Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/nPGwQCzaguMv6zj3Fc1otRQL65Y.roa
File: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (raw, json)
Hash identifier: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=
Subject key identifier: 9C:F1:B0:40:2C:DA:82:E3:2F:EB:38:F7:15:CD:68:B5:14:0B:EB:96
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019422FC19B67D448542E5C84CE59EAC7101
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/nPGwQCzaguMv6zj3Fc1otRQL65Y.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212213
IP address blocks: 185.59.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:19:b6:7d:44:85:42:e5:c8:4c:e5:9e:ac:71:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cf1b0402cda82e32feb38f715cd68b5140beb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:a2:ae:f8:f6:6d:6b:aa:5e:b4:f3:fd:b0:
b9:df:e0:e0:34:97:b4:03:fd:68:31:d8:3c:7d:35:
84:41:d9:44:21:ec:bc:94:ee:0d:83:0e:d6:36:51:
a9:e3:73:9d:a0:b1:50:a0:c8:73:01:06:26:92:52:
26:08:b3:b0:ad:c3:a7:f1:22:be:d7:92:38:a2:8a:
d1:3a:68:58:16:bf:8a:5e:cc:a2:ec:6f:01:8d:f1:
cf:ef:f6:4c:6d:dc:82:5e:b4:cf:03:a5:ca:ea:41:
13:42:d7:d4:51:31:82:79:97:34:5f:86:9a:5e:26:
89:0a:5e:36:64:ad:0f:8e:78:9d:8c:50:dc:28:5f:
a9:28:d0:cf:3c:3a:ca:85:84:7b:47:fa:84:06:c6:
e0:db:98:d4:e1:7c:2d:5e:e4:02:a0:e1:ea:95:1f:
06:7c:65:d1:8a:4b:bf:19:4a:3a:73:c1:a4:d9:d1:
ed:1b:d3:28:1f:7c:ca:be:cc:85:dc:8c:64:47:2c:
89:42:01:15:08:9e:e2:eb:af:c6:e3:89:31:55:09:
be:a3:6b:14:ef:2e:d8:2a:88:99:ec:53:b8:91:ba:
99:2e:52:f8:fd:66:3c:98:f6:72:f4:c0:cb:b5:83:
d7:c5:57:0b:ba:2a:74:8e:25:78:19:d9:90:07:c4:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F1:B0:40:2C:DA:82:E3:2F:EB:38:F7:15:CD:68:B5:14:0B:EB:96
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/nPGwQCzaguMv6zj3Fc1otRQL65Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.217.0/24
Signature Algorithm: sha256WithRSAEncryption
40:09:d9:55:eb:45:c8:67:39:cb:a0:26:61:bf:e7:ff:9d:49:
67:c3:5b:cd:f2:b2:fc:6c:b1:6d:75:5a:b2:c9:88:fd:8f:df:
ed:fb:df:7f:13:d1:ad:aa:dd:04:2d:05:4a:44:5c:e6:a1:c5:
e8:4f:b8:fd:82:5d:0a:7a:45:9a:a1:02:85:76:af:4c:bf:43:
f6:2b:56:0c:27:ec:c5:ef:a7:c1:4c:80:92:8a:0c:02:5a:9f:
b6:9e:57:06:ec:4a:91:02:7e:3a:25:42:60:f7:01:cc:91:ad:
3d:ba:6e:b2:47:b8:81:2d:b6:7c:c5:59:c4:ae:13:5b:94:57:
3f:bb:ae:26:52:b2:be:9d:27:03:3f:2b:0c:fc:4e:9c:7d:3b:
41:77:bf:cb:c0:9a:6d:b7:47:14:75:05:f4:ec:e5:ea:6c:d9:
3b:05:22:ec:cb:5e:de:02:2f:19:5d:47:22:09:a3:8e:fe:3a:
6e:94:9d:56:e7:b7:72:5f:a2:e4:4a:e3:bf:d6:32:27:1b:08:
41:fa:16:1b:82:7e:9d:60:24:e0:00:5e:90:60:2f:fc:0f:bd:
72:8d:bb:02:3a:fa:66:e9:90:6a:75:df:35:d5:71:7c:a7:b7:
56:81:15:ce:16:d1:85:c6:99:0b:2d:83:86:c5:07:28:42:53:
ff:df:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:49 2025 by rpki-client