Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa
File: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (raw, json)
Hash identifier: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=
Subject key identifier: DF:CF:CD:CA:FC:EA:C5:DD:0F:BC:DB:9C:39:1D:62:C2:68:D3:43:FA
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019421442C4F6B6B5A60A94BE2714E9D90A3
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204500
IP address blocks: 195.72.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:4f:6b:6b:5a:60:a9:4b:e2:71:4e:9d:90:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfcfcdcafceac5dd0fbcdb9c391d62c268d343fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:05:b9:a7:94:b8:50:19:74:17:3d:53:20:
bc:b8:07:17:63:f1:2b:bc:94:e9:0f:7c:d0:57:7b:
d9:b3:c7:37:f0:f0:f8:eb:a7:ee:1e:07:44:38:ef:
e9:ac:d1:3f:0d:99:70:08:e9:7d:e7:f1:b3:00:4f:
0e:4f:7c:65:37:62:31:20:93:8d:5c:41:12:f4:04:
2b:5b:9c:98:0b:47:3c:8c:07:6f:12:ad:39:ee:0d:
37:7f:32:8d:14:5c:b5:61:03:e4:27:4f:e8:24:61:
a7:1f:9e:98:9b:c1:ea:92:65:49:cb:ce:65:61:ee:
e3:e0:be:61:37:33:6c:0e:0b:73:21:32:11:8b:d0:
aa:4f:5e:34:4e:47:51:4c:aa:e1:5b:69:60:23:7b:
1a:15:2e:e2:ac:24:09:79:4f:93:e1:bb:bc:24:e0:
09:fa:fd:45:c6:cf:e2:11:ba:4f:67:e7:ed:8e:db:
cc:56:3c:48:67:93:cd:88:1a:87:8a:15:d9:38:d0:
c7:84:a2:dd:91:0e:94:bb:6d:a4:33:de:e0:36:26:
94:bf:3d:85:cc:98:42:9a:aa:e7:3a:fa:e2:29:3e:
cf:4a:bf:ab:32:49:a0:17:9f:f4:32:3e:58:b6:17:
69:38:4a:f8:e4:27:60:b3:42:20:53:e7:45:87:65:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CF:CD:CA:FC:EA:C5:DD:0F:BC:DB:9C:39:1D:62:C2:68:D3:43:FA
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.119.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6f:64:43:6e:ef:35:29:5f:e3:c6:a8:bb:77:c3:3a:b1:e0:
67:a5:58:61:24:8d:0b:f3:f7:c7:ea:14:dc:a5:50:c4:74:71:
3d:22:6f:84:50:f0:dc:a0:b4:07:e8:f4:99:e7:34:21:9d:b0:
4c:c3:32:68:29:11:f6:76:5b:20:48:33:82:cf:09:d8:21:93:
fa:c6:8d:07:21:d9:1d:3c:74:fb:e4:45:ba:d5:33:9c:a2:ad:
6f:bd:f4:43:a8:50:b7:06:57:69:c4:35:13:b7:7c:5d:50:f8:
d9:48:e0:ab:71:c1:99:c3:86:96:33:ce:16:38:92:2c:5b:80:
d8:64:ea:fc:a5:fb:76:b4:b3:8c:d7:c0:a9:7d:a9:82:8e:79:
64:2c:98:6e:00:14:f6:40:1f:6c:5c:28:ca:92:a7:25:65:8f:
c9:15:2f:56:d4:04:6d:cf:56:e3:5a:0e:4d:0f:ed:2c:95:38:
7e:0a:18:63:05:52:3d:3c:16:ed:fe:81:35:13:bf:2c:14:2a:
d1:48:46:8a:8c:05:c3:11:6e:e0:60:03:f1:d6:65:02:c4:b5:
4f:e2:6f:c8:40:e5:c4:4e:41:f9:43:b7:67:19:7d:a8:2b:ac:
96:73:da:64:f9:04:27:e1:13:eb:06:af:a9:9d:a6:47:75:05:
ad:a7:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:57 2025 by rpki-client