Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa
File: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (raw, json)
Hash identifier: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=
Subject key identifier: 9F:2C:6D:36:75:AC:C4:CD:FE:E4:82:15:BC:C6:78:E1:C4:15:11:85
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0194258EB34C1FF19B578D9D1DF660B2200E
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa
Signing time: Thu 02 Jan 2025 05:48:16 +0000
ROA not before: Thu 02 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 158.46.178.0/24 maxlen: 24
158.46.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 13:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b3:4c:1f:f1:9b:57:8d:9d:1d:f6:60:b2:20:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f2c6d3675acc4cdfee48215bcc678e1c4151185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:5e:fd:45:07:31:d4:51:2b:9b:14:3b:9e:
9a:1f:c1:b7:19:a5:03:8b:d5:d4:39:fe:d0:7b:0e:
45:b3:92:b1:69:a0:24:1a:24:e2:ce:e9:6b:ab:dd:
fd:5c:76:bd:27:cf:3f:0d:67:38:72:59:a1:40:fb:
03:5d:47:69:57:83:50:3c:91:e4:6d:51:40:0e:1e:
00:08:41:d6:a3:08:cf:3e:f6:8f:5e:1c:c3:58:be:
98:b6:e7:15:9b:d4:35:6f:6d:67:2a:de:c7:19:01:
ea:03:38:4f:c8:90:f6:96:0b:b6:d9:e0:ab:71:32:
c6:4e:d6:2d:a3:d2:bf:48:67:2f:67:0a:a6:74:64:
ff:db:29:4a:ab:91:fa:24:88:d4:4b:86:2b:90:41:
49:33:27:0f:31:4e:0d:e8:b9:c6:9a:2c:61:dc:17:
9e:c9:0d:87:36:de:c3:bb:8a:ed:bf:7d:24:a8:a6:
83:d5:1e:74:30:f8:d6:c8:c6:e1:92:68:37:79:d3:
79:3b:5e:36:f5:c8:1f:63:ae:15:46:fa:97:82:ae:
04:cc:93:61:72:69:a6:8c:c3:24:4d:80:f2:35:12:
b0:cf:33:f6:9e:b9:32:9a:8d:58:c7:ee:95:97:88:
45:ad:21:bb:37:12:95:a6:9c:99:ea:72:f1:26:65:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2C:6D:36:75:AC:C4:CD:FE:E4:82:15:BC:C6:78:E1:C4:15:11:85
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.178.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a3:ad:d7:b8:2a:7e:de:ad:c3:ae:31:fc:36:df:27:9f:05:
49:a9:ea:ae:d7:c4:84:68:dc:90:4b:7a:74:7f:d6:41:e1:06:
51:63:40:5b:5a:aa:b2:1c:9d:05:dd:df:b5:ba:d2:db:c0:9f:
d6:a5:ea:7d:61:97:dd:bf:a0:2e:59:28:65:53:8e:38:87:84:
26:41:74:e6:8f:7a:e8:54:12:59:d7:f4:66:ca:c3:5f:29:e9:
1b:71:cf:cf:a0:7d:82:4c:91:7c:d3:08:b0:d4:3f:cc:79:fc:
d5:09:a5:3b:b1:b5:ce:13:6c:d2:91:52:e7:f7:dd:8f:4f:98:
b1:eb:39:6d:ba:64:b7:2f:5d:63:70:ac:ed:2e:bd:63:2e:30:
38:c1:3a:ec:ee:48:06:70:ab:f7:f5:98:13:65:8f:0e:52:7f:
e5:2b:83:da:73:a9:57:50:1c:fc:02:7c:06:6c:52:6e:b8:8c:
97:de:d4:81:88:6f:59:1d:38:1c:50:74:b8:5d:42:dd:b5:bb:
70:5a:0a:63:7c:11:56:46:27:dd:d4:61:0c:cd:8e:82:2f:64:
86:4b:32:c5:2a:04:e9:11:d1:d0:87:c9:f3:68:df:c9:65:5d:
a1:f1:8d:e4:17:14:41:dd:48:65:36:4c:47:3c:4c:ab:14:37:
6d:ec:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:26:14 2025 by rpki-client