Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa
File: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (raw, json)
Hash identifier: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=
Subject key identifier: 9E:D8:9F:E8:94:33:2A:4B:75:E5:95:C9:7E:49:3C:3A:3F:1C:61:FD
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019427486350805F3A9040B9DB1DF969D64F
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49034
IP address blocks: 185.39.56.0/22 maxlen: 22
193.218.95.0/24 maxlen: 24
2a00:f6e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:63:50:80:5f:3a:90:40:b9:db:1d:f9:69:d6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ed89fe894332a4b75e595c97e493c3a3f1c61fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:eb:4b:56:2e:9b:bc:29:e1:8c:71:be:48:
d8:bd:5f:89:37:58:97:2c:c1:10:c7:5e:01:e1:84:
3b:50:3f:90:16:a5:1b:7a:8d:ee:b9:44:75:c9:6f:
57:a7:58:54:d2:b5:ab:0d:42:59:74:12:ce:53:0d:
f4:b5:80:b4:57:9c:89:29:5b:3b:ba:6b:37:34:14:
d3:b8:ce:77:90:40:ea:fe:84:d7:85:79:5d:d5:7c:
94:9f:dc:89:f8:7e:84:f1:18:ce:5d:1f:d3:36:93:
9d:47:88:49:80:f8:0c:6e:cf:66:4b:0c:fa:a4:8c:
a7:e2:ff:58:ca:19:07:95:6d:43:62:72:57:fa:ab:
86:a9:2b:b3:2a:8c:e4:07:ce:b3:62:37:3c:46:74:
c2:c0:1d:ef:21:38:5a:17:7c:9b:ad:e8:ba:e8:65:
7d:ab:7a:07:7e:13:70:0e:c5:c8:9e:f1:6a:5f:98:
04:85:8a:e3:db:e7:39:cc:05:05:2a:d2:1a:f3:96:
d8:1a:a4:43:66:84:07:44:11:f2:75:2e:07:3f:41:
8d:40:ea:e3:9a:ad:a7:72:4a:ba:14:c3:95:8a:6d:
3c:34:42:39:e4:ca:ad:43:2a:80:80:fd:08:8f:7f:
c7:1c:e0:1b:25:88:79:2a:b5:6a:92:0d:21:0f:d2:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:9F:E8:94:33:2A:4B:75:E5:95:C9:7E:49:3C:3A:3F:1C:61:FD
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.56.0/22
193.218.95.0/24
IPv6:
2a00:f6e0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:e2:96:6b:5b:bb:9e:d4:3c:ac:d8:06:82:15:ad:f7:0f:83:
6b:5a:3b:1e:26:f2:dd:8a:37:b7:c8:86:64:3c:c0:1d:66:d8:
c5:ca:65:50:85:95:05:e3:5d:de:6f:f7:cd:cf:8f:b7:fb:d8:
63:c1:a8:ab:ca:9a:71:e8:55:f0:4f:8e:c1:bd:17:00:23:0f:
fd:72:e3:3f:4b:43:7e:5a:13:b3:12:c5:cd:31:b3:a0:6c:eb:
33:e4:6b:4c:18:4e:a8:1b:91:06:20:e8:4e:8c:e2:cb:8b:09:
06:ec:10:87:e9:0c:17:2a:70:77:b2:90:2a:ea:cf:e1:52:3b:
5f:5b:ec:f3:8c:63:94:41:27:57:51:97:e2:a2:c7:8b:86:04:
90:95:00:77:f1:af:f0:6b:c5:1a:78:25:86:a0:88:19:a3:f9:
3c:73:7d:42:ee:c9:bb:d9:c8:5d:7c:9d:67:34:aa:99:22:bd:
81:b9:72:1b:12:f6:f9:ea:fe:fc:cf:5c:ab:29:a8:31:be:a9:
32:15:bd:8c:83:f1:99:ec:88:a2:ef:bb:b9:54:90:02:aa:2c:
5f:36:bf:50:f6:5d:d4:f2:1e:cc:38:c4:ae:ae:0e:2b:ae:d1:
8b:37:d6:0e:6d:50:c5:85:c0:0b:25:b8:be:ba:6c:4e:ee:b2:
11:39:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:49:46 2025 by rpki-client