Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/nAYOjxNzO5dRvt8_CRbGHTd4KFs.roa
File: nAYOjxNzO5dRvt8_CRbGHTd4KFs.roa (raw, json)
Hash identifier: Uo4ERWbv/tv9kXt93hPjc50gZuYNeg1Dqy1Fb1Nzfa4=
Subject key identifier: 9C:06:0E:8F:13:73:3B:97:51:BE:DF:3F:09:16:C6:1D:37:78:28:5B
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0194266C0BE62AA788D2E0CDEC93BEB150EE
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/nAYOjxNzO5dRvt8_CRbGHTd4KFs.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51809
IP address blocks: 88.97.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0b:e6:2a:a7:88:d2:e0:cd:ec:93:be:b1:50:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c060e8f13733b9751bedf3f0916c61d3778285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:92:45:d7:d1:ee:c1:b7:05:79:86:78:44:
78:cb:53:b1:9e:5e:a8:56:8e:36:c1:b6:38:a0:0f:
b3:57:de:0e:bd:12:49:0f:3f:bf:1f:dc:f5:62:c2:
e7:6d:fd:50:ab:00:d7:07:24:48:6d:57:e0:02:ab:
83:0b:dc:0c:88:d5:e5:85:1c:0c:64:48:40:35:57:
31:8d:ef:ce:dd:dc:87:d7:cd:22:e9:cb:fe:c2:7e:
f9:12:5b:60:1d:e4:c4:07:64:52:54:12:a3:63:d6:
36:a7:4b:0c:c3:9c:39:03:aa:61:e8:6c:76:36:61:
12:8f:60:ed:74:06:e5:ac:4c:45:2d:37:8e:2b:9e:
12:3b:ce:6e:51:91:1f:6b:69:ea:c5:f9:e3:c5:f7:
9b:fc:63:81:5e:97:07:b5:7e:d1:55:d1:e3:6c:79:
d4:9b:e2:05:9e:55:f0:65:8c:26:7f:6e:51:8f:30:
86:14:d4:ad:75:42:44:c1:da:f5:88:71:fc:b4:02:
c2:74:26:92:ad:c3:06:17:37:82:92:d9:5c:b5:b7:
e8:ae:3c:d9:1a:6d:df:01:53:66:95:f1:68:29:43:
6d:f6:22:a8:cd:fa:b9:c4:7f:81:1e:c2:bb:6c:75:
0f:f1:35:f7:cd:98:49:f0:04:74:a0:ef:43:7c:c3:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:06:0E:8F:13:73:3B:97:51:BE:DF:3F:09:16:C6:1D:37:78:28:5B
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/nAYOjxNzO5dRvt8_CRbGHTd4KFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.97.160.0/21
Signature Algorithm: sha256WithRSAEncryption
11:5f:1e:b3:7e:39:a9:bf:72:ec:46:6c:10:48:d8:27:34:f9:
a6:e6:06:5b:a6:60:9d:8c:d1:fb:4a:7c:01:0c:21:95:98:b5:
c4:73:b2:b8:a7:3d:29:af:3a:96:d1:1d:27:96:87:f9:3d:85:
99:c2:9c:e6:f4:ee:f7:19:ca:4c:3e:23:cd:b5:0b:b1:b8:17:
c9:92:7c:4e:ff:c7:8e:47:1f:2c:7b:77:59:80:95:c4:72:fe:
54:7a:3f:81:13:20:c1:7c:10:27:a5:53:73:39:a0:e4:dc:19:
03:a4:1a:3d:28:1b:63:94:5e:6b:85:ab:5a:f2:47:65:88:d9:
b4:4d:fe:93:3f:3c:a3:d3:3e:e7:c8:9f:c7:a7:4e:5e:46:5b:
87:bc:af:a5:33:9d:dc:ee:30:ce:14:f0:32:81:61:68:f4:5e:
c2:83:a2:41:72:fb:ef:57:7e:73:d6:30:5f:4e:20:88:3f:dc:
6b:a7:0a:6d:73:96:ec:dc:9f:94:d4:93:df:7e:71:a2:11:91:
3d:1c:01:ab:c9:30:c8:37:be:90:38:ec:cb:89:fc:c1:76:57:
10:18:73:f7:af:68:f7:90:d6:f8:47:04:0a:de:db:da:32:ab:
50:3e:2c:2e:6a:60:e9:e5:0c:70:a0:7e:b2:1d:6a:03:b6:94:
c8:27:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:18:23 2025 by rpki-client