Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/N1R0GyvHuTbb0-EH84-V2sEbngg.roa
File: N1R0GyvHuTbb0-EH84-V2sEbngg.roa (raw, json)
Hash identifier: OtlluPp/GFk8dMowu4n/6CaWorYPCyKsdg3cuhnY21w=
Subject key identifier: 37:54:74:1B:2B:C7:B9:36:DB:D3:E1:07:F3:8F:95:DA:C1:1B:9E:08
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01957C2033D759A733275D93E139CE4840D0
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/N1R0GyvHuTbb0-EH84-V2sEbngg.roa
Signing time: Sun 09 Mar 2025 18:17:19 +0000
ROA not before: Sun 09 Mar 2025 18:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151194
IP address blocks: 2a14:67c1:b100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7c:20:33:d7:59:a7:33:27:5d:93:e1:39:ce:48:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Mar 9 18:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3754741b2bc7b936dbd3e107f38f95dac11b9e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:4c:3a:42:a1:bb:dc:49:ff:be:3d:04:bd:
3c:26:fd:da:1d:74:b9:07:ac:87:c4:8b:65:ae:6f:
08:55:df:f2:2f:0c:a6:8a:22:65:0d:1a:d5:3d:0e:
e3:65:98:b7:11:6a:e9:b4:b9:4b:3e:36:d8:0b:d8:
c0:c0:24:1b:ef:ab:14:34:e5:4f:76:65:5a:ea:5b:
c0:15:0b:49:ca:72:dd:c0:4a:86:5a:da:83:51:59:
1a:2e:09:3f:92:ae:69:08:24:62:ef:5f:a4:70:16:
a2:71:96:d8:98:c9:91:ae:c3:cf:4c:4d:f4:63:86:
c7:82:7b:7b:14:0c:5c:04:0f:65:5a:d1:ba:16:6f:
07:8a:6e:20:ce:c9:94:05:36:71:0d:c2:f9:6c:7e:
5d:a8:0a:76:a3:a8:0f:7c:5b:45:6d:c3:e8:ec:d1:
61:85:48:8d:15:e9:a4:e1:bb:4d:a9:3f:47:fa:1c:
ee:14:07:49:1f:bf:58:c0:97:34:29:04:3e:4a:b6:
cc:e2:23:89:e6:74:02:af:c6:d6:13:ca:5b:84:59:
1d:04:66:73:bb:22:12:ad:cd:db:c7:77:b4:45:c9:
36:ac:f1:c0:fb:a8:48:2b:fd:6c:a4:04:55:81:99:
cd:f7:99:02:10:0a:7a:5c:1e:f4:52:91:d5:c3:4a:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:54:74:1B:2B:C7:B9:36:DB:D3:E1:07:F3:8F:95:DA:C1:1B:9E:08
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/N1R0GyvHuTbb0-EH84-V2sEbngg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:b100::/48
Signature Algorithm: sha256WithRSAEncryption
a9:77:f9:f5:eb:e0:b0:56:90:ac:72:9f:ef:91:b2:60:19:46:
05:37:da:02:ab:63:fe:cd:eb:0e:31:22:2c:8c:82:eb:01:e9:
a1:56:5f:6a:6a:55:65:da:4f:26:a4:ff:cf:b4:3d:3c:7d:d1:
74:f9:07:5d:a1:c7:b0:c4:bc:10:01:64:19:fc:dd:48:97:74:
bf:58:a1:3b:f7:22:73:c0:8d:8c:a8:4c:20:06:55:0e:1c:5e:
be:00:97:5b:78:9c:90:1a:a7:cf:b1:48:35:88:c3:35:3f:04:
af:8e:fc:28:36:c9:98:1e:87:1b:8b:12:d8:79:6e:ff:56:80:
c5:7e:e3:44:54:d2:7c:ac:76:bf:ba:fb:fc:0e:81:14:60:8d:
f7:84:30:29:6c:aa:4f:b0:7e:7a:5c:92:7d:36:99:5c:01:d1:
71:73:0b:cc:a9:ca:de:be:aa:85:3b:ff:d9:e7:e0:c2:38:7a:
9c:a7:b2:5f:d5:bb:f5:d1:27:03:eb:ab:dc:f7:27:4b:7c:2e:
2e:13:5a:1d:34:8e:06:32:04:c7:b6:96:cc:95:15:9f:04:40:
45:25:86:d2:0d:92:52:54:a5:44:ae:7a:3f:06:c3:7c:29:60:
23:b9:30:b4:dd:10:26:63:a6:ed:a8:fa:9b:bf:0f:05:b6:98:
e5:ce:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:07 2025 by rpki-client