Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MkDnaBso-Wb3W4PhrSJB0X_qUbg.roa
File: MkDnaBso-Wb3W4PhrSJB0X_qUbg.roa (raw, json)
Hash identifier: idU/SofSBt4YDDNJm1cvcA9Tc8QygHK1dIDgqPV3Ias=
Subject key identifier: 32:40:E7:68:1B:28:F9:66:F7:5B:83:E1:AD:22:41:D1:7F:EA:51:B8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196471E4E9DD504AFE0958AF43A9DF0A2E4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MkDnaBso-Wb3W4PhrSJB0X_qUbg.roa
Signing time: Fri 18 Apr 2025 04:18:10 +0000
ROA not before: Fri 18 Apr 2025 04:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31025
IP address blocks: 2a02:2fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:1e:4e:9d:d5:04:af:e0:95:8a:f4:3a:9d:f0:a2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 18 04:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3240e7681b28f966f75b83e1ad2241d17fea51b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:06:c2:a6:ca:31:b2:7a:cb:03:a9:e7:44:
ce:c7:e1:79:3d:6e:a4:4c:49:fe:82:b5:f3:43:2d:
fa:1c:ea:64:13:3e:a4:e1:26:ae:83:75:8c:76:73:
30:47:37:9a:3b:b2:50:1c:79:85:8c:63:a5:cc:92:
13:69:0f:ba:06:a4:1b:94:3c:54:a6:b0:d8:a3:b9:
fb:58:cd:61:1a:e4:62:bb:9e:c7:4a:b0:dd:4f:49:
3b:21:ec:7e:5b:c5:e6:47:17:0a:82:4c:9a:bf:0e:
e9:2f:c4:8d:0f:54:bf:7e:4b:6a:63:6d:9b:ed:53:
15:e2:e0:a6:55:12:9f:e3:fd:ba:ca:70:c5:5a:41:
fc:4f:f6:84:b9:e4:00:58:a3:a6:99:57:6b:b8:fa:
f3:bd:8e:2b:1d:df:dd:25:c0:eb:6e:2c:4b:5c:ef:
fe:13:ac:11:31:b7:d0:70:85:d0:be:b8:7b:ce:e2:
5b:91:73:b8:09:ed:05:2e:41:3d:ad:ef:9d:5d:75:
03:d4:39:c9:6e:f1:1b:bd:a2:8b:1c:43:b5:43:59:
5d:ce:f6:4c:12:91:65:a4:70:ca:d0:68:b1:a9:73:
64:06:b6:db:03:fa:59:e8:4f:43:f6:fd:8e:ac:29:
43:26:6d:43:1b:7b:9c:35:3f:4b:5a:5d:86:34:da:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:E7:68:1B:28:F9:66:F7:5B:83:E1:AD:22:41:D1:7F:EA:51:B8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MkDnaBso-Wb3W4PhrSJB0X_qUbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:30:7a:34:f8:96:bf:91:d7:2b:fd:ec:e3:51:ae:e5:7e:9b:
3f:11:53:8c:3f:9e:d4:6c:db:a4:26:94:c9:b4:65:88:4a:66:
74:91:8f:30:d2:28:fb:98:61:6f:60:20:2d:40:5a:18:b6:bf:
e3:92:dd:56:86:c3:cc:16:60:20:bb:57:1b:fe:0e:a6:e8:e2:
14:26:fd:5c:ec:e2:8a:b3:79:1e:10:9e:1e:60:a6:90:a0:30:
4a:00:cc:f9:31:f1:8c:6c:4f:93:f2:b1:66:c2:16:28:40:73:
cc:76:7e:c5:a4:d2:1a:e5:c7:20:30:02:be:ad:46:4a:c6:21:
a4:85:a3:88:68:fc:6e:f7:18:ad:6f:a0:eb:6e:5f:dc:fc:cb:
51:76:6a:03:5a:64:d3:9a:e7:1f:d1:55:c0:9f:b4:69:6c:69:
20:a9:da:5b:e6:79:08:ad:b2:77:8c:72:df:a2:2e:a3:ab:2e:
51:c3:49:e8:2d:8c:29:ad:0b:3b:ea:21:42:9d:49:3e:06:c1:
ff:14:33:2a:a2:12:ff:55:8f:0c:10:19:d4:50:bf:43:4c:8f:
e7:fd:93:ea:6c:ed:34:af:de:e6:34:fc:3f:e1:ae:d4:56:9e:
21:92:ac:22:59:0e:f1:8c:a0:b8:2e:f3:a0:74:35:b7:ac:8a:
6f:f8:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:59:11 2025 by rpki-client