:ec:2d:19:0a:ab:38:b2:
85:c2:f1:c0:77:5a:ff:a6:51:21:94:02:10:dd:2e:70:c6:10:
71:a6:ed:04:c3:cb:42:72:16:37:ef:fe:e0:53:d3:ba:e4:97:
24:bc:f0:36:11:67:8b:fc:a1:77:bb:d9:d6:eb:c6:d9:1d:67:
80:3b:06:75:3c:1e:3a:e0:92:68:c1:01:d9:25:ae:cf:c6:1f:
2f:c5:70:9a:01:50:20:35:65:72:72:63:8f:80:08:a1:05:d8:
33:50:58:80:41:76:11:92:0d:b2:d6:9b:a3:85:85:75:61:bb:
b9:64:b5:f8:60:93:78:9a:d8:7f:72:f0:77:8d:81:1b:ea:3e:
af:e7:bb:a1:fc:3b:3d:cd:bc:20:a2:f2:cf:e4:b3:58:c4:cd:
db:bf:33:34:0b:fc:0a:f5:a1:ec:a9:9b:13:a3:7a:9f:e4:31:
43:23:d8:a5:79:e3:7b:95:73:87:1d:a7:5f:ca:e3:1c:be:e7:
fe:aa:b0:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRqJl203FNafnyRqKo7WwkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODcyODI2ZmNlMDJiZDk0ODVlZjI3NjY0MWQyYjU4NGY1
OTliMzcwHhcNMjUwMTE1MTMyODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzM4ZjZmNDcxNWE2ZDg1MTRjZGRkMWJkYjFlZjVhYzI1OThjNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuHRp8doFmuk0jxfvc3NNxRqoxGr
POLufFdUP80D0Qp+BfjGnS9Cr3F3Z84u2Y4aAa7aOKJIJwNiJXuPJRvpAZEE6/08
vyVReYlggt+BnF6cHGjAHCoBf9bQQrywyI7l3aclf3EfyYoB0m262FgHj/Kp/sMA
QC9VgV34J1u2oV02Uo+C/nuafZ3iStYDL7JktrhJXyl9OyCwH00887XSO3k6EbJp
d6T5xbDL7ulurQ0xyX2Fo77d4nxn7h8ltK2wbSIvYxw5Uo11dka5XAAmVKyvQ+Vz
+eAnYvTuLZyXoUzrIAKGYwNOLLae66YqbgR3MX15yxc+9/eRMcG/oGLQvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDM49vRxWm2FFM3dG9se9awlmMaXMB8GA1UdIwQY
MBaAFC6HKCb84CvZSF7ydmQdK1hPWZs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0Yzct
MjRjNzliMWNiNGRhLzEvTXpqMjlIRmFiWVVVemQwYjJ4NzFyQ1dZeHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0YzctMjRjNzliMWNiNGRh
LzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUNIMA0G
CSqGSIb3DQEBCwUAA4IBAQCtW/bIWonm0s7UGtNhIaiY+gvx5pNsBdY9/hFIl9W8
lmVvEgxGotF6yAKBQcCWrxVDxtshygNJn4+t1js1EaiTlewtGQqrOLKFwvHAd1r/
plEhlAIQ3S5wxhBxpu0Ew8tCchY37/7gU9O65JckvPA2EWeL/KF3u9nW68bZHWeA
OwZ1PB464JJowQHZJa7Pxh8vxXCaAVAgNWVycmOPgAihBdgzUFiAQXYRkg2y1puj
hYV1Ybu5ZLX4YJN4mth/cvB3jYEb6j6v57uh/Ds9zbwgovLP5LNYxM3bvzM0C/wK
9aHsqZsTo3qf5DFDI9ileeN7lXOHHadfyuMcvuf+qrCm
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:31 2025 by rpki-client