Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa
File: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (raw, json)
Hash identifier: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=
Subject key identifier: 33:37:F7:4F:96:42:60:34:4F:F5:52:41:B1:54:0E:8D:41:56:0D:D6
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 01942444C4674326F12BC00840DC0FD326CA
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 2a0b:2bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c4:67:43:26:f1:2b:c0:08:40:dc:0f:d3:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3337f74f964260344ff55241b1540e8d41560dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:90:2e:fd:75:05:b8:99:54:49:98:36:d3:
fd:fd:c0:64:ac:7a:a8:ac:d4:81:d3:db:b7:7e:18:
99:52:9d:01:fa:15:6a:3a:03:a6:5b:3d:0c:88:92:
bb:fa:37:36:4b:c0:ce:b4:c3:80:92:31:c3:58:22:
35:88:52:a3:b5:85:e9:05:37:ac:8b:ed:0e:1f:ee:
15:6c:09:85:63:70:d9:fd:c9:7f:2c:54:ac:ea:47:
e4:ab:76:84:09:87:3a:45:1c:30:5f:b6:14:74:e4:
04:1c:59:7d:dd:38:53:f7:bf:14:00:bb:00:71:86:
cf:78:77:63:61:47:ae:12:66:15:ed:a3:fc:b5:97:
58:40:f7:75:fb:1e:0e:17:16:a1:16:fc:dc:be:e9:
12:cc:87:e4:30:f3:8f:44:e9:87:01:ab:7f:98:5e:
7b:da:25:45:89:b6:cc:c7:75:91:23:cc:71:2b:6f:
38:55:33:7b:8d:03:a9:2b:67:9b:7b:7a:5a:8b:45:
4b:41:c1:3a:9d:bc:93:83:f6:ea:1b:72:83:fa:16:
1b:69:53:a4:61:95:4d:fa:b5:69:c4:06:ad:e1:87:
f2:ca:04:a1:ab:72:15:8d:7f:20:e3:5b:01:52:ad:
43:91:80:4d:17:3d:72:de:46:81:6e:69:ae:5a:82:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:F7:4F:96:42:60:34:4F:F5:52:41:B1:54:0E:8D:41:56:0D:D6
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2bc0::/29
Signature Algorithm: sha256WithRSAEncryption
53:a2:19:d4:c9:7b:2c:51:51:64:8d:ad:1a:2c:28:00:d2:4c:
08:f1:dc:e7:49:1a:97:3d:39:43:87:ad:69:c8:63:f9:8c:8a:
a4:1d:9a:2b:ba:e8:e3:5b:11:e9:d8:84:0f:c5:32:db:d4:5a:
52:66:39:56:84:71:1e:14:cf:46:19:5c:5b:9a:33:b4:cc:00:
47:cf:93:49:ab:f7:65:4b:a5:a0:5b:0a:a7:b7:76:2b:84:61:
81:c7:e5:24:0b:c1:c5:82:ad:81:f8:2c:64:6d:28:5f:84:ca:
66:94:db:30:d9:0e:23:9d:49:cd:1f:c4:65:08:f0:c7:06:80:
d3:13:ed:d3:51:f0:87:bb:c9:2d:d1:94:2d:fc:44:a3:57:1c:
5d:f0:64:cc:7c:f0:e6:b2:b2:3a:0f:ed:9e:44:97:97:64:9b:
12:d1:92:f1:71:be:8a:48:46:f8:8e:b5:ae:86:0e:0b:b3:36:
5f:79:6b:b6:c4:c6:cf:8f:4e:70:b0:c8:95:f2:37:ef:8c:2a:
3f:d2:6b:14:ae:a3:3d:74:e7:d7:bd:42:cd:7c:6a:2d:c1:e1:
f5:13:bc:d0:fa:f3:44:28:aa:0d:52:a9:c4:0c:e3:c2:60:e3:
f3:17:25:7f:86:41:e3:ff:f9:6d:cd:42:d0:73:32:87:56:47:
95:f1:93:c7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRMRnQybxK8AIQNwP0ybKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj
ZDcyZjMwHhcNMjUwMTAxMjM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzM3Zjc0Zjk2NDI2MDM0NGZmNTUyNDFiMTU0MGU4ZDQxNTYwZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GuQLv11BbiZVEmYNtP9/cBkrHqo
rNSB09u3fhiZUp0B+hVqOgOmWz0MiJK7+jc2S8DOtMOAkjHDWCI1iFKjtYXpBTes
i+0OH+4VbAmFY3DZ/cl/LFSs6kfkq3aECYc6RRwwX7YUdOQEHFl93ThT978UALsA
cYbPeHdjYUeuEmYV7aP8tZdYQPd1+x4OFxahFvzcvukSzIfkMPOPROmHAat/mF57
2iVFibbMx3WRI8xxK284VTN7jQOpK2ebe3pai0VLQcE6nbyTg/bqG3KD+hYbaVOk
YZVN+rVpxAat4YfyygShq3IVjX8g41sBUq1DkYBNFz1y3kaBbmmuWoI2gQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDM390+WQmA0T/VSQbFUDo1BVg3WMB8GA1UdIwQY
MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt
MzAzMTUxZDc2YWNlLzEvTXpmM1Q1WkNZRFJQOVZKQnNWUU9qVUZXRGRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl
LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgsrwDAN
BgkqhkiG9w0BAQsFAAOCAQEAU6IZ1Ml7LFFRZI2tGiwoANJMCPHc50kalz05Q4et
achj+YyKpB2aK7ro41sR6diED8Uy29RaUmY5VoRxHhTPRhlcW5oztMwAR8+TSav3
ZUuloFsKp7d2K4RhgcflJAvBxYKtgfgsZG0oX4TKZpTbMNkOI51JzR/EZQjwxwaA
0xPt01Hwh7vJLdGULfxEo1ccXfBkzHzw5rKyOg/tnkSXl2SbEtGS8XG+ikhG+I61
roYOC7M2X3lrtsTGz49OcLDIlfI374wqP9JrFK6jPXTn171CzXxqLcHh9RO80Prz
RCiqDVKpxAzjwmDj8xclf4ZB4//5bc1C0HMyh1ZHlfGTxw==
-----END CERTIFICATE-----
Generated at Sun Mar 9 18:30:16 2025 by rpki-client