Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nFeVD7jUuEK2OPh_GZrNiLVKp24.roa
File: nFeVD7jUuEK2OPh_GZrNiLVKp24.roa (raw, json)
Hash identifier: a3yRGgiAtxGT+PrGjot7aNwYoQ2mju9vLcDD3SzXpDg=
Subject key identifier: 9C:57:95:0F:B8:D4:B8:42:B6:38:F8:7F:19:9A:CD:88:B5:4A:A7:6E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01980D11D4D646C4BA6F76EA7DCA1ECB8217
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nFeVD7jUuEK2OPh_GZrNiLVKp24.roa
Signing time: Tue 15 Jul 2025 07:52:09 +0000
ROA not before: Tue 15 Jul 2025 07:52:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 213.210.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:11:d4:d6:46:c4:ba:6f:76:ea:7d:ca:1e:cb:82:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 15 07:52:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c57950fb8d4b842b638f87f199acd88b54aa76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:bc:f0:6d:16:ea:c7:51:a9:26:50:a9:86:
14:58:ed:69:ca:53:3e:7e:39:4a:3b:25:b8:c1:f8:
7a:14:be:ab:19:f2:7b:2c:ca:27:42:af:04:39:90:
04:24:5b:7f:d6:72:bb:cf:be:fc:9f:b4:2e:08:97:
4c:f9:63:dd:52:31:36:f5:07:1a:2c:d7:9c:b1:b5:
9f:81:59:b9:ff:c2:a8:73:4b:67:33:cc:d1:02:47:
ab:cd:3d:eb:9e:82:04:e0:62:e9:68:2e:d9:a0:99:
77:fa:d9:84:98:20:66:c7:d1:bf:2b:8d:a5:eb:f5:
ab:0a:96:30:34:28:23:49:7b:4a:dd:42:9b:93:1d:
83:c3:59:43:44:c4:e8:b2:f2:e2:06:54:33:74:3c:
f9:57:7b:76:ee:e5:94:f7:9d:bb:71:76:67:a3:00:
59:57:df:04:8a:a8:08:f9:57:f2:4c:55:2b:69:74:
71:b6:39:86:fc:e8:f5:52:26:e4:b0:02:64:de:da:
b5:ad:b1:8a:d6:11:dd:f1:bd:a8:4d:a1:c9:25:05:
f6:c0:9b:71:5a:b4:29:8a:28:3e:4a:8a:73:de:0e:
17:c2:cf:ab:2c:fc:29:0b:72:1e:ce:1f:9f:54:21:
33:c6:37:81:66:6d:a7:19:ca:23:21:e9:1b:25:04:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:95:0F:B8:D4:B8:42:B6:38:F8:7F:19:9A:CD:88:B5:4A:A7:6E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nFeVD7jUuEK2OPh_GZrNiLVKp24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:99:a8:9d:87:fc:b9:85:77:f5:c3:50:72:98:c1:bd:a0:9e:
bd:d0:23:ba:eb:30:07:4e:0b:58:55:3c:67:5c:b4:2f:40:63:
ab:50:d6:38:48:c6:2d:31:6a:2b:a0:f1:94:16:2f:de:db:34:
a2:86:2a:3b:a9:3a:47:ba:f4:98:36:4a:a8:40:9f:50:85:3c:
5b:60:ba:c0:f0:f9:85:2e:85:7c:57:69:59:3a:09:e1:e4:b3:
eb:cf:1c:46:b0:a9:12:80:fe:de:b9:71:f1:06:e4:39:82:fa:
99:e4:9c:98:fa:dd:6b:f1:98:f2:8c:04:f5:0e:4c:35:e8:4d:
ee:f5:08:0a:33:4c:e9:e9:5b:6b:63:48:ad:6f:d6:07:bf:03:
e0:7e:79:d1:c7:b0:b4:be:f3:d9:74:f1:63:7a:af:11:79:5f:
dc:68:04:a8:1d:60:e7:c3:89:b4:51:f1:1c:04:bc:a1:5b:a3:
df:40:8b:26:a1:a8:28:86:06:37:bd:74:84:56:d0:42:8c:b8:
d0:ed:90:45:6d:b2:aa:54:58:cf:ca:c5:97:1a:b9:9b:8a:bc:
42:60:0f:3b:5e:04:e8:ee:9e:33:6c:1d:e6:6f:7e:6b:d3:20:
f2:ea:3b:5a:b2:df:4a:94:e3:80:a1:8b:81:4e:00:31:27:a5:
7e:4e:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:01:32 2025 by rpki-client