Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/nBGaxHS4njnBuZih8vNGsp1DG9c.roa
File: nBGaxHS4njnBuZih8vNGsp1DG9c.roa (raw, json)
Hash identifier: XLGWBSyFNOz/Nq0CINiB/5Nx/Ff5JQHbqxgQoHl8pY8=
Subject key identifier: 9C:11:9A:C4:74:B8:9E:39:C1:B9:98:A1:F2:F3:46:B2:9D:43:1B:D7
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E38749F54E9668C46DF5181BB605
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/nBGaxHS4njnBuZih8vNGsp1DG9c.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42250
IP address blocks: 45.66.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e3:87:49:f5:4e:96:68:c4:6d:f5:18:1b:b6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c119ac474b89e39c1b998a1f2f346b29d431bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:32:b4:1a:76:1f:fc:ca:34:9d:62:6b:4e:
fe:97:ff:65:17:33:a2:b6:7c:be:6e:63:2a:1e:70:
a4:d0:32:01:18:d1:17:4b:f8:25:88:63:03:22:c5:
54:c5:79:13:63:38:78:ef:b6:6b:f2:a1:d4:55:e1:
6c:3b:81:de:2c:82:66:9a:ac:31:bd:a7:fd:b8:78:
ec:b4:ee:59:e8:1f:fc:19:f6:4a:52:91:0c:8f:74:
d0:2a:7c:8d:54:68:b2:6c:f6:28:57:d8:b7:18:5b:
37:5f:97:1a:d6:c3:96:54:c4:b9:ef:9d:3f:63:49:
23:d7:e9:69:10:da:19:a9:96:ff:b9:f8:52:60:9c:
ca:e7:ee:f6:15:41:9f:79:97:b9:da:9c:13:b6:7f:
a7:5a:3f:98:ba:f1:6d:11:9f:68:b1:94:06:45:88:
5b:3b:f3:e0:2b:ea:ca:3f:7d:2a:c2:bc:e7:1f:72:
f8:91:d1:3f:c1:70:df:e5:3b:df:6d:f2:fd:6d:e4:
4c:17:44:bd:c7:83:12:27:43:3f:56:0f:8b:2f:91:
4a:7e:44:3b:82:b9:95:1e:7c:16:55:fb:f0:f1:e5:
9e:bc:26:a3:c5:8d:17:25:d9:dd:12:13:15:cb:18:
aa:61:47:0c:bf:5d:5d:23:48:5c:d5:61:ca:c3:23:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:9A:C4:74:B8:9E:39:C1:B9:98:A1:F2:F3:46:B2:9D:43:1B:D7
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/nBGaxHS4njnBuZih8vNGsp1DG9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:25:ac:b4:0a:fd:4d:f4:8d:0a:6a:53:ca:1c:0f:32:a9:f2:
a0:89:0e:5d:36:da:ab:9e:55:19:5c:df:3d:7c:8c:16:30:9e:
3d:e4:8e:fa:73:08:0e:b6:d1:98:c6:cf:1d:e6:cb:a8:ab:ee:
0d:26:b7:e9:8f:98:b6:9b:64:86:35:04:90:00:cc:d6:fd:37:
d3:2f:82:2f:4e:c3:dd:8e:00:51:42:30:77:52:ce:cf:e3:2a:
a2:51:db:2f:c4:6d:5e:ee:a7:39:85:cc:31:b8:e9:8d:ec:65:
ff:c7:f3:d5:db:9b:37:1c:7b:9f:ce:a6:ab:83:34:55:78:a7:
32:6e:2e:6d:37:75:2c:da:29:16:a6:6c:12:4f:2b:de:73:e6:
34:d0:3b:8d:0b:eb:ba:0e:1a:09:04:49:4c:77:6a:e8:95:f3:
20:e7:2d:44:c8:6e:ec:16:5f:e1:79:e1:e9:18:bf:a2:86:b8:
89:0c:aa:db:f6:6c:e9:26:a3:3d:fa:5e:da:0a:e9:b4:85:8f:
31:c5:46:85:80:6b:2f:63:1f:b3:f9:69:82:4b:4d:ca:b2:18:
96:69:99:5e:e7:f1:52:34:7a:b6:1d:37:34:8b:7c:1c:2c:b9:
e4:96:cc:65:21:7b:b1:05:29:7b:0b:e6:a1:ce:ad:b5:81:f1:
e8:ae:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:59:03 2025 by rpki-client