Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/NmHfVOAq428sUSSIRO7nZKCwlXg.roa
File: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (raw, json)
Hash identifier: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=
Subject key identifier: 36:61:DF:54:E0:2A:E3:6F:2C:51:24:88:44:EE:E7:64:A0:B0:95:78
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 0194228DAEE135605FA3BF70BF723078C0B8
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/NmHfVOAq428sUSSIRO7nZKCwlXg.roa
Signing time: Wed 01 Jan 2025 15:48:18 +0000
ROA not before: Wed 01 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49652
IP address blocks: 195.254.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ae:e1:35:60:5f:a3:bf:70:bf:72:30:78:c0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Jan 1 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3661df54e02ae36f2c51248844eee764a0b09578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:80:0b:e6:34:19:24:fa:5c:12:2d:fa:da:
31:50:ac:d5:54:48:8f:ad:c6:e1:75:89:c2:44:b9:
56:82:42:a3:00:0d:25:53:76:c1:ab:c4:3a:66:eb:
f4:67:f1:cf:fc:36:c4:54:95:a1:0a:d7:e7:5d:e0:
0d:ee:ce:1b:01:33:32:65:6c:50:48:38:79:ea:a2:
95:f1:5f:59:97:74:fb:19:26:30:4d:d1:4c:2f:9f:
f5:ab:99:c3:2b:c1:db:ef:cc:fc:ff:4d:1a:ce:77:
d3:91:66:bd:3b:a3:46:32:96:a4:5b:f5:32:08:a9:
ce:79:99:0d:6c:7d:68:6e:fd:5c:1c:a5:b2:f4:b5:
6c:cb:19:57:1b:46:bb:22:9e:68:e3:22:05:35:54:
65:3b:03:34:fc:b6:98:5d:7e:32:cc:45:cd:4f:08:
64:16:11:84:3f:5f:1f:f2:d5:88:98:6a:cc:1f:dc:
72:ab:ca:c5:99:af:df:fd:30:4e:df:37:8d:04:89:
09:99:ac:c5:82:24:9f:6d:b2:ec:4c:39:94:91:2f:
49:43:68:7c:20:22:19:c6:d0:7b:eb:d8:f5:15:7e:
0d:17:ee:29:0f:ff:26:e0:1d:8d:a3:ce:5e:18:3e:
a2:d4:c1:3f:13:79:ce:01:64:8b:e1:1a:c8:94:98:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:61:DF:54:E0:2A:E3:6F:2C:51:24:88:44:EE:E7:64:A0:B0:95:78
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/NmHfVOAq428sUSSIRO7nZKCwlXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.128.0/23
Signature Algorithm: sha256WithRSAEncryption
28:bc:e7:64:c6:ff:7f:c3:49:fc:4b:5d:71:b4:f1:56:03:e7:
d7:ba:49:24:b5:1c:8f:27:db:a4:fc:2a:8c:73:aa:33:83:8a:
d8:a8:1a:ae:c4:7b:25:4a:00:32:18:00:43:0a:b6:d1:a4:d1:
0c:0e:84:fb:cc:11:e9:10:9b:26:82:4c:ad:66:1c:9e:31:f5:
a1:1b:9b:6a:95:7a:39:42:df:82:3e:9b:51:e3:ed:c5:b3:8a:
be:c4:bb:2e:69:79:15:bf:8e:a7:25:20:4d:1d:cf:43:77:97:
bc:b9:6d:80:37:22:9e:07:c9:e9:22:48:73:68:b0:ab:60:c9:
29:ad:a2:0a:c0:9d:09:15:9e:33:b5:66:69:8a:4c:fc:3c:69:
49:2d:6c:91:6b:90:cc:31:a3:ac:ec:26:69:aa:a8:6b:75:99:
40:81:f9:12:85:d5:ed:79:4a:c4:d6:5e:e8:4d:64:83:3e:ca:
d4:7f:1d:e7:0d:31:b0:4f:b6:34:6d:93:7d:7e:ab:62:12:1a:
2b:36:4d:0b:50:00:7f:5e:da:12:9e:b6:75:a9:1f:93:a8:f4:
5d:ae:74:b2:11:0a:b1:5c:88:2d:a2:57:e4:d6:60:e0:25:61:
80:70:46:75:30:a5:4c:95:65:44:7e:ee:7a:ee:b5:cc:22:52:
0a:4f:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:18 2025 by rpki-client