Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/nK4fLsZ-CNNohZUItb4se5mVTks.roa
File: nK4fLsZ-CNNohZUItb4se5mVTks.roa (raw, json)
Hash identifier: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=
Subject key identifier: 9C:AE:1F:2E:C6:7E:08:D3:68:85:95:08:B5:BE:2C:7B:99:95:4E:4B
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 0194258F9EE3160DEF66F8804C6177974097
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/nK4fLsZ-CNNohZUItb4se5mVTks.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 185.36.102.0/24 maxlen: 24
2a05:4cc0::/29 maxlen: 48
2a05:4cc0:f1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9e:e3:16:0d:ef:66:f8:80:4c:61:77:97:40:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cae1f2ec67e08d368859508b5be2c7b99954e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:65:e7:6d:f9:a9:3a:d2:52:87:b0:21:73:
dc:aa:6b:ea:14:e2:25:8c:a7:22:14:03:c2:a6:bb:
3f:b6:d7:27:f2:9a:79:61:7c:54:56:ea:52:de:c3:
32:59:61:96:08:b9:3a:f9:9b:6c:e2:81:e9:b7:3c:
cb:aa:b9:70:7b:9f:4d:79:a3:bd:30:20:da:fb:f2:
cc:66:cc:1f:17:d8:39:7c:be:d5:ff:f1:00:c9:76:
40:9f:1e:ce:df:91:9d:5d:a2:aa:c5:1e:98:b9:80:
22:59:1e:da:c5:ad:d4:8d:51:95:2a:3e:27:ea:43:
1c:04:6c:6f:e3:86:3a:0a:63:45:20:bc:c3:fe:53:
e0:51:4b:33:9c:d2:53:42:47:12:a6:81:df:02:5a:
14:66:58:b4:b7:d9:3e:c7:a3:11:3f:ec:62:ef:3c:
38:e0:41:bf:59:87:1d:de:0b:cc:89:b0:18:c0:49:
11:61:ec:8e:5f:c2:a3:cb:fb:b8:e1:05:f7:69:7b:
98:19:8b:da:03:f8:4f:07:ec:28:8b:89:5e:5c:f6:
92:57:64:2e:61:a1:90:4d:38:c1:98:d2:08:f0:35:
02:a8:0f:17:17:0e:56:a5:e0:b4:1c:5c:1c:0f:e1:
39:be:ca:65:cc:63:3f:8e:1f:17:ec:3f:c4:4e:d3:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AE:1F:2E:C6:7E:08:D3:68:85:95:08:B5:BE:2C:7B:99:95:4E:4B
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/nK4fLsZ-CNNohZUItb4se5mVTks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.102.0/24
IPv6:
2a05:4cc0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:02:ce:12:52:ba:ae:e2:d6:9d:3b:37:7c:f8:36:a2:1e:24:
aa:d3:88:b2:75:d7:22:88:84:ec:c7:e2:4f:5d:b2:74:b9:30:
c0:fd:48:40:a4:81:03:22:d6:42:c7:c0:4e:56:8e:a3:88:0c:
f3:ee:9f:3c:7f:e0:c4:b6:ca:7e:a8:90:eb:59:0b:5d:d0:76:
30:c8:a8:3d:dd:29:d0:3f:47:97:e3:c0:0a:35:ec:06:9d:18:
fd:67:c0:51:2d:c9:3e:7d:8d:b9:fb:78:12:04:6c:64:c3:5d:
2e:ac:9a:08:14:a2:3e:a8:d0:75:63:df:3a:92:03:03:fa:3b:
16:52:5e:1b:54:b5:ea:d3:e4:3a:a9:ee:a6:a4:d3:f7:55:ea:
01:43:73:a8:68:40:15:8a:8c:23:fd:c4:f9:c2:2d:61:da:9a:
ae:ef:31:ee:f7:5e:f6:36:83:89:9f:44:ac:0c:ae:b5:a4:78:
0f:94:c4:4c:80:81:6e:f6:dc:17:72:48:d0:c0:87:2d:d5:46:
39:6d:23:76:19:b5:71:b5:ab:f0:d7:8c:35:f4:69:52:bb:da:
da:c1:53:40:d8:64:0b:59:fc:23:bc:d4:15:dd:e2:fb:78:fc:
bc:17:6f:5d:a8:a9:4b:20:9f:59:53:94:76:e6:28:26:2f:db:
7e:3a:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:34 2025 by rpki-client