Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/nFar_UOXP4QzN4-h1MF9qknQEIw.roa
File: nFar_UOXP4QzN4-h1MF9qknQEIw.roa (raw, json)
Hash identifier: tJ5LZZ8cOfCs7MBCUeqrXfhErlPn41y+8yI8NHVM7o0=
Subject key identifier: 9C:56:AB:FD:43:97:3F:84:33:37:8F:A1:D4:C1:7D:AA:49:D0:10:8C
Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Certificate serial: 01964CCD1351C919CED8203472018E8AC9FF
Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/nFar_UOXP4QzN4-h1MF9qknQEIw.roa
Signing time: Sat 19 Apr 2025 06:47:10 +0000
ROA not before: Sat 19 Apr 2025 06:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200355
IP address blocks: 185.250.12.0/24 maxlen: 24
185.250.13.0/24 maxlen: 24
185.250.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:cd:13:51:c9:19:ce:d8:20:34:72:01:8e:8a:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Validity
Not Before: Apr 19 06:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c56abfd43973f8433378fa1d4c17daa49d0108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:12:2d:1a:af:4d:d1:3d:2f:e9:b8:10:80:
d9:be:53:2d:86:34:8a:a1:4d:76:02:50:c3:3c:57:
ae:42:82:39:a5:b0:79:b9:a9:5b:47:53:41:38:1e:
e1:7b:51:81:52:f8:f7:1a:ab:03:ed:35:2f:fe:2f:
7a:0e:da:49:c0:3e:00:0a:4d:ad:70:40:f6:e1:34:
32:f9:df:78:b4:18:9d:a7:bb:01:44:e2:71:04:92:
e6:76:1e:3d:12:47:fc:ac:87:8f:98:c6:60:7d:d5:
a2:19:ee:87:23:51:b1:44:70:d9:0a:5f:40:c5:ec:
52:b4:5d:af:29:e9:ef:50:0f:4a:73:60:cc:cc:1b:
dd:34:57:3a:79:6e:73:31:1b:8a:ae:29:12:38:fe:
0b:1a:a4:4f:e2:9d:7a:be:f3:14:a5:2f:c5:87:55:
a6:09:24:f4:30:ce:91:29:d4:d2:8f:47:ec:9d:9c:
c2:5a:52:da:d0:a0:f9:39:82:3d:90:e7:d8:dd:2e:
ab:a2:36:29:65:8a:4e:0d:16:01:fe:44:bd:3b:45:
6d:21:0b:96:8d:12:e3:e3:6d:fb:b9:d4:bc:2b:38:
34:f6:fc:5d:d2:5e:29:c0:cd:79:a8:9c:e5:8a:77:
70:c2:66:fd:e0:53:4e:27:f0:aa:ef:41:6b:de:a4:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:56:AB:FD:43:97:3F:84:33:37:8F:A1:D4:C1:7D:AA:49:D0:10:8C
X509v3 Authority Key Identifier:
keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/nFar_UOXP4QzN4-h1MF9qknQEIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:67:a3:ef:90:77:b5:01:b9:7d:92:15:b6:df:96:bc:a4:4a:
52:56:37:ee:22:51:71:9b:57:1f:1b:f7:64:70:6c:76:fe:4d:
82:73:82:77:ff:3d:1f:b7:9d:b8:2a:66:32:75:3d:69:0d:43:
e7:32:58:c2:00:14:8d:da:67:dd:c8:97:4c:9f:f9:6f:54:77:
ec:f8:6c:7a:00:25:15:74:cf:af:6f:71:51:03:40:a9:d6:08:
cb:38:d3:5a:fb:fc:b3:26:dd:7c:f6:55:1c:e3:60:8b:11:12:
eb:65:88:63:d4:5d:e3:b7:a4:f0:d7:bc:1b:cf:2e:b4:3f:2b:
b4:18:43:58:3c:c1:c8:ff:18:31:5b:c5:fc:0b:b1:e2:34:03:
69:d5:ff:18:af:8b:2d:f8:1e:01:a4:b4:70:f8:d8:a4:59:a7:
4a:12:63:f3:fa:9f:aa:89:f7:ee:a3:d4:8d:54:bb:c9:be:f0:
aa:8f:51:9c:3a:53:18:41:20:1b:b2:50:74:99:7c:e1:a3:46:
4e:3c:a4:b4:7f:67:ae:ad:cd:8c:47:e4:d5:e1:f3:83:20:b5:
63:2d:c5:01:1c:74:20:5b:f7:58:29:d2:c4:ba:23:2b:b9:a5:
3d:4f:eb:66:bc:8c:90:c7:37:bd:36:71:58:61:01:fb:30:69:
62:a8:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:18 2025 by rpki-client