Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/_Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa
File: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (raw, json)
Hash identifier: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=
Subject key identifier: FC:D8:A4:D0:82:CC:5A:26:3E:2E:48:37:79:21:58:C7:5C:33:11:F0
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019652F981F6B3C6BED20A3B8D2AB3108A7F
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/_Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa
Signing time: Sun 20 Apr 2025 11:33:25 +0000
ROA not before: Sun 20 Apr 2025 11:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 46.29.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:f9:81:f6:b3:c6:be:d2:0a:3b:8d:2a:b3:10:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Apr 20 11:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcd8a4d082cc5a263e2e4837792158c75c3311f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:4d:d9:8d:62:f0:83:a6:e7:f9:23:98:b6:
63:3c:43:e5:08:7c:c1:a9:92:99:5a:3b:9f:ae:25:
db:08:5e:fc:38:d6:e5:80:7e:f6:21:2a:73:1d:45:
cc:29:18:f7:cb:0d:2b:59:09:8e:81:a0:c0:c3:d3:
3d:2a:95:ea:e6:42:27:cc:42:9c:91:dc:f9:e6:73:
d9:89:63:b1:36:58:e1:e1:1a:a8:c3:6f:8d:b7:91:
7e:d5:e1:21:f9:b9:42:5a:76:c7:1f:da:dc:59:5f:
47:89:dc:71:6e:df:01:db:86:2d:49:7e:e6:5a:15:
e5:34:89:50:34:15:16:79:83:2b:07:a2:d6:c2:ee:
d0:a5:66:bb:ba:22:49:5c:e7:24:f3:18:8b:6d:0d:
1f:67:cf:a2:17:03:ef:29:64:e5:8b:58:56:4a:16:
34:80:9f:56:5a:77:af:82:fc:ea:1a:f7:a7:f4:6f:
31:96:99:51:9f:e5:19:01:f1:21:0a:f2:9d:ac:45:
d3:33:08:28:41:9e:d9:57:c2:b8:e6:a1:dc:37:f8:
6d:ea:0d:7e:bd:84:af:c3:c4:5f:9e:fb:21:64:76:
5b:e9:bb:cc:17:29:69:5f:2c:68:d8:c1:b0:dc:bc:
d6:59:23:05:e9:d2:5e:4a:74:fb:e6:de:bf:7f:1f:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D8:A4:D0:82:CC:5A:26:3E:2E:48:37:79:21:58:C7:5C:33:11:F0
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/_Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:70:9e:97:87:7c:5e:34:bc:ff:98:34:bd:95:d4:b1:8f:ea:
6a:f4:5e:3e:a5:09:d6:ff:b9:64:d8:a6:09:dc:77:b9:64:37:
e5:34:9e:eb:db:7f:dd:05:47:00:75:60:62:b8:d8:bd:12:f6:
c0:91:31:07:62:fc:cc:43:b0:a8:71:ce:72:13:12:18:8c:ba:
ff:9a:ef:ff:be:a7:de:d7:dc:36:7a:14:42:39:92:f2:d2:dd:
25:98:c2:93:48:0f:4b:f5:ea:3b:57:c9:e6:a4:5f:e5:1a:cd:
d3:80:0f:6a:5c:2f:39:ad:f0:15:84:0b:84:fd:13:cd:83:07:
e9:d7:a5:00:f7:70:51:67:b6:70:40:dc:da:d0:70:06:d8:d4:
bd:cf:7f:b7:dc:17:99:ab:98:61:06:5b:bc:81:20:be:fa:eb:
3a:1f:13:64:1b:38:a6:aa:a0:ed:99:6b:67:39:0d:71:a4:13:
cd:a4:f8:39:8a:0c:c3:c4:e1:bf:72:f3:36:1a:c5:9b:db:46:
49:78:05:a3:8e:00:b5:0b:41:0d:ce:5a:6c:dc:85:f0:30:90:
25:c1:72:8e:90:ed:58:58:d1:54:7d:db:08:de:70:35:26:45:
f4:8b:9c:f1:83:73:2a:43:a9:34:4d:46:11:65:98:88:5f:76:
94:a0:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:56 2025 by rpki-client