Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nxjNq3zHZXcGfLhZo-cPnUvRRWk.roa
File: nxjNq3zHZXcGfLhZo-cPnUvRRWk.roa (raw, json)
Hash identifier: Sel/+USCO/VTsQnLKf3NgG37gg8TwMXcI52NN783lJo=
Subject key identifier: 9F:18:CD:AB:7C:C7:65:77:06:7C:B8:59:A3:E7:0F:9D:4B:D1:45:69
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A483F8CD5A826D3AB6F8A2517C2E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nxjNq3zHZXcGfLhZo-cPnUvRRWk.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47478
IP address blocks: 5.188.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a4:83:f8:cd:5a:82:6d:3a:b6:f8:a2:51:7c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f18cdab7cc76577067cb859a3e70f9d4bd14569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:da:6d:15:7a:99:be:bf:89:6b:99:8a:ab:
51:ab:80:d6:32:e4:8e:bb:22:f8:7d:0e:9a:f5:9d:
31:67:99:a6:7d:48:e2:e0:ac:15:63:2d:91:a5:12:
bb:f4:3f:6a:5e:a6:12:32:35:2a:90:d1:d0:f9:84:
d1:39:6c:01:00:1d:c2:ad:0b:44:6b:d8:05:96:49:
77:ad:0e:f2:b0:e4:89:29:ed:23:11:28:0b:87:ea:
db:d9:d3:7c:65:15:f3:92:6e:d7:dc:8b:0b:fd:16:
49:06:81:f8:9f:f8:cf:1e:a8:c2:f4:48:21:9f:7d:
b9:fb:6d:72:30:9c:ed:02:c8:e5:5e:3c:e5:4b:38:
cb:2c:c5:44:39:1a:ea:21:9c:b6:a1:c9:de:26:ef:
76:9f:6d:62:fd:72:4b:aa:af:5b:f6:fa:b7:2a:91:
d3:db:16:0d:16:a6:68:f8:27:f8:42:25:c7:13:95:
30:6d:47:f9:b8:cf:60:b2:1f:01:83:8f:01:0c:d8:
8a:05:60:64:67:89:a0:30:50:89:a2:c3:c4:46:0e:
c4:99:3f:0e:9c:c7:38:4a:75:07:1c:2a:ed:de:69:
60:4d:e4:36:38:f0:17:ac:66:01:8f:40:e4:60:1d:
70:1e:60:ae:66:91:3f:98:57:9b:9a:15:57:0c:67:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:CD:AB:7C:C7:65:77:06:7C:B8:59:A3:E7:0F:9D:4B:D1:45:69
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nxjNq3zHZXcGfLhZo-cPnUvRRWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.52.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:26:80:fe:76:3c:2e:91:0f:4f:a4:1a:de:f9:93:38:e1:c0:
44:30:e5:67:1b:25:93:6a:f2:35:5e:44:76:54:95:b3:7b:6d:
0e:93:b2:e9:e4:5c:de:4d:97:66:ea:69:bc:6e:64:77:9e:57:
c6:57:3d:fd:0d:93:a2:c8:c2:f3:d5:10:db:d9:81:f5:b7:02:
0d:e6:a0:e7:55:01:d1:d1:89:96:d6:e5:12:4b:2a:81:52:58:
14:c3:4d:c0:b7:5b:0b:98:22:f9:a8:ce:1d:2c:fd:97:4f:f1:
0a:90:e3:fe:8e:d8:50:b6:e4:24:4a:19:40:29:27:b2:4c:cd:
f6:ff:02:df:30:b3:3a:72:9e:c6:db:51:55:d9:20:72:09:1d:
f2:b9:f5:6a:94:46:99:78:63:5c:70:05:6f:05:5d:1f:3f:63:
fb:cb:8f:c3:a6:14:b7:5e:93:b7:39:08:8c:51:94:d0:58:a0:
5c:22:43:e9:4c:11:79:05:73:a7:54:5b:53:b6:5c:f0:a3:b5:
d9:0c:7d:72:22:ef:10:bf:5e:b3:ef:04:f6:d8:87:ef:2c:bf:
d9:4d:3d:6e:7d:f0:a7:4c:8e:2d:2e:cc:ca:d3:ba:f5:5f:f5:
84:0f:78:ff:5b:4d:99:5f:7b:d5:22:fa:eb:93:ca:4a:60:e3:
ac:7d:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:06:43 2025 by rpki-client