Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/__9NIorEvFQBcg_hGPgghkb0l4k.roa
File: __9NIorEvFQBcg_hGPgghkb0l4k.roa (raw, json)
Hash identifier: 222bA5I9jh/H3veBAD0uaQlPQD/6cFu4o3bX6tKrKWo=
Subject key identifier: FF:FF:4D:22:8A:C4:BC:54:01:72:0F:E1:18:F8:20:86:46:F4:97:89
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 0194252173505BC3B4B31B857024B6269264
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/__9NIorEvFQBcg_hGPgghkb0l4k.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 176.120.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:73:50:5b:c3:b4:b3:1b:85:70:24:b6:26:92:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffff4d228ac4bc5401720fe118f8208646f49789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:de:81:be:b6:7f:83:04:c4:e0:79:18:9c:
4d:17:c1:e6:32:e8:f5:86:18:d8:b8:b5:19:4d:99:
93:97:03:49:3e:eb:1e:6c:fd:8a:17:68:3a:38:01:
71:e1:1e:1c:a0:03:17:c7:7e:d1:55:c3:1a:19:21:
bb:c0:a0:be:3d:86:d3:da:0a:2e:7a:e3:2c:e0:40:
9c:d6:45:4c:04:0e:ac:c8:ae:7f:34:de:4e:8b:a6:
df:51:fe:13:52:65:b6:b9:17:ff:2d:2f:28:62:08:
3c:08:57:de:17:15:ef:e8:b4:b4:ce:87:1c:80:71:
72:cc:59:2b:72:01:c0:05:b0:65:03:35:95:ec:1d:
32:a2:34:6b:59:e9:07:e8:58:db:88:94:34:32:aa:
eb:50:82:c2:a7:95:ef:87:c1:ee:9f:3f:70:75:3d:
58:84:e0:4c:38:9d:26:c8:14:a8:b8:ab:30:d4:7b:
9c:fb:97:43:81:b0:3e:36:c1:02:7e:f9:f9:18:97:
65:32:9c:a4:2a:c5:c8:ee:6d:8c:ff:0f:cf:52:25:
4d:93:36:82:90:b4:70:e5:b4:ae:2c:81:35:8b:db:
b3:1a:b6:f7:d9:50:ce:12:6b:8e:c8:54:ab:9d:70:
b9:a0:a3:62:7e:68:c0:7d:bf:07:a7:8a:65:8d:e8:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:4D:22:8A:C4:BC:54:01:72:0F:E1:18:F8:20:86:46:F4:97:89
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/__9NIorEvFQBcg_hGPgghkb0l4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6a:44:76:91:34:c9:44:78:66:81:55:2d:72:78:07:b3:10:
4a:89:aa:cb:c0:02:04:e3:dc:05:ca:55:21:b6:dc:53:a0:93:
ca:c0:eb:19:0a:cb:9d:45:b6:cb:2e:c5:00:ae:02:40:6f:f2:
bd:23:06:19:7d:d1:a1:3d:c0:67:5f:39:72:94:1f:ad:16:6b:
08:02:fd:93:aa:64:71:0f:ea:89:11:e4:43:a7:94:dc:9d:39:
fe:d1:aa:70:b6:10:08:db:ad:e9:1a:16:1b:0c:dd:cb:a5:64:
34:8b:d3:41:16:db:8c:2b:04:9a:f6:c7:df:10:07:bb:f7:bd:
3d:fa:d7:c7:35:95:b9:14:17:59:72:4c:fc:b3:3b:3d:1e:5b:
45:0f:42:03:a6:8c:6e:36:5a:5d:72:04:76:df:5b:4a:f8:19:
a7:ad:8e:5e:d2:94:60:ea:e6:a9:1b:5e:b7:12:e8:32:5b:3e:
d7:cb:87:55:02:b8:a4:0a:b3:07:9b:98:89:e1:62:ce:04:68:
a5:b5:e5:2a:fb:74:d0:92:07:cb:18:35:2b:b4:6a:aa:21:e3:
ac:d2:ff:c0:7e:dd:01:f5:39:e2:fd:ef:3e:70:4a:2f:18:e8:
05:5e:a2:d4:c1:c7:38:f2:e6:42:5c:98:24:bc:32:9f:17:34:
05:33:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:37:20 2025 by rpki-client