Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/nVf4_JDF5Jd9blmd8M4doxhRW2o.roa
File: nVf4_JDF5Jd9blmd8M4doxhRW2o.roa (raw, json)
Hash identifier: fALm6gvriMfPKqnoL8NdKDlRyE7vGyHBMNh6mS8vfwc=
Subject key identifier: 9D:57:F8:FC:90:C5:E4:97:7D:6E:59:9D:F0:CE:1D:A3:18:51:5B:6A
Certificate issuer: /CN=69d78759e0ec6f14566d10b83c83f2bf199b7100
Certificate serial: 019422FBBF560386C8CAB1DAE3C9C6F4A9B9
Authority key identifier: 69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/nVf4_JDF5Jd9blmd8M4doxhRW2o.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 84.254.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bf:56:03:86:c8:ca:b1:da:e3:c9:c6:f4:a9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d78759e0ec6f14566d10b83c83f2bf199b7100
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d57f8fc90c5e4977d6e599df0ce1da318515b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:f3:45:4e:6f:91:17:83:14:21:2b:a4:65:
a8:86:f4:b0:88:31:b6:77:5b:b6:65:52:fd:c1:d0:
f9:d7:13:6c:3a:54:58:5d:46:dc:ff:2d:40:a5:4d:
1f:34:8c:7a:6f:75:75:55:69:86:b7:6c:01:d8:e9:
62:41:c1:c9:0a:da:f5:19:5b:53:41:09:33:e1:7c:
ee:a3:af:2d:eb:6f:b0:b2:8f:51:4d:af:e0:fa:44:
5c:79:66:9b:5f:10:69:47:a1:8e:f9:be:42:0b:bf:
27:92:1c:d7:fb:eb:a6:cf:32:0e:6c:24:28:f3:9a:
81:34:59:87:b7:33:c4:ef:13:b5:5a:7a:b5:60:e5:
50:ff:fd:34:c7:ea:6d:06:e3:63:33:db:66:33:48:
b6:02:ca:db:7e:3b:2e:85:30:21:a6:47:c0:a7:38:
20:72:50:34:01:4e:1d:a3:6f:86:ae:b9:53:79:01:
06:4d:4e:11:6c:1f:4c:ca:f9:89:36:fe:a4:69:f7:
eb:a5:a8:18:39:f8:0b:b1:c9:88:ae:ec:66:52:49:
ca:55:89:f3:55:8b:5d:21:a4:6d:73:8f:91:af:6d:
f2:5f:99:8d:b1:2b:98:2e:67:7f:70:60:ab:53:e4:
ca:18:01:04:ea:38:6d:5d:e7:a5:27:5c:d3:78:eb:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:F8:FC:90:C5:E4:97:7D:6E:59:9D:F0:CE:1D:A3:18:51:5B:6A
X509v3 Authority Key Identifier:
keyid:69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/nVf4_JDF5Jd9blmd8M4doxhRW2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.68.0/22
Signature Algorithm: sha256WithRSAEncryption
66:a5:54:49:35:85:ff:09:e0:cb:9b:8a:7e:62:83:12:5e:20:
9e:d8:45:09:3c:90:d4:91:29:61:aa:a5:44:72:8f:cb:1a:b9:
01:2f:8c:af:e9:0c:4e:b7:90:46:51:94:dd:e7:73:77:fc:07:
61:54:0a:59:0a:31:de:07:09:b6:df:86:c4:8d:63:ba:2e:51:
51:83:94:b0:95:ba:24:26:84:1e:e1:ba:c4:6b:b2:e4:d1:4c:
6a:7d:f1:d4:c4:06:6f:63:a7:6e:24:da:5f:77:4a:be:bc:1e:
d3:29:db:71:55:ea:5b:28:cc:83:88:3e:7f:ca:d6:51:40:88:
2d:0f:cf:68:17:12:2c:15:5b:4f:00:5e:8b:28:52:8f:ff:4b:
b5:3b:38:ee:b7:c6:a7:c0:a3:a4:d3:da:64:0a:9a:e2:6e:f6:
d0:0c:0d:f2:18:9d:b7:9e:e3:8c:8a:23:d7:d9:ed:e5:d1:a3:
26:45:8f:5e:e8:c2:56:c6:66:40:ee:b2:b2:6c:0b:ce:f0:a3:
68:74:8c:4b:9a:ba:a6:f1:2e:cc:73:4d:c9:bf:a2:cd:70:55:
dc:f6:77:97:46:44:e9:20:c5:b9:97:1b:e5:d2:53:43:57:ca:
b6:04:68:4f:db:16:0a:c7:60:fd:06:24:d8:b0:04:21:93:93:
d2:82:71:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:34 2025 by rpki-client