Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/9nGi0GaQ-mUZLQJZf4HlCcb6wIc.roa
File: 9nGi0GaQ-mUZLQJZf4HlCcb6wIc.roa (raw, json)
Hash identifier: pSH8ptTsxSAlhoS4qLcEBiOaIHL5q7GZu0kDDTwaHJ4=
Subject key identifier: F6:71:A2:D0:66:90:FA:65:19:2D:02:59:7F:81:E5:09:C6:FA:C0:87
Certificate issuer: /CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
Certificate serial: 0194214394B1435A7EEA0B2B470B0C582032
Authority key identifier: 9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/9nGi0GaQ-mUZLQJZf4HlCcb6wIc.roa
Signing time: Wed 01 Jan 2025 09:47:44 +0000
ROA not before: Wed 01 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 193.161.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:94:b1:43:5a:7e:ea:0b:2b:47:0b:0c:58:20:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
Validity
Not Before: Jan 1 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f671a2d06690fa65192d02597f81e509c6fac087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:03:cd:33:16:80:b9:e2:12:d9:df:b6:8c:
a0:64:5c:98:98:65:05:10:cf:d4:e6:80:90:87:b8:
ea:45:58:c4:6f:29:d4:99:87:9c:d3:8c:56:d4:d9:
64:45:ad:82:12:1d:da:0c:4b:f6:f2:6c:ca:71:27:
3e:14:eb:57:f0:57:ae:39:2c:c9:9e:16:26:3b:7e:
9e:56:d6:91:eb:c4:be:df:63:52:9f:0c:02:56:8f:
5d:40:a1:58:d5:8c:3a:c6:f5:c9:ea:c8:76:32:b3:
0b:7a:a7:07:66:ef:fa:25:9b:09:8d:3f:91:0c:54:
4a:59:71:f4:aa:f8:3f:16:d5:b9:24:46:2f:2d:16:
1e:27:9f:06:7d:b1:99:eb:85:96:95:3e:e9:7c:31:
fd:47:ed:ee:7d:4d:26:02:92:07:22:41:df:e7:eb:
68:8e:8b:28:23:89:9d:71:d0:32:1d:01:8b:a0:12:
f6:a3:d3:b6:d7:7f:a5:74:6f:03:9a:4e:ad:1f:1a:
de:79:4b:f4:94:64:dc:63:5e:21:19:12:7f:29:66:
e1:8f:70:30:a2:1d:6a:d0:20:f2:25:78:cb:fa:39:
f8:00:95:a3:e2:4f:df:53:11:13:57:0a:40:13:ff:
fc:ea:4f:47:da:85:1a:45:53:41:61:45:8d:6f:28:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:A2:D0:66:90:FA:65:19:2D:02:59:7F:81:E5:09:C6:FA:C0:87
X509v3 Authority Key Identifier:
keyid:9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/9nGi0GaQ-mUZLQJZf4HlCcb6wIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:39:c3:32:82:b0:43:9a:51:ad:43:90:96:19:14:89:60:23:
0d:15:29:97:0c:63:5b:e0:ca:fe:f1:fe:98:34:c2:6a:6b:0a:
ff:c2:b0:25:7e:65:ee:0a:97:88:71:34:17:72:2a:3f:58:7f:
e5:15:93:1e:6e:18:48:04:a5:6d:5a:83:ff:2d:e3:e1:55:12:
49:40:d0:82:5b:a5:7c:03:35:a9:0f:13:8e:23:d0:08:f8:ae:
29:03:96:66:27:15:5f:ad:c4:b4:da:44:88:24:3d:88:c6:a4:
ae:ab:ae:ff:04:82:98:87:cc:d9:f9:34:2a:6b:60:55:9d:90:
51:23:f1:ea:0a:9b:0e:67:e7:57:59:1a:cd:8f:7f:f1:41:84:
ca:80:32:1c:97:30:b9:b5:0c:bb:3b:28:fc:c0:13:0b:03:7b:
41:d2:d5:f5:c3:32:fa:a6:94:22:b4:cb:4e:15:31:ba:8e:bf:
80:3c:68:19:38:d0:01:e8:66:04:eb:a9:ad:8d:a1:46:9f:dd:
f4:05:f2:e8:ad:23:6c:8b:d6:eb:e3:fc:87:a5:b9:12:87:00:
9c:e2:ed:b6:9d:43:c5:87:2c:33:1c:22:58:cb:cd:7f:fa:24:
72:03:bc:d9:70:9f:ca:d7:16:84:1b:7e:5b:3b:3d:38:a2:2a:
61:83:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:14:54 2025 by rpki-client