Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/mfDwEiGRmiWMmFDQIE-xmSECzg8.roa
File: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (raw, json)
Hash identifier: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=
Subject key identifier: 99:F0:F0:12:21:91:9A:25:8C:98:50:D0:20:4F:B1:99:21:02:CE:0F
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 01974FE72564BC632201EEC3592D19DD815D
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/mfDwEiGRmiWMmFDQIE-xmSECzg8.roa
Signing time: Sun 08 Jun 2025 14:17:17 +0000
ROA not before: Sun 08 Jun 2025 14:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213811
IP address blocks: 193.143.16.0/23 maxlen: 24
2a14:b000::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:e7:25:64:bc:63:22:01:ee:c3:59:2d:19:dd:81:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Jun 8 14:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99f0f01221919a258c9850d0204fb1992102ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:18:e9:06:8a:2a:0e:cb:d2:6b:0f:73:99:
22:de:c4:3e:79:cf:ad:28:6b:23:4a:b1:3f:c7:01:
2c:59:46:f2:31:90:55:2b:ab:70:d3:79:f0:0f:dc:
31:74:a9:e8:29:44:a4:60:fe:57:b9:46:72:f8:d4:
04:0c:30:a6:f4:a2:a5:b4:6c:6f:6d:82:67:1b:bb:
18:34:b2:0c:d9:ab:b1:a7:03:29:1e:98:dd:d0:0b:
91:73:4f:21:c2:8a:8d:7f:16:de:e4:68:b4:4c:32:
e9:d5:e9:2f:32:f1:4c:d1:30:df:cb:8c:3e:7b:41:
f7:6d:be:dd:59:47:ef:8e:d5:9c:af:9a:3c:29:f1:
e3:cf:c4:74:e1:16:e6:ae:48:3d:57:57:30:9c:c3:
d3:71:1e:32:05:49:50:77:18:f7:6d:44:92:99:fe:
de:81:2b:8b:6e:14:ba:56:89:fc:0f:62:82:49:bb:
5d:a3:4b:aa:a5:17:30:60:df:21:ff:37:95:1f:7d:
be:0f:e9:45:b0:d7:47:e8:79:f0:80:47:98:67:a9:
20:53:e4:a5:73:fe:cc:34:9a:77:99:2c:9c:b4:db:
c1:51:c8:0c:c1:f8:11:8c:2d:0d:fb:8d:ee:c9:ff:
02:bb:2a:95:ae:05:f3:d7:17:de:b6:6b:cb:3d:3d:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:F0:12:21:91:9A:25:8C:98:50:D0:20:4F:B1:99:21:02:CE:0F
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/mfDwEiGRmiWMmFDQIE-xmSECzg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.16.0/23
IPv6:
2a14:b000::/29
Signature Algorithm: sha256WithRSAEncryption
d8:52:21:b8:ab:75:62:cd:56:77:ac:1b:1d:03:d4:33:04:13:
68:d8:e8:8c:cd:b5:69:fe:1c:7a:4d:9a:ba:7d:c3:1d:56:74:
46:0b:22:41:7d:3c:7a:ae:50:e5:9d:d4:bc:0f:e2:e7:f6:84:
8c:1a:a1:50:b2:e7:4d:d0:cb:6f:04:2d:a5:03:6c:ce:1e:5f:
f1:c7:45:1f:26:ec:60:86:5a:74:9d:c4:4d:87:c8:a8:1f:38:
2d:2f:b5:63:31:93:3c:05:8a:62:1d:ad:30:7f:bc:77:85:5d:
e5:06:a1:48:29:6b:fc:7b:9b:ca:58:97:7b:83:22:be:cd:ff:
fb:d2:c6:be:09:47:6b:0a:d3:fc:bf:0f:9f:d0:33:cc:ae:0b:
1c:c2:8a:8f:8c:f5:60:79:1c:d8:fe:c8:e2:b6:ee:f0:6d:53:
8b:f6:26:79:b4:f0:b9:b5:ee:4d:a1:4e:8d:f9:cf:67:82:e3:
65:1d:c6:18:5c:1a:2f:19:ad:7d:45:2b:88:09:a5:6b:4c:81:
14:88:0e:51:41:aa:dd:32:02:46:08:0d:3e:1a:72:30:20:09:
11:a8:f1:b5:95:69:c2:a4:02:1b:54:5f:11:7a:ad:2e:86:76:
2a:21:05:03:4f:d2:3b:c1:96:be:24:04:d7:5e:55:b6:92:1e:
25:ba:b4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:50 2025 by rpki-client