Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nHqsYCixFLIK6Y-GTTIJHTBVu3c.roa
File: nHqsYCixFLIK6Y-GTTIJHTBVu3c.roa (raw, json)
Hash identifier: JRqSwUR+N8x+lgsF+O//EaBVPWZjNsdyZORphRRJsfg=
Subject key identifier: 9C:7A:AC:60:28:B1:14:B2:0A:E9:8F:86:4D:32:09:1D:30:55:BB:77
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9E8D87420476BFD02CA4E43EFC32
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nHqsYCixFLIK6Y-GTTIJHTBVu3c.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43234
IP address blocks: 146.120.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9e:8d:87:42:04:76:bf:d0:2c:a4:e4:3e:fc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c7aac6028b114b20ae98f864d32091d3055bb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:58:0a:5e:f3:12:3e:df:f9:06:49:a9:43:
ed:32:97:da:6b:e5:56:09:97:59:67:fa:4a:9d:76:
af:23:fc:7f:c4:c9:02:ff:ef:59:6f:d6:b6:e3:2d:
7a:d2:b1:98:a7:3a:77:0a:39:04:b1:b3:57:da:78:
07:ef:63:8d:59:9a:93:16:cb:83:17:8a:a9:fb:2f:
e6:0f:f9:b9:3f:13:8c:70:25:3a:e3:ec:b3:9d:4a:
6a:73:df:9e:e7:d2:47:52:14:af:44:f4:c1:b5:3f:
59:95:8f:5a:49:f1:fd:a8:1d:f3:1f:44:9b:52:ed:
90:72:75:2d:07:ab:69:26:a6:c5:ec:68:df:6a:a5:
aa:08:e6:89:13:1f:95:73:76:9e:3b:52:0e:e3:38:
63:f9:44:fb:68:b4:73:c1:8d:0f:22:df:19:13:2b:
fc:0b:49:21:9d:66:85:04:42:29:9b:f8:2c:c8:d7:
50:7d:ee:89:da:6e:b7:80:b3:dd:53:39:cf:91:fb:
0c:aa:c3:f2:9f:3e:af:56:70:4b:48:07:e7:0b:c3:
16:c3:7c:ee:8a:0c:47:39:23:85:e2:64:09:d6:e4:
6c:d4:19:13:7d:a0:63:1d:31:cb:4a:01:67:17:3d:
66:7e:07:85:4a:cb:04:70:b6:34:a5:08:6d:bd:54:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7A:AC:60:28:B1:14:B2:0A:E9:8F:86:4D:32:09:1D:30:55:BB:77
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nHqsYCixFLIK6Y-GTTIJHTBVu3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a4:ac:34:c8:43:06:85:1d:c9:ff:ec:f8:0b:51:f0:70:02:
24:ed:fa:00:c3:da:19:d3:3d:4c:22:c7:14:c6:dc:e6:b0:9d:
bb:56:09:10:52:9e:e5:da:c0:bd:6f:05:65:74:6a:34:fb:f3:
8e:2d:70:c5:d2:e6:33:98:29:cd:ad:64:0a:fb:bb:b5:d3:49:
da:9b:39:f9:80:b5:ea:00:d3:2a:cf:2b:cf:6c:b0:2e:07:65:
ae:42:71:1c:7e:5d:e9:c3:40:c6:bb:16:bf:fe:53:78:1b:86:
64:7a:05:71:2e:87:9c:c4:d3:8b:2c:23:d7:10:78:cc:a5:b2:
29:b7:fb:38:6f:20:15:e4:d4:70:28:11:e8:5a:2e:63:f0:f9:
39:8b:9b:87:95:ec:49:7e:30:21:43:6f:f2:d5:77:1e:25:5c:
07:7d:fe:b3:f3:1d:bb:f2:78:5b:64:6b:b5:f6:01:8c:cb:bf:
55:5e:6f:67:a9:7b:52:00:64:92:12:63:1d:37:2e:1d:5b:07:
8a:cf:eb:22:26:40:8e:81:0c:48:d3:0c:c0:bf:f5:1a:94:76:
61:5e:c0:10:dd:a7:a7:23:4c:f6:1e:ff:2a:41:e8:c7:91:83:
0d:05:de:28:1b:e1:a2:ec:46:c6:72:1e:9b:57:30:bb:a5:e1:
2d:2c:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:54 2025 by rpki-client