Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa
File: nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa (raw, json)
Hash identifier: OO+ivo9odQV4h2/ZIswWA1KIA2RuonmMWgLO5WJNfks=
Subject key identifier: 9D:0B:3D:03:F8:54:5A:5F:D2:F3:97:22:3D:25:C7:A8:AB:7F:7C:E4
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019428278B9C07C312778EB7DDD65B996376
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa
Signing time: Thu 02 Jan 2025 17:54:27 +0000
ROA not before: Thu 02 Jan 2025 17:54:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15613
IP address blocks: 213.173.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:8b:9c:07:c3:12:77:8e:b7:dd:d6:5b:99:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d0b3d03f8545a5fd2f397223d25c7a8ab7f7ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:e0:cf:c3:76:51:f3:1b:11:04:ba:c3:3d:
d5:5f:34:18:6f:4c:19:9a:1d:bc:1b:25:32:f9:d1:
d8:83:51:e5:27:5f:a9:31:dc:d2:bc:fa:66:59:7b:
33:01:53:33:1c:b3:e0:27:85:af:71:60:04:ab:d4:
ca:3e:50:15:32:31:05:67:01:5a:46:7f:49:64:7d:
7b:60:26:bb:80:48:f1:a9:41:81:48:13:14:1e:6b:
41:79:b4:f5:7a:e3:a1:8c:90:dd:b7:4e:11:a1:67:
74:86:53:89:9b:dd:fa:4b:7d:7c:69:e7:a6:08:e3:
56:82:25:be:d4:35:c5:3c:e2:f7:6f:e8:9b:68:8a:
48:e5:3b:6f:03:71:07:17:7f:d9:45:66:f6:56:6c:
67:33:9c:4c:21:46:a4:2e:4b:67:8b:04:bb:7d:e5:
fd:4c:8e:89:d4:1d:ff:47:78:ca:ac:37:83:44:e6:
cd:5c:a4:96:f9:2b:d8:b8:71:5a:ae:eb:f6:9d:bb:
75:e2:62:b1:d4:72:79:51:d1:9c:cc:45:98:f6:c8:
e0:c1:74:53:d4:69:92:ce:2b:58:24:2a:fa:97:9e:
ee:71:6d:8f:6f:93:3f:ca:20:de:c3:a2:7b:35:ba:
15:12:f0:34:a1:39:fa:85:c4:7b:de:34:12:87:73:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0B:3D:03:F8:54:5A:5F:D2:F3:97:22:3D:25:C7:A8:AB:7F:7C:E4
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.171.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3a:45:59:52:23:eb:ab:b2:5a:e0:18:d8:ec:8d:05:89:11:
59:8c:dc:fe:ae:83:ec:e4:50:2b:c5:ac:bb:1f:6c:8b:15:88:
56:60:ac:0f:9e:70:9d:e4:29:41:a3:61:df:13:53:fa:31:73:
70:84:24:d3:f0:28:bd:e9:2d:e6:65:99:53:37:fe:08:87:b9:
4f:c0:54:0e:95:91:de:da:27:fd:3d:8d:d8:a1:59:e3:99:d9:
64:fc:cf:a1:2e:59:41:01:e2:17:7a:87:72:5e:ce:48:4c:4c:
c2:67:01:0c:23:5b:37:a0:cd:2e:a1:06:ab:97:f4:29:8a:88:
2a:65:0f:1a:0b:19:ef:17:4a:5c:31:6a:bb:76:08:fe:80:00:
26:74:ed:2d:ca:f0:96:2a:7b:c7:46:ca:2f:9f:64:4c:7e:09:
b2:97:2b:e1:74:aa:3e:65:0f:6f:43:e0:90:3f:ab:5a:3d:c1:
5b:b7:ef:45:25:9e:27:9e:3d:b6:dd:47:fb:18:3c:d1:ef:08:
23:1b:81:24:bd:1a:a0:6f:45:b4:5d:2d:d5:cf:92:e5:92:f0:
1f:b6:13:55:36:52:27:9d:8c:55:3e:36:51:23:ee:e2:5e:d5:
3e:09:98:d4:b1:47:d2:2f:c7:2a:15:8b:7b:19:3b:ef:32:96:
fc:cb:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:02 2025 by rpki-client