Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/mWcMZUbVESCreyIMM1F2DvYaJHs.roa
File: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (raw, json)
Hash identifier: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=
Subject key identifier: 99:67:0C:65:46:D5:11:20:AB:7B:22:0C:33:51:76:0E:F6:1A:24:7B
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019424B3E15725B164B6E98E6ABE0E1B3700
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/mWcMZUbVESCreyIMM1F2DvYaJHs.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31673
IP address blocks: 193.30.6.0/23 maxlen: 24
2a03:7000:c0c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e1:57:25:b1:64:b6:e9:8e:6a:be:0e:1b:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99670c6546d51120ab7b220c3351760ef61a247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:8b:74:af:eb:cd:53:15:09:53:04:89:82:
a4:f8:df:3c:86:ee:6d:03:fa:3f:62:ed:a6:71:3b:
1e:a6:92:2f:aa:af:72:39:5d:28:0d:e9:7e:bc:f0:
ea:91:b6:85:b4:b9:ec:be:d2:80:e5:a8:07:9a:b9:
30:98:a5:db:cf:0d:27:91:b8:d1:0c:1c:99:c6:52:
5c:86:61:2c:68:e2:fe:6b:94:45:c0:48:39:61:42:
54:e7:82:db:4f:57:e5:6e:a6:7a:f4:66:6d:b7:dc:
d2:f2:ea:c2:cd:74:20:38:62:50:2a:5e:c6:fc:8e:
00:fa:35:b0:3d:8e:b7:09:e3:05:06:e8:4b:f5:02:
78:06:d5:bd:38:20:6e:eb:57:a8:91:5a:1d:17:af:
4f:2f:18:7d:cb:3e:3d:1a:1c:c5:5e:e0:57:93:d3:
70:25:10:8b:a0:70:5f:f3:4a:e5:2f:48:c2:9d:03:
02:bc:2d:ae:30:1d:23:eb:4c:f9:7a:82:50:c7:1b:
32:95:97:9a:b2:79:4e:e6:e7:c7:92:10:69:e6:46:
d8:00:6f:a6:a9:f5:84:98:aa:96:74:fc:cd:f5:fc:
f2:5f:62:e5:d7:42:2f:13:65:ac:3f:dd:f6:09:7b:
ee:f0:57:51:3f:ca:31:5b:81:aa:49:72:ec:95:ea:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:0C:65:46:D5:11:20:AB:7B:22:0C:33:51:76:0E:F6:1A:24:7B
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/mWcMZUbVESCreyIMM1F2DvYaJHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.6.0/23
IPv6:
2a03:7000:c0c3::/48
Signature Algorithm: sha256WithRSAEncryption
06:a1:e3:e7:01:eb:b2:9c:76:8e:84:8c:5a:78:c6:e1:14:54:
4f:4d:68:01:1b:70:3e:09:92:8c:58:19:3d:90:5b:74:b2:ce:
e2:e6:1f:63:43:d4:c3:62:97:26:5b:c6:7f:fa:c1:04:ea:28:
08:20:20:5f:14:9f:c1:29:62:c0:a1:36:d7:2e:77:75:ed:38:
95:58:d3:eb:69:bc:3d:e6:c8:31:15:3d:f5:5d:53:6d:ca:65:
68:81:5f:33:ec:39:ec:96:23:bc:42:10:fa:c4:50:da:db:10:
9d:bb:bf:f8:87:73:8c:4e:e6:4a:d2:03:64:79:e8:45:b8:cb:
56:78:eb:a0:b1:15:77:a3:e8:6b:9d:72:81:ad:31:22:33:1d:
3c:49:a5:0c:aa:99:b6:b3:e9:d7:33:7d:8a:29:ca:87:0b:75:
e8:f7:07:fc:85:a4:a8:ff:5b:0b:78:eb:3c:68:eb:aa:09:1a:
4d:84:6b:5c:7c:fd:4c:12:03:9a:34:64:e4:49:6f:53:69:fb:
e2:38:a0:05:09:6f:55:b7:36:38:f0:99:68:5b:35:43:97:34:
ef:15:fc:33:94:90:6f:37:f3:80:55:95:11:05:9a:c1:49:9c:
50:6b:a8:fd:10:a6:9a:91:c3:a1:dc:a2:0d:b8:75:98:e3:9f:
cb:8e:31:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQks+FXJbFktumOar4OGzcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTEwZGFjMWY3NzNjNTVhMjQ0NzUzMzQ2NzE5ZTg5OWY0
ZDQ0MzIwHhcNMjUwMTAyMDE0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTY3MGM2NTQ2ZDUxMTIwYWI3YjIyMGMzMzUxNzYwZWY2MWEyNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/iLdK/rzVMVCVMEiYKk+N88hu5t
A/o/Yu2mcTseppIvqq9yOV0oDel+vPDqkbaFtLnsvtKA5agHmrkwmKXbzw0nkbjR
DByZxlJchmEsaOL+a5RFwEg5YUJU54LbT1flbqZ69GZtt9zS8urCzXQgOGJQKl7G
/I4A+jWwPY63CeMFBuhL9QJ4BtW9OCBu61eokVodF69PLxh9yz49GhzFXuBXk9Nw
JRCLoHBf80rlL0jCnQMCvC2uMB0j60z5eoJQxxsylZeasnlO5ufHkhBp5kbYAG+m
qfWEmKqWdPzN9fzyX2Ll10IvE2WsP932CXvu8FdRP8oxW4GqSXLsleoNxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJlnDGVG1REgq3siDDNRdg72GiR7MB8GA1UdIwQY
MBaAFGHhDawfdzxVokR1M0ZxnomfTUQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQt
NmRiM2NhZWY3M2Q5LzEvbVdjTVpVYlZFU0NyZXlJTU0xRjJEdllhSkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQtNmRiM2NhZWY3M2Q5
LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwR4GMA8E
AgACMAkDBwAqA3AAwMMwDQYJKoZIhvcNAQELBQADggEBAAah4+cB67Kcdo6EjFp4
xuEUVE9NaAEbcD4JkoxYGT2QW3SyzuLmH2ND1MNilyZbxn/6wQTqKAggIF8Un8Ep
YsChNtcud3XtOJVY0+tpvD3myDEVPfVdU23KZWiBXzPsOeyWI7xCEPrEUNrbEJ27
v/iHc4xO5krSA2R56EW4y1Z466CxFXej6GudcoGtMSIzHTxJpQyqmbaz6dczfYop
yocLdej3B/yFpKj/Wwt46zxo66oJGk2Ea1x8/UwSA5o0ZORJb1Np++I4oAUJb1W3
NjjwmWhbNUOXNO8V/DOUkG8384BVlREFmsFJnFBrqP0QppqRw6Hcog24dZjjn8uO
MYI=
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:06 2025 by rpki-client