Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/N9ZAaiCE9aK-MVoBAkGyVQBVSz8.roa
File: N9ZAaiCE9aK-MVoBAkGyVQBVSz8.roa (raw, json)
Hash identifier: Lgl9Qg3vfXwyIJqunbOTrkAFiRdS7QjwGWUohli4wbU=
Subject key identifier: 37:D6:40:6A:20:84:F5:A2:BE:31:5A:01:02:41:B2:55:00:55:4B:3F
Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Certificate serial: 01946AF71AADC5179D4380194EBDAA97B489
Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/N9ZAaiCE9aK-MVoBAkGyVQBVSz8.roa
Signing time: Wed 15 Jan 2025 17:16:06 +0000
ROA not before: Wed 15 Jan 2025 17:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213939
IP address blocks: 62.164.197.0/24 maxlen: 24
2a01:e340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:f7:1a:ad:c5:17:9d:43:80:19:4e:bd:aa:97:b4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Validity
Not Before: Jan 15 17:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37d6406a2084f5a2be315a010241b25500554b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:69:65:23:e1:6e:44:be:1d:86:4c:bb:71:
a0:45:f2:05:a7:68:ce:7a:44:b7:bf:a2:0d:cf:aa:
fa:3a:fa:5d:4e:1b:cb:b9:79:8e:35:18:d2:b4:ac:
19:c1:83:d7:28:39:92:7b:98:4c:09:b8:f4:80:e4:
b1:b3:6d:10:83:29:00:c9:10:b6:f9:3b:3c:c0:5a:
6a:d1:45:fa:63:a4:c5:a3:e6:23:a0:df:a2:76:cc:
43:58:a8:cb:67:2a:1e:ce:f8:8f:85:2f:78:bc:d5:
ce:65:32:17:38:07:a9:b2:51:7d:b6:b7:2f:40:f6:
23:b0:96:49:c7:6f:2e:b0:34:8a:69:b0:7b:81:64:
9a:1a:f9:90:c2:4a:36:f5:4d:52:55:c9:56:45:68:
0c:c8:15:01:ca:f7:6e:2c:4e:8f:31:92:11:e4:33:
d7:2c:3e:ec:af:96:18:0e:50:c6:54:67:d7:36:9c:
f1:8f:77:e3:63:0f:7c:43:c0:32:b4:f8:1f:f8:87:
4f:ae:c2:d3:17:b5:eb:bb:3a:32:16:43:d4:a5:d1:
2b:76:fd:03:dc:92:41:48:f6:ee:e2:c8:4e:3b:34:
1c:14:63:61:4f:c6:a3:e9:58:5d:6c:7a:83:02:bc:
fe:16:37:84:08:7d:98:71:86:06:a0:13:ce:92:d6:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D6:40:6A:20:84:F5:A2:BE:31:5A:01:02:41:B2:55:00:55:4B:3F
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/N9ZAaiCE9aK-MVoBAkGyVQBVSz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.197.0/24
IPv6:
2a01:e340::/29
Signature Algorithm: sha256WithRSAEncryption
95:38:45:6d:a9:e7:76:0c:42:3c:8f:50:e5:a9:42:b8:5b:e3:
0a:dd:37:5b:d1:f4:78:85:52:f4:9d:c5:9b:bb:b8:0d:57:39:
6b:52:c2:eb:98:d5:07:ef:dd:4a:82:a4:b9:14:fb:d3:30:5a:
c3:f9:8f:1f:fb:c1:21:b3:02:69:7c:1b:6b:8d:42:26:27:a7:
af:04:9a:dd:ca:dc:53:d8:63:1d:e0:9d:45:dc:c9:98:e9:26:
e0:0a:93:c0:cf:bc:07:1c:4b:50:79:d0:53:ac:d4:00:8f:9c:
1a:a4:bb:55:89:bd:b6:d6:01:5b:88:d2:04:fe:b8:37:28:a8:
28:81:8e:50:03:d5:47:49:e1:8f:fc:dc:8b:b2:35:dd:5e:f0:
d6:9c:78:d3:4f:7a:36:cb:25:a8:82:70:4d:9f:2d:30:34:e9:
66:ed:60:53:54:78:75:5e:86:ca:fb:f4:9d:f1:46:9b:f5:e9:
7f:ae:a6:c6:4e:c5:e0:5d:11:4b:32:76:bc:77:b6:5c:71:76:
e6:c5:c6:69:11:57:09:cb:64:19:05:2f:35:2f:b9:fd:fe:33:
35:24:a0:24:20:90:d4:14:70:88:9f:3a:87:1f:9e:c2:bc:c5:
26:5a:0a:ed:ba:1e:55:44:93:0f:bb:12:ba:19:d3:9d:fa:47:
72:95:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:18 2025 by rpki-client