Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/nbFO3tETAKU90cGGwpaCKUOKTLY.roa
File: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (raw, json)
Hash identifier: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=
Subject key identifier: 9D:B1:4E:DE:D1:13:00:A5:3D:D1:C1:86:C2:96:82:29:43:8A:4C:B6
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 01941F8C2E072C6574A1AEB3AB127BE70B36
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/nbFO3tETAKU90cGGwpaCKUOKTLY.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200366
IP address blocks: 103.76.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2e:07:2c:65:74:a1:ae:b3:ab:12:7b:e7:0b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9db14eded11300a53dd1c186c2968229438a4cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:1c:47:08:68:28:76:a0:ce:10:b2:c6:fe:
2c:68:7f:49:9d:68:88:9d:92:ef:73:cc:37:e6:56:
45:c3:96:46:12:16:ce:70:61:b5:8f:d7:9a:c0:37:
8a:62:5a:a6:47:75:de:59:f0:97:03:cc:e6:c7:55:
ab:da:20:f0:47:95:e3:1c:ad:e5:dc:b8:de:45:d2:
fb:e0:a1:0a:cf:f3:bf:97:a0:13:b1:86:9c:70:58:
26:7f:27:3e:53:fd:31:92:27:17:e2:bd:55:f3:f7:
e0:55:76:d5:0f:db:04:b1:17:e5:ea:c4:7a:5b:00:
f3:c9:21:7b:1b:51:1f:8f:b2:2d:75:65:7d:49:af:
97:97:9f:ec:4c:41:0d:ae:fe:38:29:8d:05:6e:83:
bc:7c:fd:51:bd:a9:8c:a4:11:e9:5a:75:7c:4f:3c:
5e:f2:bb:90:a3:11:d5:bf:c2:b7:c3:7b:10:1e:f7:
6c:31:a4:6b:e9:0b:c0:67:c1:6d:49:60:5c:21:a3:
75:82:c5:28:45:34:59:81:6f:02:87:85:ec:79:7d:
27:aa:df:1b:d3:0d:13:78:2d:8d:c3:b9:28:3d:a1:
98:67:19:cf:44:2c:fc:d6:af:fb:56:94:21:ee:28:
82:72:4c:73:1f:83:04:53:4a:35:02:04:56:6d:74:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:4E:DE:D1:13:00:A5:3D:D1:C1:86:C2:96:82:29:43:8A:4C:B6
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/nbFO3tETAKU90cGGwpaCKUOKTLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.166.0/23
Signature Algorithm: sha256WithRSAEncryption
71:48:bc:d1:66:e4:9d:c4:e8:f2:94:28:80:c6:82:da:5d:dd:
11:bc:72:ef:57:3f:65:50:5c:10:09:f4:a6:25:03:a5:7c:05:
4a:1a:44:af:5a:7b:d4:8b:a3:76:3e:92:ae:3b:8d:51:5b:21:
21:d6:b3:9b:82:67:6e:ea:c7:5e:a5:80:00:9e:e1:e6:48:b0:
96:f4:09:94:8d:7f:2e:60:e9:0d:b7:eb:12:04:2a:7e:8e:5a:
09:eb:5d:94:3b:06:ae:da:01:21:46:18:7f:89:28:e4:ce:94:
34:d3:58:82:4d:37:aa:76:7e:b2:83:43:05:ec:5f:0a:6a:17:
73:c3:8b:15:ed:68:50:53:d9:08:5f:60:35:33:a2:0d:9e:fe:
f3:8c:84:f4:ba:91:ea:8e:e0:a9:23:1e:6d:47:c4:61:4c:d0:
e6:d5:81:97:08:44:e6:76:44:64:7c:c9:d8:c0:c1:8d:c3:98:
65:91:f9:e8:9a:6e:b6:c9:49:2a:79:f9:c9:65:af:94:51:12:
a5:df:33:73:3b:9c:2e:22:fb:23:7f:54:36:1f:f7:44:75:14:
18:c2:91:04:d5:bd:27:17:44:cd:be:4f:cb:67:24:50:2b:c4:
c7:9a:e6:2b:fe:f3:67:21:bd:cb:50:99:fb:d9:6e:ed:ab:f6:
9c:2d:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:02 2025 by rpki-client