Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nXUklhDj706jG-TBflcRAE1f76M.roa
File: nXUklhDj706jG-TBflcRAE1f76M.roa (raw, json)
Hash identifier: imRZp1NznG3LrEJjTW7hM/lv/a+Bg80fG3tdHgKNU2M=
Subject key identifier: 9D:75:24:96:10:E3:EF:4E:A3:1B:E4:C1:7E:57:11:00:4D:5F:EF:A3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B24B1C07D0FF9C2F69904000998B0C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nXUklhDj706jG-TBflcRAE1f76M.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210542
IP address blocks: 45.8.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4b:1c:07:d0:ff:9c:2f:69:90:40:00:99:8b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d75249610e3ef4ea31be4c17e5711004d5fefa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:c9:4f:ab:1c:30:90:70:20:6a:4c:a5:cd:
67:c8:fc:45:07:68:7a:16:2f:96:d3:ef:d5:4b:c7:
11:dd:17:57:83:3b:1d:17:c5:77:91:9a:b4:c0:84:
d1:7a:35:62:f3:b5:7e:2c:49:ae:e6:5a:bc:4b:31:
37:f7:9a:2e:f7:d4:c1:b0:89:e3:de:d3:e2:28:a6:
d5:94:9b:42:7e:d9:be:db:10:33:63:58:86:a1:00:
93:71:e9:bd:7e:7a:09:94:43:20:b1:27:1d:95:b8:
45:34:83:a3:f1:09:dd:e3:09:01:6d:c7:eb:fb:10:
2e:1e:dd:dc:2d:e9:b7:a8:60:d3:42:4a:d3:13:3d:
be:79:52:34:33:40:2c:bf:2e:50:f5:83:01:fe:b3:
93:52:f8:8a:8a:d0:5c:24:0a:a7:3f:1e:f6:4e:b4:
a1:db:21:c9:58:a4:84:15:f8:9d:17:7d:d2:c4:64:
7b:a9:06:91:76:35:c6:d1:18:e0:f9:de:ad:7b:cc:
d0:1a:4e:6e:3c:f2:72:c8:17:d7:ca:e6:db:de:d7:
34:fd:a6:98:44:36:56:83:f3:ba:e6:7a:68:7b:7b:
a8:09:89:91:a5:fb:cc:7b:4f:f8:77:f7:6c:11:a9:
b9:a0:91:79:25:f8:39:71:f1:ec:36:2f:b8:d8:75:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:24:96:10:E3:EF:4E:A3:1B:E4:C1:7E:57:11:00:4D:5F:EF:A3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nXUklhDj706jG-TBflcRAE1f76M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:54:cb:51:44:2e:68:b2:66:e7:a2:27:69:66:c0:6b:83:9a:
09:29:3c:5c:b1:a3:00:77:a3:2a:62:e6:89:da:8b:0d:1f:59:
bc:98:03:c6:13:b9:f1:b9:38:1d:93:fd:c2:9a:7d:41:6f:1c:
e6:1d:56:ac:b1:7e:ed:f4:28:1f:ba:c6:cd:aa:d3:e5:4f:f4:
55:21:d7:05:51:49:38:a6:8d:1c:11:15:23:2d:3b:92:20:5f:
26:72:22:4b:0b:ee:0d:40:78:25:3f:56:f3:ba:0c:4e:77:f5:
c9:99:78:a3:69:d5:07:4e:6b:dd:8b:d8:3a:17:e9:9a:26:0f:
f0:f0:f9:e7:e0:9f:6a:15:e1:d3:35:f5:00:98:63:8e:6c:6b:
72:a4:a8:d0:2e:f3:df:b7:75:70:99:3b:a5:c8:be:67:d5:84:
3e:78:af:d3:34:22:74:5d:3b:9a:17:64:84:e1:07:50:08:84:
92:60:05:8b:c5:da:5b:50:e3:5f:47:81:93:7f:8f:de:75:63:
1d:1f:99:90:91:9e:41:25:24:47:1b:9b:55:fc:a8:86:70:d8:
7b:cd:55:d1:79:87:b9:7f:df:29:6f:28:ae:45:55:b2:ff:20:
87:75:33:74:51:63:57:15:16:af:2b:c7:cf:83:73:09:86:58:
e5:45:1b:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhskscB9D/nC9pkEAAmYsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDc1MjQ5NjEwZTNlZjRlYTMxYmU0YzE3ZTU3MTEwMDRkNWZlZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgrJT6scMJBwIGpMpc1nyPxFB2h6
Fi+W0+/VS8cR3RdXgzsdF8V3kZq0wITRejVi87V+LEmu5lq8SzE395ou99TBsInj
3tPiKKbVlJtCftm+2xAzY1iGoQCTcem9fnoJlEMgsScdlbhFNIOj8Qnd4wkBbcfr
+xAuHt3cLem3qGDTQkrTEz2+eVI0M0Asvy5Q9YMB/rOTUviKitBcJAqnPx72TrSh
2yHJWKSEFfidF33SxGR7qQaRdjXG0Rjg+d6te8zQGk5uPPJyyBfXyubb3tc0/aaY
RDZWg/O65npoe3uoCYmRpfvMe0/4d/dsEam5oJF5Jfg5cfHsNi+42HUkRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ11JJYQ4+9OoxvkwX5XEQBNX++jMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvblhVa2xoRGo3MDZqRy1UQmZsY1JBRTFmNzZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi/MA0G
CSqGSIb3DQEBCwUAA4IBAQCNVMtRRC5osmbnoidpZsBrg5oJKTxcsaMAd6MqYuaJ
2osNH1m8mAPGE7nxuTgdk/3Cmn1BbxzmHVassX7t9CgfusbNqtPlT/RVIdcFUUk4
po0cERUjLTuSIF8mciJLC+4NQHglP1bzugxOd/XJmXijadUHTmvdi9g6F+maJg/w
8Pnn4J9qFeHTNfUAmGOObGtypKjQLvPft3VwmTulyL5n1YQ+eK/TNCJ0XTuaF2SE
4QdQCISSYAWLxdpbUONfR4GTf4/edWMdH5mQkZ5BJSRHG5tV/KiGcNh7zVXReYe5
f98pbyiuRVWy/yCHdTN0UWNXFRavK8fPg3MJhljlRRsd
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:17:57 2025 by rpki-client