Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MOVBBknaSzukddxSqnqdRTIn8MY.roa
File: MOVBBknaSzukddxSqnqdRTIn8MY.roa (raw, json)
Hash identifier: +vHb8aPpjAmcPpoSqabYCrBrKr4uhKa672/7+FsofWI=
Subject key identifier: 30:E5:41:06:49:DA:4B:3B:A4:75:DC:52:AA:7A:9D:45:32:27:F0:C6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196B8ADF7D8869A996E1F9EC5312FA48459
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MOVBBknaSzukddxSqnqdRTIn8MY.roa
Signing time: Sat 10 May 2025 05:32:10 +0000
ROA not before: Sat 10 May 2025 05:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 151.243.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ad:f7:d8:86:9a:99:6e:1f:9e:c5:31:2f:a4:84:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 10 05:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30e5410649da4b3ba475dc52aa7a9d453227f0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:8b:32:6b:40:52:23:04:41:80:7f:1f:96:
0a:28:42:2c:39:2c:29:b6:7d:65:cf:e7:9e:92:8c:
4e:a7:22:e7:b8:d4:1a:85:72:ae:e3:b9:4c:c5:2e:
73:9f:32:01:8a:e2:06:5f:d3:3a:c4:89:17:aa:72:
5a:de:49:57:9d:ac:0c:8b:d5:22:d8:0e:16:cc:9e:
a6:cc:af:de:9b:75:c7:94:69:17:42:f4:66:95:69:
60:98:09:9b:d7:df:75:b2:88:89:9d:45:5c:30:b0:
8d:db:c5:cf:b8:a8:6e:6a:2b:15:64:4e:45:58:c8:
0e:e1:a0:4e:27:78:0e:8b:09:32:e0:22:1b:15:2c:
9f:7a:35:33:0d:a2:60:1c:73:69:3b:dc:be:df:cd:
48:eb:56:e7:56:56:0a:c0:64:90:b0:26:26:75:df:
b9:7b:2e:62:27:9a:a0:bf:1a:85:42:19:c9:30:89:
b0:95:23:6d:6e:b3:97:8e:e1:d7:b6:3f:40:a5:2d:
6c:fa:ea:e6:c1:4c:2b:5d:cd:96:cb:5e:c9:a3:ea:
a7:0f:4e:65:5b:d1:b7:40:1c:79:d8:f3:60:60:2b:
8b:3a:5a:c5:e6:26:d2:e6:b8:07:2e:f4:11:39:7b:
1a:87:41:25:bc:91:25:98:7c:7b:3c:9f:70:cf:01:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:41:06:49:DA:4B:3B:A4:75:DC:52:AA:7A:9D:45:32:27:F0:C6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MOVBBknaSzukddxSqnqdRTIn8MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.97.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d2:b2:af:d3:10:3a:df:fc:13:cb:1d:20:b7:b6:9a:90:58:
46:89:32:bd:2f:e1:48:0d:20:4f:06:0b:71:98:89:44:40:2c:
cb:02:7a:fb:24:17:35:1e:f2:a4:53:21:99:47:24:b5:97:d7:
36:3e:87:ec:33:f0:d4:78:aa:b9:d3:46:ac:12:98:38:ce:f3:
97:19:00:90:59:c2:0b:d7:93:99:9f:ca:4f:0b:71:6d:18:b2:
6b:e6:87:74:c2:b8:b1:6b:51:08:39:d7:db:5d:fc:14:86:24:
a2:37:39:5c:80:05:29:e1:2e:39:26:9e:13:bc:f2:8b:cc:38:
eb:12:a2:3c:c7:f5:bc:6d:09:d0:10:0c:34:89:0e:06:cf:9b:
b6:30:e2:ed:dd:d0:21:52:67:40:00:14:08:8f:d3:31:26:70:
4c:8c:03:d6:14:10:d1:80:99:76:4c:2b:a2:8a:5d:9c:80:9e:
e6:af:f6:fc:57:0d:4b:d4:c3:48:72:7b:81:e3:8b:e2:c1:68:
cf:87:70:ac:93:13:4e:fc:d0:5a:17:09:4b:d4:35:bb:f5:4d:
99:bc:e2:15:39:0d:b7:57:1a:e5:94:8c:b7:fe:ea:87:8d:a2:
f0:0a:c5:84:38:23:ff:b1:29:7d:46:70:f9:e4:5d:45:60:fd:
75:5d:3d:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZa4rffYhpqZbh+exTEvpIRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTEwMDUzMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGU1NDEwNjQ5ZGE0YjNiYTQ3NWRjNTJhYTdhOWQ0NTMyMjdmMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUOLMmtAUiMEQYB/H5YKKEIsOSwp
tn1lz+eekoxOpyLnuNQahXKu47lMxS5znzIBiuIGX9M6xIkXqnJa3klXnawMi9Ui
2A4WzJ6mzK/em3XHlGkXQvRmlWlgmAmb1991soiJnUVcMLCN28XPuKhuaisVZE5F
WMgO4aBOJ3gOiwky4CIbFSyfejUzDaJgHHNpO9y+381I61bnVlYKwGSQsCYmdd+5
ey5iJ5qgvxqFQhnJMImwlSNtbrOXjuHXtj9ApS1s+urmwUwrXc2Wy17Jo+qnD05l
W9G3QBx52PNgYCuLOlrF5ibS5rgHLvQROXsah0ElvJElmHx7PJ9wzwHcowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDDlQQZJ2ks7pHXcUqp6nUUyJ/DGMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvTU9WQkJrbmFTenVrZGR4U3FucWRSVEluOE1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/NhMA0G
CSqGSIb3DQEBCwUAA4IBAQCJ0rKv0xA63/wTyx0gt7aakFhGiTK9L+FIDSBPBgtx
mIlEQCzLAnr7JBc1HvKkUyGZRyS1l9c2PofsM/DUeKq500asEpg4zvOXGQCQWcIL
15OZn8pPC3FtGLJr5od0wrixa1EIOdfbXfwUhiSiNzlcgAUp4S45Jp4TvPKLzDjr
EqI8x/W8bQnQEAw0iQ4Gz5u2MOLt3dAhUmdAABQIj9MxJnBMjAPWFBDRgJl2TCui
il2cgJ7mr/b8Vw1L1MNIcnuB44viwWjPh3CskxNO/NBaFwlL1DW79U2ZvOIVOQ23
VxrllIy3/uqHjaLwCsWEOCP/sSl9RnD55F1FYP11XT2i
-----END CERTIFICATE-----
Generated at Thu May 15 23:59:46 2025 by rpki-client