Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/nGObtVTwcFKea1knaujpvqhbims.roa
File: nGObtVTwcFKea1knaujpvqhbims.roa (raw, json)
Hash identifier: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=
Subject key identifier: 9C:63:9B:B5:54:F0:70:52:9E:6B:59:27:6A:E8:E9:BE:A8:5B:8A:6B
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 019423D6C1210446D347D0CB2BA31A9CDD2D
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/nGObtVTwcFKea1knaujpvqhbims.roa
Signing time: Wed 01 Jan 2025 21:47:44 +0000
ROA not before: Wed 01 Jan 2025 21:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8866
IP address blocks: 195.182.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c1:21:04:46:d3:47:d0:cb:2b:a3:1a:9c:dd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c639bb554f070529e6b59276ae8e9bea85b8a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:d0:37:bf:a6:b2:56:63:f3:98:39:aa:cf:
ec:d6:5a:31:01:fb:cb:50:9f:9d:67:50:3f:47:7d:
66:3f:04:90:77:16:14:73:8e:10:ce:58:57:ca:aa:
d3:90:f4:8d:88:20:52:64:87:10:2e:06:6b:10:a7:
38:b3:fa:8a:73:63:12:03:de:31:f7:a5:5c:a2:34:
c1:b2:dc:40:e8:8e:c9:69:f6:83:37:8c:d1:df:4a:
ff:94:be:1d:53:ec:df:e0:61:3e:53:1a:a2:f4:ad:
b0:34:8e:34:80:e5:25:8e:63:45:4b:d6:a3:31:66:
8f:87:05:82:5f:79:a1:aa:31:7d:46:22:51:a6:2b:
a1:cd:c5:ed:b2:c6:16:f6:e8:58:4c:33:7e:0a:e8:
7a:42:2d:d4:2e:32:6b:81:8f:c7:87:5a:82:d2:f7:
67:cd:8c:69:0d:ca:d1:08:f5:ab:78:f6:d0:50:99:
31:d2:ce:bd:95:63:19:f6:1a:54:d8:ed:b5:6e:dc:
00:ed:90:29:6f:2b:0b:9b:ed:b6:6a:2e:65:74:0b:
13:22:a4:f6:2b:3b:80:9e:32:42:55:11:1c:73:ae:
fb:f5:2e:bd:85:55:b0:9d:20:d8:3b:e0:e2:42:62:
94:c5:6d:75:c2:9a:a6:f2:81:8c:a7:5c:42:d6:5a:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:63:9B:B5:54:F0:70:52:9E:6B:59:27:6A:E8:E9:BE:A8:5B:8A:6B
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/nGObtVTwcFKea1knaujpvqhbims.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c4:99:d6:f1:76:a3:55:7e:ba:2a:e0:d2:5e:e3:5a:2f:b6:
c6:f5:cb:28:36:9c:70:1b:f6:6a:84:d4:27:c8:c6:38:de:f7:
df:41:59:15:dc:d4:e6:ae:92:56:5b:86:67:37:85:bb:f5:a5:
11:8c:3d:17:bf:cb:a9:f2:15:41:38:b1:79:04:b9:a5:84:a7:
91:89:41:4b:99:a8:05:2e:85:d5:1e:c5:9d:98:f1:2e:c8:22:
aa:64:6f:2d:22:18:c0:08:82:fd:3b:d5:d4:81:3f:81:b4:a2:
04:77:1f:b1:c0:ed:e4:e7:57:49:90:12:6d:d5:ab:e0:0a:85:
1b:9e:b4:00:f1:c1:38:6d:a0:4e:e0:1c:7e:7e:7d:4b:b4:ae:
73:f5:e2:ca:68:a0:1b:78:f9:5e:59:af:7c:9f:d1:57:38:66:
db:95:13:86:5c:b7:a3:b8:a7:f0:b4:49:0f:90:bc:b1:f4:3a:
71:67:b7:19:6e:3c:47:b5:4d:53:e2:ba:a2:59:fc:4b:94:8d:
95:f5:1d:5e:b8:52:b1:21:af:b3:8e:c1:3a:99:80:4a:c6:6a:
ed:e3:0f:30:d6:fe:99:e9:13:87:8f:e6:31:3c:0d:a5:ea:55:
58:c8:23:d6:1d:ec:ac:a9:de:d3:51:2f:e1:16:5a:0f:a3:74:
21:07:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:49 2025 by rpki-client