Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/9NXcCPCGYp1JlQR62uCWgbVja78.roa
File: 9NXcCPCGYp1JlQR62uCWgbVja78.roa (raw, json)
Hash identifier: 28uUXvy/7SzavknoRbkScbCSEecBm4cD32qSoQXRRak=
Subject key identifier: F4:D5:DC:08:F0:86:62:9D:49:95:04:7A:DA:E0:96:81:B5:63:6B:BF
Certificate issuer: /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial: 0194282844C7E54BF643F1D4B4D04B4F55A2
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/9NXcCPCGYp1JlQR62uCWgbVja78.roa
Signing time: Thu 02 Jan 2025 17:55:15 +0000
ROA not before: Thu 02 Jan 2025 17:55:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200852
IP address blocks: 212.46.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:44:c7:e5:4b:f6:43:f1:d4:b4:d0:4b:4f:55:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Validity
Not Before: Jan 2 17:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4d5dc08f086629d4995047adae09681b5636bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:be:19:ca:b7:c0:5d:37:fe:f7:18:78:90:
52:c4:74:d5:d1:e5:b8:04:3c:2c:30:97:9d:a9:f5:
e4:74:26:9f:e3:0a:d3:71:39:76:0d:2b:2e:f8:c8:
7a:5f:f0:37:8d:7c:4d:be:b8:78:1b:72:7d:a1:d9:
73:b8:2d:5f:88:f4:ed:d0:6c:40:ff:02:e5:09:f1:
50:a8:08:25:c0:a7:46:34:a5:ea:61:da:e8:33:b9:
0d:3b:49:a6:5a:97:d3:62:95:f3:2e:fa:6b:ea:dc:
69:d1:6e:f8:a0:ff:31:e2:2c:33:15:e4:46:4e:ef:
2f:da:b9:47:37:46:b9:6f:38:99:16:05:69:29:47:
f2:20:c8:cb:2d:61:f5:ad:05:68:00:31:ee:26:da:
81:31:68:17:be:4a:2b:f9:c2:62:b2:98:6c:22:33:
d9:ba:fe:b9:a1:64:c6:b1:01:9d:5c:83:4d:8e:5f:
ee:a4:76:c9:6b:30:b8:b1:6d:21:d4:cd:30:28:f2:
79:3b:5a:71:66:51:32:1c:0a:48:21:01:e3:01:d5:
ec:fe:58:64:25:f6:35:14:8b:4a:71:6a:1c:84:6a:
fe:c9:bc:b2:1c:50:a2:48:f1:3a:32:ab:15:24:59:
41:44:a0:d2:20:80:22:84:1d:74:05:1e:2e:a2:86:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:DC:08:F0:86:62:9D:49:95:04:7A:DA:E0:96:81:B5:63:6B:BF
X509v3 Authority Key Identifier:
keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/9NXcCPCGYp1JlQR62uCWgbVja78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.63.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0d:6b:7b:2c:11:38:0f:96:0c:33:c0:60:80:a3:a3:1a:ea:
f3:ce:44:f3:d0:6c:f0:78:cb:23:96:eb:62:10:9e:5a:b6:29:
cc:00:b3:e7:1c:17:36:c9:92:4e:de:25:34:10:b5:bc:e5:ce:
7d:83:0c:94:2b:9b:31:f7:bd:98:5e:58:b8:d5:0e:2d:01:38:
66:35:25:20:a7:5f:1c:0b:d5:cd:5c:d8:b7:f9:1e:f8:bf:f5:
a1:8c:f3:d0:9f:af:13:6c:46:ac:86:fd:61:92:c3:07:60:b5:
18:e1:64:5e:73:58:1c:6f:3f:ce:e0:9c:23:83:90:77:3e:e0:
de:73:06:0c:76:98:8c:40:91:e4:68:b2:a8:3d:3c:bc:55:de:
40:c7:5c:93:37:2c:4c:f9:82:d2:92:8f:3c:52:b1:a3:06:df:
7a:e0:2c:7f:d2:e0:de:97:49:92:65:87:4a:1c:43:64:e0:ba:
45:50:00:a7:30:19:bf:aa:28:31:95:89:aa:f4:b9:12:fd:48:
aa:e9:12:aa:97:b4:dd:66:09:8e:ad:14:07:0e:cd:e4:2f:4a:
a8:b1:7c:24:6a:51:a0:99:39:74:93:8d:68:07:3e:8a:ee:04:
64:96:76:96:be:94:2e:2b:23:df:70:6b:ca:2a:af:69:38:7e:
b4:d9:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:16:09 2025 by rpki-client