Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/nQ49DO6jLERCGih3b5vaO6Deyv4.roa
File: nQ49DO6jLERCGih3b5vaO6Deyv4.roa (raw, json)
Hash identifier: ckCboVu+SkUbYcpUmTQnzPt52sUcRNCO41XKBdBSHpY=
Subject key identifier: 9D:0E:3D:0C:EE:A3:2C:44:42:1A:28:77:6F:9B:DA:3B:A0:DE:CA:FE
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 0194228DF7D31830CF30046867B03284518B
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/nQ49DO6jLERCGih3b5vaO6Deyv4.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.187.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f7:d3:18:30:cf:30:04:68:67:b0:32:84:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d0e3d0ceea32c44421a28776f9bda3ba0decafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:7e:2c:7d:06:1b:68:23:76:04:2b:f3:30:
c0:16:53:0a:71:ed:f9:af:d9:d9:25:cc:98:dc:d2:
82:92:3c:2c:df:87:57:68:9d:b3:f7:27:4c:2a:a3:
9e:42:f1:db:e2:84:45:bf:53:a8:77:1a:3f:da:f6:
ae:6e:9e:70:59:d9:7b:89:2b:c0:03:fe:50:55:39:
a2:5d:59:f4:a7:14:cb:21:33:9c:db:db:5d:ed:a5:
11:c5:98:e2:3f:28:b3:36:94:ec:36:10:06:0c:6f:
a0:d6:a1:40:0b:cc:a3:90:e3:60:34:30:c9:2e:93:
77:b1:b7:48:83:7d:46:cf:09:3f:3b:b6:2f:fc:eb:
0e:33:21:6f:36:23:e4:25:2c:6e:d4:d9:73:02:9d:
01:b9:51:02:6a:4b:b2:1a:ff:e5:e9:62:51:92:8b:
1e:2f:75:85:db:82:87:68:7d:22:71:83:ac:01:5e:
17:80:24:87:b5:3a:32:c3:d5:b7:fb:2b:a1:58:92:
0a:a7:4e:13:61:f9:1c:2a:f5:c3:51:b5:c9:3a:2a:
93:ba:d0:94:46:79:6f:c3:b5:55:9e:44:3f:6d:df:
00:78:73:ed:11:79:0b:ad:42:d9:76:4c:2f:bd:7d:
5d:42:54:45:ad:6d:ad:ef:6c:06:4a:d8:e4:58:e5:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:3D:0C:EE:A3:2C:44:42:1A:28:77:6F:9B:DA:3B:A0:DE:CA:FE
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/nQ49DO6jLERCGih3b5vaO6Deyv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:c8:49:e5:02:25:0f:36:4c:63:fe:c6:55:d5:23:0d:e6:ec:
2e:14:66:89:0d:ba:0e:2c:d8:1e:c2:c5:c2:55:e5:95:b0:3a:
dd:40:5c:7e:ab:07:ea:61:b3:55:b1:d6:58:05:92:ba:67:ac:
47:26:02:b6:4b:9a:df:23:e7:28:bd:94:86:ea:ce:66:4d:c2:
96:a3:db:28:e5:04:92:fc:9a:e9:d4:ff:7e:d6:ef:0d:05:3d:
61:9c:1b:af:cc:a1:20:91:8e:db:4e:b9:d5:25:16:9d:00:8e:
5c:60:45:a3:c5:20:bc:09:01:c2:0d:76:d3:ca:53:99:da:2d:
9d:81:26:16:db:1d:e8:f0:25:52:76:6f:22:06:c2:a9:c4:75:
01:b1:a4:d4:46:11:b4:a0:58:ae:f8:7e:0f:52:53:c5:b1:7e:
8f:d0:28:1f:ec:83:e8:f4:3c:3a:6e:e5:cb:21:7b:57:79:0c:
d8:ae:e1:17:fc:4b:e1:cb:79:a6:64:33:90:0e:2f:93:06:89:
ca:30:7d:a8:99:7c:85:ca:02:73:4e:68:0d:7c:63:7e:86:b6:
bd:fc:d5:2d:3e:dd:3e:8b:f2:1b:92:7c:4f:3d:93:32:95:22:
98:e6:fb:83:46:c4:a3:15:10:0b:26:c2:3e:ff:f8:a8:80:81:
51:9f:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:47 2025 by rpki-client