Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/mUEBMB1gf8BpmkORtWka9GBSSbY.roa
File: mUEBMB1gf8BpmkORtWka9GBSSbY.roa (raw, json)
Hash identifier: PBzOt+zbxQGmJ9tBRqgYaqkGg70HiRnIKjw3qGAY5rw=
Subject key identifier: 99:41:01:30:1D:60:7F:C0:69:9A:43:91:B5:69:1A:F4:60:52:49:B6
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 0194266B33A2AF6B8FCFE1F6B4947300484B
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/mUEBMB1gf8BpmkORtWka9GBSSbY.roa
Signing time: Thu 02 Jan 2025 09:49:07 +0000
ROA not before: Thu 02 Jan 2025 09:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200193
IP address blocks: 2a0f:bf00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:33:a2:af:6b:8f:cf:e1:f6:b4:94:73:00:48:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jan 2 09:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=994101301d607fc0699a4391b5691af4605249b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:9d:9e:e2:d4:13:46:ec:45:cd:0a:98:c0:
46:43:c0:93:ad:5d:7e:9c:e4:77:ab:e2:5d:20:eb:
48:dc:06:a8:5a:0e:01:94:b0:5d:68:f2:e6:46:e3:
ca:57:a2:90:6e:b0:c4:28:85:23:c3:bf:b7:60:72:
24:f1:c0:57:64:cc:b5:ae:f7:85:91:61:a1:ee:9b:
a3:f9:90:b2:d3:fd:96:70:19:3e:46:99:e7:3c:48:
e6:3f:57:89:29:17:55:ea:76:b0:98:da:51:41:a9:
27:27:71:1f:26:60:b8:2b:c6:b1:e3:bc:e1:ab:da:
e7:8a:06:ca:fb:84:f5:47:11:cb:f9:ce:30:70:57:
0b:dd:b3:95:f0:8f:ec:39:97:7e:88:45:50:e9:6e:
c8:76:3c:38:8f:4e:ff:10:bb:65:a0:5a:32:d9:a2:
7c:98:03:c3:41:2e:73:5c:cd:dd:3f:e2:06:a1:51:
6a:5a:d9:71:81:5c:e0:ee:f7:03:db:ed:58:a9:2c:
29:5f:ca:55:d5:65:e6:3e:46:00:02:4d:40:57:8a:
28:41:08:7a:92:71:0d:24:48:4e:88:0e:4f:82:c1:
08:cb:0c:c4:bd:8a:25:58:3f:4a:2d:29:83:53:83:
c1:0d:bc:32:13:0e:45:47:83:1f:e3:99:96:f5:31:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:01:30:1D:60:7F:C0:69:9A:43:91:B5:69:1A:F4:60:52:49:B6
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/mUEBMB1gf8BpmkORtWka9GBSSbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bf00::/32
Signature Algorithm: sha256WithRSAEncryption
51:27:27:1d:2f:3e:04:87:76:c1:ff:b3:1c:3c:9c:2e:1d:c6:
cd:3d:ec:50:35:0f:56:27:4d:9b:07:df:c4:7a:66:b1:ec:d3:
56:88:f8:73:c8:71:36:70:10:8f:2e:dc:ae:26:77:99:56:4f:
44:a7:4d:e2:df:b7:3c:c7:b0:c2:fe:4f:c1:65:cf:e4:61:5e:
1d:8b:a2:33:af:dc:8e:b5:89:3f:97:a6:10:1e:9e:47:00:c8:
25:56:62:ae:fd:db:5f:6e:37:ee:81:56:0e:56:14:b0:a5:fd:
c1:66:e9:73:5f:af:b1:4d:ab:7a:53:b2:1e:70:2c:c8:6a:13:
88:71:41:9b:a4:bc:56:32:8d:19:43:8b:58:2e:7f:a0:9e:18:
a3:dd:24:59:d3:04:ff:ec:f5:02:d9:a9:3d:e7:0b:5d:70:f4:
ae:07:52:d6:5c:d8:49:e5:56:89:ca:7a:24:12:cd:98:f5:96:
96:ed:62:92:e1:f6:23:9d:12:70:26:b1:e4:50:ce:c8:01:a9:
c9:4e:1c:38:e4:6e:88:a0:9e:cf:36:47:2a:1a:89:e9:2f:67:
44:c6:50:ef:46:bd:27:25:0b:89:9d:d6:5b:1e:37:5c:7e:d9:
bd:0c:47:3d:af:5d:cd:ea:c3:28:9d:01:20:67:d1:5f:94:d7:
24:9b:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:48 2025 by rpki-client