Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NxH4h_giamUul_8d4hwWlfKSb8E.roa
File: NxH4h_giamUul_8d4hwWlfKSb8E.roa (raw, json)
Hash identifier: 5eHZHxR34JYZ9TfazKF0JjOdo5JB+Fz8ce1CtZGZyqs=
Subject key identifier: 37:11:F8:87:F8:22:6A:65:2E:97:FF:1D:E2:1C:16:95:F2:92:6F:C1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222006BE948B6560846B609C800CD356
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NxH4h_giamUul_8d4hwWlfKSb8E.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146943
IP address blocks: 5.175.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:06:be:94:8b:65:60:84:6b:60:9c:80:0c:d3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3711f887f8226a652e97ff1de21c1695f2926fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:17:b9:e7:cb:80:c8:6c:30:df:14:9a:40:
06:98:e9:a2:19:94:4f:e7:24:68:1c:13:38:a7:13:
1d:94:14:6c:5f:b4:d9:9c:e9:6e:e5:94:51:d6:92:
c3:65:db:e1:af:09:0c:84:04:a9:00:e5:57:f6:91:
5e:24:c6:93:94:72:4c:9c:8c:31:8f:31:03:d8:90:
ff:b2:9c:51:68:36:74:62:40:46:24:07:70:d5:22:
8d:18:05:fa:47:60:bf:cd:1e:93:bf:9d:19:a8:2a:
d9:a8:df:a4:7f:85:1b:07:ee:99:5f:60:05:51:10:
f9:74:45:2e:a6:d4:a3:6b:d9:38:db:7a:e1:68:2e:
33:89:3f:5c:2c:6a:9b:eb:07:5a:68:33:52:cd:57:
16:c7:19:be:d7:ba:f6:5b:13:68:52:02:d0:73:2c:
16:a9:9e:24:00:2f:bf:fb:1c:80:4d:c1:d9:59:06:
35:d6:d3:ef:09:e8:51:06:a5:74:8b:79:d0:5e:1f:
5a:03:ed:11:ae:60:f4:3f:98:ef:d9:b2:6a:9d:b0:
7c:3b:e7:20:0d:c8:dc:2d:5e:43:e1:9d:b4:9f:d8:
ea:f3:6d:71:f3:61:75:21:d6:28:c6:01:af:68:ff:
32:08:c4:30:00:fb:3d:3c:22:b4:81:fe:96:f1:8a:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:F8:87:F8:22:6A:65:2E:97:FF:1D:E2:1C:16:95:F2:92:6F:C1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NxH4h_giamUul_8d4hwWlfKSb8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:dd:be:ea:06:c1:5f:c9:92:bf:a5:cc:0b:d8:96:3a:93:e9:
2e:b7:04:ab:b4:df:cc:2a:9b:42:b9:d2:9c:c3:f2:fb:5d:f3:
34:33:38:a8:07:9e:81:28:fd:73:7b:94:6a:29:25:dc:f8:55:
f8:ea:92:35:91:3d:84:ad:5b:b7:24:c6:cc:68:7a:19:59:b9:
33:0e:8d:07:fe:31:d5:cd:63:46:de:74:16:8c:5f:9f:86:9c:
30:c7:55:00:eb:54:10:19:c7:9b:b5:d3:d7:d7:59:ee:6d:50:
6a:97:27:fb:c5:61:63:a8:75:1e:34:0c:71:cc:ff:69:68:83:
bc:3f:0d:19:79:c0:02:48:a7:81:40:09:92:1e:9a:7c:c6:a8:
20:8b:41:59:ad:4a:1e:ff:12:e8:94:5e:48:fa:6b:5a:20:2d:
0d:43:e5:0c:27:f9:d8:29:fc:93:40:fd:8e:6a:fa:4a:33:5f:
ae:d3:71:78:c7:54:f7:c8:11:15:47:ee:08:c9:b5:36:ce:bd:
9e:e5:1a:44:6b:da:2d:b7:23:ef:96:3c:cc:81:0a:c3:f9:52:
ba:35:c3:3d:31:ba:15:9d:ec:4c:ab:fb:b9:17:d3:0d:18:fd:
ab:f9:be:35:33:40:f5:24:c6:44:fc:d6:06:3e:ee:ba:f1:30:
ec:3e:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:51:40 2025 by rpki-client