Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9MMn9dKwyv75ZCiRuTHD2NxLdZk.roa
File: 9MMn9dKwyv75ZCiRuTHD2NxLdZk.roa (raw, json)
Hash identifier: PkZ85ceTw2mIo81q7rhuwELoBqo49uylP4LhuF2RnGA=
Subject key identifier: F4:C3:27:F5:D2:B0:CA:FE:F9:64:28:91:B9:31:C3:D8:DC:4B:75:99
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01967394246370C52AEC5E7F7867BCD34B92
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9MMn9dKwyv75ZCiRuTHD2NxLdZk.roa
Signing time: Sat 26 Apr 2025 19:30:10 +0000
ROA not before: Sat 26 Apr 2025 19:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213574
IP address blocks: 2a12:bec4:1170::/44 maxlen: 44
2a12:bec4:16e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:94:24:63:70:c5:2a:ec:5e:7f:78:67:bc:d3:4b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 26 19:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4c327f5d2b0cafef9642891b931c3d8dc4b7599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:3e:24:2c:68:64:cd:52:e2:47:b0:e2:65:
8a:8a:3c:9c:a7:cc:6f:f0:f8:6f:cd:5e:4d:fe:21:
34:68:d2:71:69:72:1e:4a:b0:b5:99:44:1e:c0:5d:
34:28:58:42:91:42:cc:1f:7c:9a:40:57:8f:5b:82:
a8:46:ce:8b:b2:a4:e0:74:9f:c0:da:b3:f8:f1:13:
fe:88:6d:8d:a9:f6:29:bc:25:37:fe:42:4f:96:c3:
07:10:b7:cd:b4:22:6a:2b:a2:71:09:7f:82:f0:b3:
fa:1f:c7:2a:0e:17:65:1b:6f:73:f4:90:b3:06:5c:
e1:10:b1:4d:7b:7a:50:b5:16:ce:bb:7d:dc:3d:2e:
ca:9a:e6:e4:19:a8:9e:b4:81:9b:fa:d0:8f:e1:79:
e2:2a:39:bc:73:f4:31:b8:85:2d:ae:38:4a:80:2e:
17:4a:1b:6e:d5:dc:dd:a0:00:34:be:e8:09:c3:58:
80:e6:18:3d:97:a9:4a:aa:c7:21:7c:2a:df:dc:22:
cd:76:26:bd:2b:76:9a:95:6e:d0:7d:23:22:d3:a7:
99:67:20:25:b9:fc:c5:f8:9e:94:72:0c:9b:fd:d3:
2c:8f:49:31:9d:50:81:97:86:99:1c:e8:5b:f0:6d:
66:1a:c3:dd:18:04:c6:37:cd:dd:6e:b7:b0:d6:90:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C3:27:F5:D2:B0:CA:FE:F9:64:28:91:B9:31:C3:D8:DC:4B:75:99
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9MMn9dKwyv75ZCiRuTHD2NxLdZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1170::/44
2a12:bec4:16e0::/48
Signature Algorithm: sha256WithRSAEncryption
86:5e:04:b3:7c:5b:b0:d5:52:03:5a:30:0f:bf:48:f3:6b:2f:
85:1e:87:52:d2:4d:3a:50:7e:1f:1d:9a:bc:06:fe:86:47:4f:
54:4d:4c:1c:12:de:c6:06:cb:90:09:73:1a:97:7c:1f:cf:c2:
77:11:f1:14:e0:16:00:7a:9e:44:bb:74:c4:d0:f5:c8:8c:4f:
53:98:56:fb:02:35:0c:bd:39:31:0a:19:b5:db:f6:c5:8c:0f:
6f:3b:06:82:a5:df:28:79:90:0a:2c:eb:a1:81:da:55:1d:93:
70:88:a3:fa:f1:55:08:d8:70:09:bc:6e:23:ef:23:cb:fc:cc:
a7:1f:7d:cc:dd:1b:d8:9d:a0:aa:0b:5e:18:6f:c0:c7:3b:c3:
0a:c1:23:85:42:93:d8:f2:65:ba:cd:83:9b:ed:8a:02:e1:3e:
ea:16:c9:53:31:63:3f:13:15:d6:0d:6e:67:2e:03:6c:08:3a:
c6:d6:ed:4f:5d:c6:92:c0:98:28:29:0e:76:2f:51:64:4e:95:
a7:c3:16:a1:e9:3b:d7:7f:fc:33:93:d1:51:b9:72:d5:45:d2:
59:cb:11:88:b8:8f:f1:8a:ea:62:5f:4e:b2:6e:39:4d:34:2a:
5b:9d:d7:86:ef:0b:58:87:bb:cb:5c:b8:68:11:0d:e6:2a:a8:
42:86:1f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:25:14 2025 by rpki-client