Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa
File: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (raw, json)
Hash identifier: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=
Subject key identifier: 9E:83:DC:8B:12:E9:82:4C:70:27:56:71:64:CF:DF:C4:F7:F8:0A:CC
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 01942444C84B952FF351BF77290344B5F47C
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 132.64.0.0/16 maxlen: 16
132.65.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c8:4b:95:2f:f3:51:bf:77:29:03:44:b5:f4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e83dc8b12e9824c7027567164cfdfc4f7f80acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:ab:ff:c9:d7:ba:70:1c:49:4a:f2:6d:46:
1a:3a:4e:a3:7e:47:95:30:88:68:64:fa:b5:16:47:
a3:54:c0:25:30:b9:06:25:5c:46:2e:26:60:3a:f4:
67:ff:53:62:38:ba:05:a7:55:28:bc:6c:bc:76:c2:
e8:ab:a2:d3:71:db:26:00:55:3b:8c:f1:b3:02:36:
44:20:86:14:a9:68:dc:f9:da:2e:38:1c:01:cc:d8:
ee:54:f4:df:7e:ea:5a:01:f5:d6:6c:82:16:51:32:
2f:c1:df:09:3d:dd:9d:2d:74:9b:fa:98:eb:92:46:
5d:29:b6:1a:09:a5:e7:d8:c9:7f:46:b1:b2:1f:eb:
64:a4:93:5e:3f:5a:b2:e6:df:82:07:9f:58:3c:b4:
eb:76:4f:69:63:34:5c:45:03:23:a5:c3:1f:c4:e0:
95:70:4d:90:06:70:b5:3f:37:20:1f:16:69:5b:49:
12:f8:54:7a:88:0f:ba:d2:64:9d:55:87:80:d9:c2:
6e:a1:a5:ca:31:54:0f:12:ea:b4:33:c9:3e:30:02:
64:36:91:f4:41:78:68:33:31:b5:4b:9b:5c:b9:66:
09:5c:48:2f:6b:e4:9c:51:f1:e5:90:26:ee:7c:f3:
69:de:62:3f:2f:c5:5b:e0:45:55:5b:83:5f:75:a9:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:DC:8B:12:E9:82:4C:70:27:56:71:64:CF:DF:C4:F7:F8:0A:CC
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9f:c6:c1:42:30:7a:8e:dd:52:1a:3c:55:d5:33:45:bf:de:a1:
18:a3:69:1b:0f:ab:07:b3:af:de:ba:36:00:85:ef:82:8d:4e:
9f:d2:ab:c7:50:26:53:f9:be:79:39:f8:db:01:37:dd:29:e7:
d5:4b:4b:67:60:cf:d9:e1:86:a7:5e:63:98:fc:24:fa:ea:1f:
87:94:dc:ac:1c:14:92:6e:7a:94:fa:33:89:ad:09:37:62:68:
c9:18:29:87:6a:9b:e4:d4:49:91:d7:bd:65:a4:a7:cd:dc:97:
e5:75:ce:1d:14:6c:05:f9:89:5e:bb:a3:01:74:9c:8d:a1:5d:
5a:e3:c5:9e:f9:c7:79:eb:9a:64:66:8a:1a:4c:27:b9:d3:39:
e2:ec:0a:df:97:34:c9:dc:96:a9:0a:21:f2:9b:6e:34:14:e1:
d2:35:fe:04:a0:ed:2f:ce:11:ed:ee:dd:2e:85:9c:f0:55:98:
f8:52:76:80:fb:b6:2e:08:a0:88:ff:72:b3:8d:41:0d:4b:f1:
86:5a:7f:2d:f1:3b:a2:cf:4d:de:24:42:a9:e7:8f:3c:f9:25:
d2:88:d2:58:0b:0f:9f:48:00:f5:eb:56:80:07:20:a8:d3:e7:
15:06:5c:ca:86:68:e9:33:74:9c:1d:6f:7f:79:dc:6a:a0:e6:
c5:d8:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:34:14 2025 by rpki-client