Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/nHSye6xLjTJdy1NFMQ9UNlBR1r0.roa
File: nHSye6xLjTJdy1NFMQ9UNlBR1r0.roa (raw, json)
Hash identifier: x+w+bpNcYVfLYVFpFJoqaG3bmPwP5KeEN+TuOk91gTE=
Subject key identifier: 9C:74:B2:7B:AC:4B:8D:32:5D:CB:53:45:31:0F:54:36:50:51:D6:BD
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01942826090602EFB99D0AE10C2DB56105C5
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/nHSye6xLjTJdy1NFMQ9UNlBR1r0.roa
Signing time: Thu 02 Jan 2025 17:52:48 +0000
ROA not before: Thu 02 Jan 2025 17:52:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 188.191.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:09:06:02:ef:b9:9d:0a:e1:0c:2d:b5:61:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c74b27bac4b8d325dcb5345310f54365051d6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:74:be:d1:ba:49:90:f1:46:36:e1:d8:55:
17:98:b9:f2:00:72:16:86:eb:2f:bb:1d:b8:8b:b5:
8e:55:2c:56:4d:3a:a3:77:32:b0:40:fc:b8:05:a5:
6b:b4:d7:aa:4a:d5:26:d2:3c:ed:07:f4:2c:53:6d:
59:0f:2d:4f:20:14:02:4e:e2:27:4d:ff:6b:5b:c0:
c0:b9:70:5c:08:d2:92:e0:1a:95:28:07:14:ed:38:
67:55:e2:8e:3f:85:dd:94:b0:11:ae:48:4d:b1:53:
9f:96:9c:ce:92:94:17:c9:30:c6:dd:d8:7d:42:51:
23:84:da:3a:1c:ea:f3:80:83:79:4b:5e:84:41:2a:
f8:a8:1e:70:ea:32:45:a3:0a:ae:31:24:8c:30:59:
78:0e:5e:b4:10:40:ec:99:cc:8d:db:9f:b9:a9:34:
ee:59:4a:a9:7a:bd:a6:4d:54:5c:94:04:b1:07:09:
5a:96:a6:af:53:c5:c8:a6:5b:b0:bb:3b:01:b0:a9:
ff:5c:b8:2c:84:fb:79:75:04:36:d3:36:31:6a:2b:
e1:80:8c:6c:aa:eb:72:5e:f3:1e:8f:c5:46:e1:5a:
d1:f1:96:69:0f:0f:0b:e4:86:84:dd:0a:1a:7c:27:
73:97:79:59:5d:6c:77:8f:07:a3:27:65:c1:49:41:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:74:B2:7B:AC:4B:8D:32:5D:CB:53:45:31:0F:54:36:50:51:D6:BD
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/nHSye6xLjTJdy1NFMQ9UNlBR1r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a1:e2:bc:57:15:68:29:6d:e7:72:e4:3f:1d:0f:fe:9a:25:
17:da:b9:ef:7d:ca:5c:ab:9e:c4:86:e0:41:2e:f0:1b:58:61:
08:19:31:75:a4:c8:fe:5f:0d:29:96:66:df:cf:9c:cb:4d:45:
56:5d:67:5d:d6:81:4d:2d:3e:33:c4:af:f7:94:29:7e:f5:db:
b2:11:50:50:f1:8c:bf:22:6d:24:37:b4:d9:c4:2d:dd:63:6b:
04:c7:03:9a:26:d2:66:8b:d0:84:c0:d2:b8:04:20:46:5c:4a:
28:9b:28:ec:51:d4:fe:16:60:f8:f3:ec:22:28:b5:10:8e:9f:
cd:5a:a7:19:27:c4:fa:01:93:10:ac:9a:92:22:da:8f:75:88:
93:4b:2d:99:bf:0d:29:cc:b5:ec:bf:66:33:dd:49:4d:a3:d8:
a8:56:19:ea:5c:12:60:1c:c3:bd:13:0d:ba:c0:56:cd:6b:e7:
04:29:9d:8d:1e:7f:da:1d:4b:ed:eb:26:30:85:4d:ce:29:f2:
0e:d9:3a:08:9c:f9:ed:d3:8c:b7:5c:d2:8d:b4:be:6e:d9:03:
1e:32:cb:9d:0b:e7:be:fe:98:38:1c:2b:ac:2b:1c:99:26:19:
13:3b:2f:1d:9e:1e:27:6e:7f:7a:89:ea:7d:1e:3c:9b:a3:9a:
2c:f0:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:33 2025 by rpki-client