Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/MAicR0R3ncVMTkKV0oZy3oBwEck.roa
File: MAicR0R3ncVMTkKV0oZy3oBwEck.roa (raw, json)
Hash identifier: WaK4eGmwJjqB7bEEMx1lPorCW+4yf4wVwlYB8uvjgfM=
Subject key identifier: 30:08:9C:47:44:77:9D:C5:4C:4E:42:95:D2:86:72:DE:80:70:11:C9
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 01972176ABDA0698D0CF9D8C6152C36A2339
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/MAicR0R3ncVMTkKV0oZy3oBwEck.roa
Signing time: Fri 30 May 2025 13:51:54 +0000
ROA not before: Fri 30 May 2025 13:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209793
IP address blocks: 185.127.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:76:ab:da:06:98:d0:cf:9d:8c:61:52:c3:6a:23:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: May 30 13:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30089c4744779dc54c4e4295d28672de807011c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:fb:b9:49:01:2b:dc:ee:d5:67:be:60:fd:
92:9b:08:d7:b1:19:f9:37:de:e7:55:32:2a:22:dd:
3f:13:6e:f9:74:21:c8:c0:ef:5d:69:e3:cc:c6:7c:
a5:3d:53:80:af:22:8a:5a:58:44:d4:a1:6d:1c:76:
89:18:27:9c:f0:a3:4c:6b:81:24:e6:ce:cb:39:30:
f3:eb:1a:78:a3:a8:cf:99:b0:51:8e:9f:dd:9f:ec:
fb:95:43:a8:71:7c:9f:17:8e:84:82:9d:d4:a6:2a:
87:f3:2a:4b:99:79:cf:64:bc:03:4f:06:09:a6:97:
30:45:be:71:e6:6c:30:af:99:30:0e:24:21:52:82:
1f:d8:47:34:1f:6b:9a:21:f3:e3:cf:cc:d8:aa:e7:
45:76:38:b7:5b:e4:f9:96:e1:73:38:9c:ba:3e:7b:
f4:af:b2:9a:c5:2b:e1:f1:b7:e6:14:35:c2:61:b7:
e5:e8:33:c8:f3:ea:9e:ac:de:43:1d:d8:1e:c5:06:
1e:75:87:53:32:9f:2f:29:a4:9b:ac:b1:69:86:56:
91:b3:53:aa:db:cc:2c:e9:17:2b:16:45:88:e0:2c:
32:a9:f3:c7:f9:a6:59:3d:29:24:54:e7:35:7b:cd:
91:c5:2e:da:7c:a9:15:3b:ff:50:8e:d8:dd:2b:84:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:9C:47:44:77:9D:C5:4C:4E:42:95:D2:86:72:DE:80:70:11:C9
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/MAicR0R3ncVMTkKV0oZy3oBwEck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:9e:39:13:a7:be:8f:6a:87:e9:77:7d:ad:23:44:a9:f7:16:
d8:fc:a7:46:63:ab:bc:56:4c:1e:e2:4e:f7:97:1b:5b:84:56:
62:ce:a4:e0:49:0c:88:2b:75:ef:55:f0:79:79:e4:72:98:6d:
99:b5:c1:07:66:22:04:37:66:53:e9:ed:f3:72:39:3d:09:76:
19:85:b5:78:dd:79:b2:81:e2:e6:0a:31:c8:f1:05:52:5a:f2:
8d:d0:48:fe:6f:04:dc:9f:34:d3:e8:d1:96:ae:ec:73:82:aa:
6d:24:a1:1b:32:a7:67:49:d4:be:28:13:67:d0:ee:17:63:fc:
1a:cc:af:55:29:88:e8:c4:02:1d:d1:cd:47:81:2f:36:a1:ed:
74:ff:45:c0:d9:90:00:4c:cf:b7:d4:e4:d7:9e:e5:fc:19:5c:
aa:ab:43:45:64:65:05:20:6d:25:63:b4:75:1e:ec:69:3f:31:
b7:ae:bd:9b:17:4e:53:68:c9:2b:52:46:34:26:f9:0c:9d:e7:
d5:06:7d:aa:3c:db:e3:07:8d:7d:6e:4d:82:04:1f:41:6a:5d:
ca:91:e0:70:3b:7e:9b:1c:6c:2a:f9:d3:81:e8:9c:7d:3e:ce:
a1:f9:aa:81:bc:d0:bc:c8:fe:64:9d:0d:45:96:10:0f:ff:23:
ca:b4:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:01:59 2025 by rpki-client