Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ny2gmGT-f4a2P9PDdE8ohONVYfg.roa
File: ny2gmGT-f4a2P9PDdE8ohONVYfg.roa (raw, json)
Hash identifier: Bq90Xt7osLutRYBJIy/9SFuFaxmOGhKtfshBmyHo1P0=
Subject key identifier: 9F:2D:A0:98:64:FE:7F:86:B6:3F:D3:C3:74:4F:28:84:E3:55:61:F8
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01957AB4BD724F8949B032B2E7A19E4405AA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ny2gmGT-f4a2P9PDdE8ohONVYfg.roa
Signing time: Sun 09 Mar 2025 11:40:20 +0000
ROA not before: Sun 09 Mar 2025 11:40:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 2a0c:9a40:9200::/40 maxlen: 48
2a0c:9a40:9f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:b4:bd:72:4f:89:49:b0:32:b2:e7:a1:9e:44:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Mar 9 11:40:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f2da09864fe7f86b63fd3c3744f2884e35561f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:60:18:5f:89:bd:b0:a6:72:61:e5:9a:08:
58:c8:f5:ae:d8:36:b6:62:01:17:25:a8:e2:40:95:
00:19:53:8a:f9:4a:fe:90:b9:3d:00:06:1b:2f:38:
28:b2:06:2b:54:b8:43:ec:5c:65:cd:e4:c4:e1:96:
c8:6d:f5:9a:64:20:a6:4d:b4:16:2b:9a:23:39:7f:
8c:31:9d:0b:75:c9:44:7c:fc:8f:b7:0f:21:ee:20:
01:04:21:88:f2:ae:33:b6:65:e7:82:59:81:12:f0:
46:c6:58:5d:e8:75:09:e4:19:53:68:46:64:2c:35:
29:12:8e:8d:8f:46:a5:f9:68:8b:45:53:58:6e:6d:
29:b2:f8:02:9b:32:4c:b5:c2:9f:71:cb:da:c4:e1:
a3:79:30:fa:e1:b1:62:40:be:7b:e6:79:f5:2e:83:
db:cb:61:09:bd:e9:74:5f:81:0c:70:b5:c0:a4:6e:
6b:50:09:af:61:2d:13:85:1c:99:d0:80:2f:e6:62:
ef:99:03:1c:23:6f:81:ed:38:29:e1:6f:20:14:df:
7d:e6:4a:6a:c4:f3:cd:9f:05:18:b6:9e:a7:75:7c:
4a:05:21:b3:dc:2e:75:7f:2e:47:d4:67:76:15:84:
e5:a9:e2:86:44:9f:ae:31:eb:68:13:05:44:dc:7d:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2D:A0:98:64:FE:7F:86:B6:3F:D3:C3:74:4F:28:84:E3:55:61:F8
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ny2gmGT-f4a2P9PDdE8ohONVYfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9200::/40
2a0c:9a40:9f00::/40
Signature Algorithm: sha256WithRSAEncryption
77:59:ce:e6:c0:03:6d:a6:f0:b7:f4:c8:4c:47:18:8e:8b:dd:
ff:2e:34:b8:90:4c:12:63:5a:75:47:02:0f:28:a5:f2:ca:7d:
be:ad:da:d8:45:a9:59:2b:9a:6f:d7:3e:a8:3f:8a:63:bf:94:
d7:b7:71:94:37:25:6f:24:b0:7a:42:7f:d0:c0:67:92:48:f0:
45:45:3e:43:6a:cd:a1:47:ff:b5:6c:05:00:ed:15:4b:4e:8b:
78:ba:89:67:07:d4:cf:cc:b7:20:f5:50:ec:92:92:c5:e2:44:
6e:df:9d:b6:c7:c4:30:45:f1:16:53:16:15:56:cb:08:b5:fb:
fa:e7:da:03:3c:b5:6e:1d:39:b7:a3:85:b3:c2:2d:49:2c:7f:
e4:f9:bd:b7:fa:7b:b1:39:c5:58:af:7d:18:0a:4a:1a:d3:e9:
3f:74:a5:ba:ea:25:d6:c5:07:23:77:79:12:03:11:fb:c4:8b:
ad:1a:57:01:b2:21:01:ac:6b:15:da:79:a2:55:4d:c0:8e:2c:
6d:ef:76:80:9a:2b:9b:20:69:3d:92:ed:66:73:9f:db:9b:96:
75:a3:ce:fa:9f:27:e3:05:77:b4:46:d2:74:98:f1:d9:e1:f5:
4d:7a:8e:5e:0b:a8:12:55:ff:aa:dc:32:67:6e:f7:47:61:ff:
e5:83:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:20 2025 by rpki-client