Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nqNpqxiiesheCCeqK53xQj3S098.roa
File: nqNpqxiiesheCCeqK53xQj3S098.roa (raw, json)
Hash identifier: 2DtLb2ES6JjRgW8bn+Qbl4U1xhy1QrUbg+jAVJ9BH7A=
Subject key identifier: 9E:A3:69:AB:18:A2:7A:C8:5E:08:27:AA:2B:9D:F1:42:3D:D2:D3:DF
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D45805BEEA10F8D6CF93E103E1A4F
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nqNpqxiiesheCCeqK53xQj3S098.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 80.78.132.0/24 maxlen: 24
2a0d:2146:2400::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:45:80:5b:ee:a1:0f:8d:6c:f9:3e:10:3e:1a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ea369ab18a27ac85e0827aa2b9df1423dd2d3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:3b:ed:56:14:13:aa:32:c5:b6:3f:8f:14:
77:c7:3d:02:09:c1:8c:11:71:5b:8a:2a:b5:d4:2a:
c0:e3:81:70:b0:39:6e:05:f3:6e:ed:34:8e:af:10:
71:56:af:03:7c:b3:ec:9c:cb:3e:a9:b9:f2:79:bf:
e9:c1:43:2b:ea:af:7f:c5:49:a1:1d:9a:fe:9c:37:
ae:91:6c:48:b9:62:d7:f2:7c:67:70:ac:b8:32:b3:
fa:16:1e:c4:9c:c3:d8:6f:fd:20:c7:e5:30:d1:19:
a3:5a:16:14:35:93:ea:a3:13:51:65:db:17:99:c1:
28:28:f6:d0:20:06:a6:f7:67:3a:87:88:ce:67:16:
f1:d5:7a:34:8a:54:bb:ec:b1:6c:29:02:05:b4:dc:
c1:d7:04:7b:a9:b5:83:a0:fc:ad:83:a0:cf:7c:40:
cf:6f:73:35:32:f3:46:50:db:b6:31:b1:bf:20:57:
30:85:78:c4:41:2a:de:63:75:e6:cd:5e:96:90:a1:
c5:b3:8a:de:53:2d:70:c6:a3:42:41:5d:c5:c3:c7:
ea:07:6c:d2:9c:77:f2:f0:7b:5a:a4:45:c9:35:ce:
64:d5:4e:7b:2c:db:d2:5d:42:99:75:6f:a1:39:35:
4d:39:69:c7:59:4a:f6:fe:b6:cd:6d:94:64:24:5f:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:69:AB:18:A2:7A:C8:5E:08:27:AA:2B:9D:F1:42:3D:D2:D3:DF
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nqNpqxiiesheCCeqK53xQj3S098.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.132.0/24
IPv6:
2a0d:2146:2400::/44
Signature Algorithm: sha256WithRSAEncryption
d4:50:83:7e:a1:65:fd:79:b3:a0:f3:7c:35:ea:e5:68:a8:41:
c6:84:bd:61:98:73:67:17:f5:90:6b:2a:00:5f:34:d5:d5:08:
2d:8d:5b:50:28:47:85:ec:22:30:41:bc:7e:4f:3c:e5:81:4b:
37:88:2d:3b:52:f2:3f:90:3b:3a:91:16:6a:3c:42:c7:d7:a3:
4c:cc:9e:e8:7c:75:97:2d:2c:bb:da:0e:d6:eb:bc:b2:1f:a9:
87:e3:45:92:eb:b4:83:e6:ee:ff:12:ae:c0:2e:93:7b:e6:24:
33:e2:17:fd:77:3f:d9:f5:72:f1:93:ee:28:ed:b6:b1:92:92:
4f:be:40:5d:17:08:cb:80:8c:1b:51:56:db:51:f0:f2:29:f9:
19:1f:22:d4:cb:2b:59:a4:f6:c9:e7:bd:19:30:03:6d:7d:5f:
1e:4f:32:48:87:29:c6:2b:fe:7b:9a:83:4e:e2:13:90:ac:e6:
98:80:b8:ae:34:a2:4d:b9:3c:be:97:c1:34:39:69:73:47:13:
bd:31:87:6d:fd:b9:95:3e:31:b9:e9:11:5c:ea:a0:f4:ce:b8:
1f:8f:79:d9:34:7d:15:ac:d5:b8:64:4f:44:25:24:f7:98:6b:
61:a4:b6:55:c4:74:67:50:4d:d9:15:75:57:fc:81:2a:c9:c3:
15:dc:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:08 2025 by rpki-client