Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nJ_kGLTsk-fa03BNufmtVoqmg58.roa
File: nJ_kGLTsk-fa03BNufmtVoqmg58.roa (raw, json)
Hash identifier: ExDWqs5s5bDDfRRciGFXcgM+ULNRow/PkIzFLbnG2ZA=
Subject key identifier: 9C:9F:E4:18:B4:EC:93:E7:DA:D3:70:4D:B9:F9:AD:56:8A:A6:83:9F
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01942828208202D3FAF52933AD642C2F3666
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nJ_kGLTsk-fa03BNufmtVoqmg58.roa
Signing time: Thu 02 Jan 2025 17:55:05 +0000
ROA not before: Thu 02 Jan 2025 17:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61321
IP address blocks: 92.247.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:20:82:02:d3:fa:f5:29:33:ad:64:2c:2f:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c9fe418b4ec93e7dad3704db9f9ad568aa6839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:c1:18:db:ff:ff:9a:1f:53:69:a9:0d:ea:
73:d0:92:ed:81:54:b8:0a:c8:14:ae:7e:69:af:5f:
81:f4:46:e1:d3:30:92:db:66:d3:f1:29:05:2e:ff:
30:4a:d5:b2:76:f9:fd:4a:e9:f2:ab:54:b5:a9:7d:
4c:bb:d8:8a:b3:db:89:02:f0:13:ee:63:3c:60:75:
b0:fa:9b:2e:37:62:3b:6f:ea:e6:da:d4:d9:02:b7:
0f:ca:93:3b:19:05:30:ab:60:54:e3:3b:a8:e7:72:
2e:74:da:a1:03:68:5a:86:a9:d0:b3:81:31:70:17:
4e:4d:c7:42:5e:01:91:e0:3b:8e:1a:d4:c8:8a:d1:
13:cc:b4:bb:68:b8:45:a8:44:5c:2d:01:0f:4c:b0:
e1:65:a1:33:77:cb:8d:b0:7c:77:b0:6b:56:bd:fa:
01:94:cf:1a:bd:27:9f:24:a1:6f:fb:06:ec:4f:dd:
a7:c0:de:ab:bb:90:aa:8b:4e:53:85:d7:ba:67:1f:
92:61:2d:5d:2f:f9:ea:21:4e:65:ac:6e:a2:fe:9c:
b8:b4:16:9d:6e:a8:19:2a:83:2a:e4:14:ef:2f:82:
5f:7c:43:fb:13:ec:1b:6b:68:cb:4e:26:4f:59:89:
7b:fd:62:45:89:a9:a6:14:a8:dd:fe:15:5e:8b:a5:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:E4:18:B4:EC:93:E7:DA:D3:70:4D:B9:F9:AD:56:8A:A6:83:9F
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nJ_kGLTsk-fa03BNufmtVoqmg58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d9:f8:a9:67:aa:f8:42:50:10:5c:c2:74:8d:05:25:83:72:
b5:bd:9b:cb:da:1f:3b:92:28:ce:7c:70:82:ad:28:62:be:0a:
9d:64:f3:dd:00:2a:5f:58:3b:ea:90:aa:8e:77:3e:0c:8e:4d:
de:5b:bd:ad:88:e8:02:6c:67:57:b3:5f:8b:73:68:e1:2e:f8:
c8:53:62:7f:af:91:24:5e:68:0c:d8:8d:f2:e5:bf:4e:29:66:
ae:46:a9:6f:b5:93:69:2a:e6:70:3d:e6:45:5c:0c:53:49:95:
a0:cf:5f:44:17:d9:99:4f:46:55:75:b9:a1:d7:de:c8:f0:9d:
43:5a:7c:05:dc:35:8d:02:b9:96:f4:1f:c6:90:4f:9e:77:f5:
88:6b:f0:4c:ae:8a:d1:99:c3:1f:32:1d:d6:82:5b:bb:7d:2a:
fa:04:66:5c:81:1b:57:b6:95:8e:46:ae:73:d9:bc:13:b5:1d:
7a:90:28:a8:ac:40:ac:b6:29:1d:e5:02:22:9f:81:da:9b:63:
e5:bb:b1:85:75:be:ed:c3:42:09:c6:7d:1f:18:ae:c6:be:0d:
c9:a9:c1:df:42:55:3a:6a:c3:b5:5b:0b:fa:a4:59:ae:9d:81:
2b:c9:65:f5:43:65:00:dc:1f:3a:8d:2c:f4:d9:96:f1:dd:d9:
04:77:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:40 2025 by rpki-client