Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa
File: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (raw, json)
Hash identifier: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=
Subject key identifier: 36:25:AC:AF:56:80:79:65:B6:A0:DD:3C:C5:C4:B9:22:BA:A7:9F:74
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 0194228E31CBD95B06C01777B6ABF3A9C625
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56488
IP address blocks: 217.28.136.0/24 maxlen: 24
2a12:2540::/29 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:31:cb:d9:5b:06:c0:17:77:b6:ab:f3:a9:c6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3625acaf56807965b6a0dd3cc5c4b922baa79f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:8c:41:a6:9d:db:09:08:5e:82:25:9c:8d:
96:3c:7e:76:8d:0c:2f:1d:ce:13:c8:df:86:f3:ca:
4d:fb:ec:f1:4c:40:69:e8:b8:5c:ec:74:21:b7:67:
d8:8a:c3:5e:0a:ce:23:03:0b:96:b0:8e:e6:2a:34:
63:c7:27:25:42:9e:f9:f3:71:87:a5:97:00:bb:59:
89:b6:4f:55:41:9c:70:d8:a0:84:c4:68:92:21:14:
54:56:a8:be:f7:7a:4b:f6:03:c0:7a:5f:a4:9b:5b:
91:7f:a2:bb:c8:12:1f:e6:b0:5a:f5:7f:92:e1:d5:
c5:ff:d0:42:10:f9:5d:f7:ee:15:b5:93:29:fd:e5:
ca:18:e2:93:5b:0e:a2:27:d2:8b:3c:8c:26:3e:4b:
73:d8:0c:13:f1:65:6d:d3:05:c6:f3:ee:ae:47:90:
f1:30:f0:c8:25:c0:ae:63:ff:44:53:cd:6f:10:5e:
96:6e:ce:42:82:d0:64:d1:e7:e8:32:cb:93:13:c2:
4b:bb:95:9d:c9:a0:fb:00:11:ae:b2:2a:d7:ba:ec:
50:4f:af:11:46:75:df:8f:82:55:99:89:98:d2:e0:
69:47:ac:ac:3b:c0:b9:95:a8:2b:11:fc:3f:26:b4:
b1:01:30:97:d0:4d:c3:28:da:7a:54:20:18:6f:ba:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:25:AC:AF:56:80:79:65:B6:A0:DD:3C:C5:C4:B9:22:BA:A7:9F:74
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.136.0/24
IPv6:
2a12:2540::/29
Signature Algorithm: sha256WithRSAEncryption
6c:6f:32:c5:53:ba:60:a1:36:68:16:ec:86:ab:d1:5b:9c:01:
9f:76:11:94:d7:1a:3c:c0:22:53:fc:b3:ff:ec:d0:0a:4d:3f:
1e:c7:2b:09:b9:60:bd:42:9b:04:27:a7:3e:96:03:b5:53:9c:
c4:97:7a:e7:6c:e6:09:7e:92:a0:42:14:40:0d:ac:33:95:8e:
fd:8f:bb:b4:4b:56:ea:a3:2d:04:5d:de:4e:5f:52:ee:c9:38:
ee:85:db:26:41:8b:a3:a2:f5:2e:d5:5f:54:c0:33:fe:6d:90:
e1:17:10:ec:94:29:26:38:af:7d:73:09:02:aa:58:c2:91:e9:
d0:7d:13:86:d1:24:72:c3:0d:89:bc:97:b9:cc:f0:3a:e4:0f:
f3:5d:88:0f:d0:3d:20:4b:71:c5:3b:6e:bb:69:82:06:92:92:
49:02:5c:8f:bf:f6:79:ad:8b:9f:ab:69:37:c2:5e:f2:cc:8a:
e4:56:54:e8:ed:a4:c7:1f:30:9b:54:3d:5c:cf:1c:44:8c:43:
97:6e:41:50:1f:1c:61:2b:61:4a:54:6c:08:7e:72:70:24:7a:
83:46:e5:d6:88:6c:16:4a:e4:ad:56:23:b8:2a:ae:1e:24:c6:
64:36:44:51:17:4f:95:44:6f:c0:f1:ca:41:1c:62:e3:b4:08:
ff:a9:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:54:06 2025 by rpki-client