Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/NqFx58VddClRGkaq4vH0spxB4sY.roa
File: NqFx58VddClRGkaq4vH0spxB4sY.roa (raw, json)
Hash identifier: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=
Subject key identifier: 36:A1:71:E7:C5:5D:74:29:51:1A:46:AA:E2:F1:F4:B2:9C:41:E2:C6
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 01941FFA48D8CC9F275BF9F4B96BD5430B55
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/NqFx58VddClRGkaq4vH0spxB4sY.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210838
IP address blocks: 109.234.78.0/24 maxlen: 24
2a11:9c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:48:d8:cc:9f:27:5b:f9:f4:b9:6b:d5:43:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36a171e7c55d7429511a46aae2f1f4b29c41e2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:fc:a1:15:21:61:cb:72:d3:5b:7c:97:b8:
ed:be:5b:89:9e:f3:fd:71:82:88:99:a0:c2:ff:be:
9a:32:42:c7:6b:74:e2:ea:9c:2f:66:3f:2b:17:16:
d7:f2:46:42:89:5c:ee:82:8f:9b:b7:e0:31:61:1e:
8f:e9:b2:b2:db:4e:4c:ac:e9:59:33:d1:bb:0b:b9:
be:40:51:67:4f:98:33:49:ce:63:22:1e:31:b2:7d:
19:20:2c:bd:58:a3:5e:f7:b9:30:d2:c3:f7:fa:15:
9d:47:2e:04:5f:af:87:2f:e3:72:93:b5:01:c1:97:
a5:0d:ce:ee:41:c7:e5:8d:06:eb:7b:35:be:1e:c1:
1e:1a:c8:a6:7c:49:71:ff:8e:10:e4:fc:14:1b:89:
bd:03:5c:27:e9:05:06:ec:64:63:97:3a:18:1d:25:
b4:d2:ee:71:81:2a:e1:1c:eb:da:bb:6a:b4:2e:15:
22:ec:5d:37:5e:97:a2:44:50:72:3e:0f:5b:69:8d:
50:85:63:24:34:c4:7a:06:0a:f2:a1:e3:2c:bf:ff:
d9:9b:be:6a:fc:1c:99:44:97:e4:f7:66:86:bd:93:
e5:c1:34:d0:2b:8a:1e:b2:21:c7:e3:fe:03:ba:b2:
b4:3e:f9:09:ff:32:3b:b3:81:22:7c:21:17:e7:c6:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A1:71:E7:C5:5D:74:29:51:1A:46:AA:E2:F1:F4:B2:9C:41:E2:C6
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/NqFx58VddClRGkaq4vH0spxB4sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.78.0/24
IPv6:
2a11:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
52:f6:47:23:32:2b:b0:9a:34:96:4e:bb:df:37:b9:7c:4e:87:
29:7f:47:cd:9c:56:25:dd:47:e5:78:fb:e3:0f:c0:ca:41:62:
81:9f:be:ff:6f:a3:94:b6:da:e0:d1:3c:9a:e2:d5:95:1f:8b:
0c:24:c7:7a:13:9e:03:83:b2:03:33:c6:97:b9:bf:61:68:70:
93:11:6f:9b:92:e6:7b:58:c3:d7:02:86:b8:91:1d:ca:b0:8a:
c9:a0:aa:d2:e9:3b:be:76:ed:5a:60:cf:c1:fc:b0:e0:08:c0:
6c:84:a4:ed:5b:32:c9:03:23:2f:ea:91:19:b1:d5:d1:07:7b:
e1:ba:c9:de:bb:b0:2f:19:7e:82:37:34:66:70:ea:42:6a:bf:
8e:91:44:8e:a7:e0:fd:09:3b:bc:41:3f:57:26:24:b2:bb:2e:
be:9e:85:60:f2:70:1d:d6:98:63:25:5c:f2:77:90:54:68:04:
04:ac:be:f9:08:2c:2c:45:21:8e:89:bb:68:7f:73:06:1e:c1:
a9:f0:1f:97:2a:41:29:68:89:0c:6c:13:3d:17:75:17:8b:de:
f1:33:4a:ad:ce:68:ff:c4:3d:ae:cd:16:2e:2f:fb:71:7e:35:
74:ff:5a:a5:fd:51:a8:da:7d:f5:d1:fb:5f:3a:e9:6d:b5:94:
8d:37:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:38:25 2025 by rpki-client