Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nmya0m4bF_vrvdtsDAE7yao3U3M.roa
File: nmya0m4bF_vrvdtsDAE7yao3U3M.roa (raw, json)
Hash identifier: aP4mfzeRRnRFNMI5oaCucs0hiywO6Cz7YxriS+XegjI=
Subject key identifier: 9E:6C:9A:D2:6E:1B:17:FB:EB:BD:DB:6C:0C:01:3B:C9:AA:37:53:73
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0195D990E0D1DBE6546C9AA8E38C21E51BF6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nmya0m4bF_vrvdtsDAE7yao3U3M.roa
Signing time: Thu 27 Mar 2025 21:45:05 +0000
ROA not before: Thu 27 Mar 2025 21:45:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 45.138.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:90:e0:d1:db:e6:54:6c:9a:a8:e3:8c:21:e5:1b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 27 21:45:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e6c9ad26e1b17fbebbddb6c0c013bc9aa375373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:4e:a2:57:26:31:3e:cd:9c:1d:a1:6f:e8:
10:56:19:3e:e5:59:62:f7:b1:6c:93:ad:8d:d7:68:
d1:1a:c4:7d:59:11:12:dd:41:90:c8:f4:07:60:df:
5f:9c:72:f4:84:b4:c6:04:19:dd:6e:16:66:fb:9b:
42:27:75:eb:af:71:ac:71:07:8e:02:af:0f:23:23:
82:7c:bf:f5:3d:9c:f7:26:0f:d7:86:73:e4:4f:cb:
5c:f6:a6:29:7e:c1:de:cb:09:1a:c1:72:d9:91:18:
4d:a6:aa:36:87:84:99:b4:44:5a:b0:4f:89:a6:1a:
a6:30:26:f7:0b:e8:ce:bb:18:57:46:9b:c4:c2:a8:
b0:de:5c:4d:36:5d:ac:f1:5f:d9:9d:5d:92:d1:8f:
cf:8d:6f:a3:53:ad:ec:bb:f5:d3:50:19:3b:c3:64:
eb:62:a4:6d:1e:a6:3f:eb:5a:a8:68:20:e1:cd:f5:
b3:b6:a1:dc:3b:50:fa:05:79:50:0b:43:e5:07:ba:
11:63:84:90:be:5e:28:5f:73:5a:13:e1:61:f7:54:
02:52:e2:a7:f7:93:95:cf:4d:f1:4f:ed:6a:db:ac:
ff:d3:da:cd:df:25:71:45:87:66:55:6b:40:63:50:
87:8f:52:b6:8c:a8:88:86:ef:ce:5e:22:93:84:69:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6C:9A:D2:6E:1B:17:FB:EB:BD:DB:6C:0C:01:3B:C9:AA:37:53:73
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nmya0m4bF_vrvdtsDAE7yao3U3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
73:77:5e:7b:40:d8:b7:66:88:20:4d:52:19:d6:d1:11:20:f8:
24:c9:0d:87:e8:b7:63:e3:1b:4d:6e:a9:5f:3f:24:08:50:65:
e9:41:94:2b:5c:dc:96:b9:56:42:f2:a7:43:00:52:51:c4:c2:
2f:02:c6:77:4f:7b:81:30:a1:5c:c5:87:45:a0:b3:7e:01:8e:
94:92:d7:f7:19:e7:fd:54:d9:5f:85:13:98:85:67:de:75:57:
bb:d0:71:2e:c9:d2:03:1c:98:43:21:c2:5c:05:f3:8d:fc:2a:
11:c8:d7:44:ec:e3:21:1f:69:58:0d:5d:1e:01:55:a9:a2:b6:
7c:d0:08:ee:05:8f:39:ca:1a:85:7a:7f:33:9a:19:b3:79:18:
08:b0:ea:25:e7:61:89:5d:ba:26:7d:39:74:3c:03:cf:ba:0d:
53:f3:c2:80:37:b7:09:97:d6:bc:5a:63:b3:5d:0b:a2:f5:2f:
92:e7:d7:1d:a5:f0:cd:34:56:56:0f:d5:2a:87:35:19:bc:0c:
eb:6e:de:f9:b0:88:f0:81:2b:85:fd:53:f4:7d:82:36:3a:8f:
99:4d:52:80:47:ba:a6:c5:de:ad:bc:e6:54:c3:0e:b5:19:07:
b1:bc:2b:b2:85:d3:44:00:38:f4:5f:bf:b7:28:f6:1e:f3:86:
ae:5a:41:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXZkODR2+ZUbJqo44wh5Rv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMzI3MjE0NTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTZjOWFkMjZlMWIxN2ZiZWJiZGRiNmMwYzAxM2JjOWFhMzc1MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a1OolcmMT7NnB2hb+gQVhk+5Vli
97Fsk62N12jRGsR9WRES3UGQyPQHYN9fnHL0hLTGBBndbhZm+5tCJ3Xrr3GscQeO
Aq8PIyOCfL/1PZz3Jg/XhnPkT8tc9qYpfsHeywkawXLZkRhNpqo2h4SZtERasE+J
phqmMCb3C+jOuxhXRpvEwqiw3lxNNl2s8V/ZnV2S0Y/PjW+jU63su/XTUBk7w2Tr
YqRtHqY/61qoaCDhzfWztqHcO1D6BXlQC0PlB7oRY4SQvl4oX3NaE+Fh91QCUuKn
95OVz03xT+1q26z/09rN3yVxRYdmVWtAY1CHj1K2jKiIhu/OXiKThGltqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5smtJuGxf7673bbAwBO8mqN1NzMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvbm15YTBtNGJGX3ZydmR0c0RBRTd5YW8zVTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYq0MA0G
CSqGSIb3DQEBCwUAA4IBAQBzd157QNi3ZoggTVIZ1tERIPgkyQ2H6Ldj4xtNbqlf
PyQIUGXpQZQrXNyWuVZC8qdDAFJRxMIvAsZ3T3uBMKFcxYdFoLN+AY6Uktf3Gef9
VNlfhROYhWfedVe70HEuydIDHJhDIcJcBfON/CoRyNdE7OMhH2lYDV0eAVWporZ8
0AjuBY85yhqFen8zmhmzeRgIsOol52GJXbomfTl0PAPPug1T88KAN7cJl9a8WmOz
XQui9S+S59cdpfDNNFZWD9UqhzUZvAzrbt75sIjwgSuF/VP0fYI2Oo+ZTVKAR7qm
xd6tvOZUww61GQexvCuyhdNEADj0X7+3KPYe84auWkFE
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:56:10 2025 by rpki-client