Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/n4NhSOlHoQZGJucRgUuJfAkNhIo.roa
File: n4NhSOlHoQZGJucRgUuJfAkNhIo.roa (raw, json)
Hash identifier: qGE6wsQoS+rfbN+EODT+bu+ujSjBhyCe9L5g9qi9/pM=
Subject key identifier: 9F:83:61:48:E9:47:A1:06:46:26:E7:11:81:4B:89:7C:09:0D:84:8A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FFC0D79A9DB8FCC962AE483DFBBBF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/n4NhSOlHoQZGJucRgUuJfAkNhIo.roa
Signing time: Thu 02 Jan 2025 05:49:40 +0000
ROA not before: Thu 02 Jan 2025 05:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208067
IP address blocks: 93.171.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:fc:0d:79:a9:db:8f:cc:96:2a:e4:83:df:bb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f836148e947a1064626e711814b897c090d848a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:09:cf:07:06:fe:32:9a:ec:c6:9b:9b:19:
4d:6a:c8:7d:7e:2b:fb:f0:5e:f4:6e:8d:6f:72:fb:
ed:12:9a:40:f1:00:b6:8b:01:9e:12:b1:14:9e:62:
91:5f:21:c8:a9:7a:87:98:10:07:91:b5:22:96:f5:
72:a5:22:81:d2:26:b7:50:2d:bb:d8:96:8a:bd:35:
47:06:c9:88:d5:8e:63:38:69:94:88:60:78:86:b7:
e2:72:a6:a8:17:d1:da:ef:2a:ef:5a:dd:cf:35:04:
47:4d:59:4a:b0:0c:4a:86:82:bc:73:69:ca:6e:34:
71:2e:95:1e:b3:41:ae:11:a1:da:94:50:5d:09:d0:
6c:41:0c:92:03:c4:f2:ff:a1:15:e4:8b:e7:d2:a5:
57:c7:ca:7f:78:2d:2b:fc:84:a5:fe:89:3a:41:c2:
d7:53:7d:44:84:be:4b:f2:8c:4b:ec:bd:16:f7:a1:
b2:27:cf:61:3a:1c:09:fd:42:09:bc:1a:a8:54:6a:
ce:1a:04:44:30:5d:fd:a9:41:83:09:6e:1f:07:51:
4f:e5:f5:ce:f3:2c:e4:cf:71:95:46:0a:3f:4e:57:
22:95:64:5d:a5:f1:a6:58:da:e5:db:9c:b3:93:95:
c4:be:11:01:40:0c:c6:ac:c3:42:b9:40:cc:c8:47:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:61:48:E9:47:A1:06:46:26:E7:11:81:4B:89:7C:09:0D:84:8A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/n4NhSOlHoQZGJucRgUuJfAkNhIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.252.0/22
Signature Algorithm: sha256WithRSAEncryption
70:10:c4:8a:a3:80:a6:8d:47:73:02:da:a6:68:09:4a:6d:91:
3b:0b:a3:aa:69:cd:bf:03:eb:db:e7:03:b8:6a:67:d1:86:b9:
e0:5d:06:48:07:64:34:de:9e:7f:5d:73:2f:db:a1:68:6d:d2:
67:1c:8e:39:da:2f:03:da:c9:43:81:c1:11:7e:d3:04:7f:89:
24:10:08:15:44:a4:12:ab:16:e8:b3:5f:2c:89:f5:61:6b:19:
2e:e6:d4:20:5f:b9:d1:74:cc:72:86:7c:ef:97:f1:82:61:84:
31:00:ec:f7:3f:98:2e:3b:ab:22:1d:14:58:4c:9f:46:00:d7:
f4:24:9d:68:e9:0d:50:7a:a0:c4:fd:af:ea:b0:96:7a:f9:84:
c7:ae:2a:9b:05:1f:87:17:4f:89:4b:31:98:99:12:2f:41:90:
df:32:5d:7f:6b:8d:c6:b0:a4:c8:3a:d9:2a:29:b4:29:80:a5:
cc:b9:51:17:3c:ff:8f:a1:db:22:98:4a:57:75:81:eb:3c:c5:
1d:0d:10:91:f5:9c:3a:b5:8f:79:46:84:f9:9b:38:38:4e:04:
c6:ad:12:42:d4:b0:d3:cb:17:f4:f8:3a:4f:b1:2a:0c:fa:cd:
b9:74:62:18:a3:3f:e6:1b:19:04:bc:45:05:1f:1b:36:60:c2:
6a:4b:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:18 2025 by rpki-client