Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nGF20FUcQWdtYp4v5OLXJVOY_Js.roa
File: nGF20FUcQWdtYp4v5OLXJVOY_Js.roa (raw, json)
Hash identifier: N+Sh44ij61CKQLt8+IzDA5FzLvpBJtymk2/Lsc08c1U=
Subject key identifier: 9C:61:76:D0:55:1C:41:67:6D:62:9E:2F:E4:E2:D7:25:53:98:FC:9B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01971FAEBDA37F5FF36376D1FFE0F59C696E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nGF20FUcQWdtYp4v5OLXJVOY_Js.roa
Signing time: Fri 30 May 2025 05:33:54 +0000
ROA not before: Fri 30 May 2025 05:33:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205220
IP address blocks: 194.87.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1f:ae:bd:a3:7f:5f:f3:63:76:d1:ff:e0:f5:9c:69:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 30 05:33:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c6176d0551c41676d629e2fe4e2d7255398fc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:f0:71:4d:ca:3f:c3:17:4b:cf:4b:ee:d6:
d7:d4:4b:6d:81:28:9b:b6:ef:2e:f9:8b:5e:f8:54:
28:52:78:70:da:ee:03:d6:29:40:c4:11:7c:1a:f9:
21:2e:21:f3:28:d8:6c:0a:f6:bf:3d:3a:39:09:41:
00:60:97:80:b6:31:51:9d:8e:ca:fd:bb:1b:27:58:
57:41:c1:c4:73:64:98:1d:03:8f:9e:c5:c4:d7:49:
da:90:a1:ea:f9:4f:10:01:b5:45:e9:71:5e:79:75:
89:4c:5a:40:eb:7a:d2:d0:a9:ca:b4:34:f3:54:ea:
0f:fa:7c:54:2a:58:2d:6f:cf:60:d7:47:d9:f4:d0:
08:c9:d5:e7:6c:e1:34:bf:65:9c:64:cf:0f:a9:85:
05:7a:64:f1:db:82:01:ad:66:85:77:48:37:3e:e3:
d9:f2:7b:bf:7d:ff:5c:4c:c1:93:ab:40:ca:59:33:
02:5e:84:37:c6:b3:b9:42:85:4a:d5:eb:bd:69:65:
c9:41:0f:33:59:f9:bb:3e:f7:67:5f:57:e3:c4:ff:
4b:48:ef:c1:b6:48:90:08:ec:e6:a9:9b:75:8d:f9:
e9:af:41:8b:64:9d:ca:0d:16:ca:f3:b7:1f:b4:5c:
3b:73:77:7d:68:2c:11:c0:b0:32:82:0c:21:af:17:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:76:D0:55:1C:41:67:6D:62:9E:2F:E4:E2:D7:25:53:98:FC:9B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nGF20FUcQWdtYp4v5OLXJVOY_Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.152.0/24
Signature Algorithm: sha256WithRSAEncryption
34:15:8f:6b:62:a3:18:4e:bd:e4:08:4e:eb:b6:73:4a:24:6f:
34:c6:e8:3a:a0:a7:fd:9c:b1:44:f1:11:06:22:cf:4b:7c:5c:
2a:59:a1:68:2e:d8:b3:23:cf:13:c2:0c:d6:bf:36:92:92:d5:
6b:20:6b:c5:b2:2b:39:2b:02:57:45:04:20:26:27:e5:f5:f1:
14:ea:06:1b:92:d7:49:42:c2:21:80:58:14:3c:0d:8c:9f:11:
60:8c:fb:9e:32:18:f9:91:60:4a:07:ac:5b:3d:6e:ad:4f:fe:
95:e6:4f:33:f6:9f:c5:65:6f:69:ff:e6:ef:45:84:5a:39:2c:
0c:f4:d7:55:b5:3e:16:cd:db:f9:fb:83:32:6b:92:93:e4:b4:
9c:6d:72:ec:90:31:af:72:78:ce:9f:b4:82:2c:80:24:8d:5f:
fa:4b:08:b3:07:75:b6:56:da:53:56:d8:cd:4d:7a:8e:90:32:
57:06:30:e6:22:26:20:39:b2:22:e4:85:53:e6:4c:f4:c5:d8:
b0:17:4f:f8:aa:b8:6e:a2:30:5d:70:39:78:16:64:7c:ae:ad:
58:f6:97:98:8d:ab:1e:8c:89:46:44:64:6e:4f:aa:49:ce:38:
f7:c5:26:a5:03:23:58:17:7f:ac:3d:e4:14:83:fc:b6:9a:73:
e2:72:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:15:27 2025 by rpki-client