Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/96ceGnLozFWN_QTriAA9ffT0NZo.roa
File: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (raw, json)
Hash identifier: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=
Subject key identifier: F7:A7:1E:1A:72:E8:CC:55:8D:FD:04:EB:88:00:3D:7D:F4:F4:35:9A
Certificate issuer: /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial: 01942144082C47F2DFDBBE2577F5D03BB395
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/96ceGnLozFWN_QTriAA9ffT0NZo.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44858
IP address blocks: 195.138.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:08:2c:47:f2:df:db:be:25:77:f5:d0:3b:b3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7a71e1a72e8cc558dfd04eb88003d7df4f4359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:8d:9c:79:08:f4:b8:9a:4b:b1:9d:74:5a:
84:3d:59:92:58:75:4e:0e:a4:d1:89:0d:df:64:fa:
a7:7b:73:b5:e0:77:8e:65:db:d5:c1:a2:d3:1f:fb:
57:92:d1:6e:6d:ab:58:9c:b7:2e:62:13:da:61:28:
dd:68:ff:dc:66:95:ea:c6:8e:8a:5d:c9:50:1c:b2:
37:85:c3:e7:a6:22:4c:e9:c6:00:f7:46:78:e0:b6:
34:45:42:ac:69:13:29:80:58:56:17:9f:9f:69:6f:
d2:05:56:95:20:5b:39:a8:a9:bd:1f:63:a2:51:37:
69:56:84:59:7d:af:f2:21:88:60:46:3d:03:d6:01:
d5:9f:8f:af:71:cc:12:6c:ae:59:d6:6f:7a:af:da:
8c:5a:f3:a5:96:f3:b2:e8:fa:0c:8e:dd:12:97:4d:
04:43:c8:e6:b4:12:33:82:16:03:bc:c6:34:38:e2:
4a:ad:16:68:01:c6:18:34:f2:57:2a:fa:14:18:5c:
dc:5c:67:69:23:f8:c4:62:ba:a9:16:c3:5b:dd:05:
d4:df:80:16:09:1b:de:a7:00:b9:55:2d:44:fc:0f:
89:f6:88:99:6a:99:e9:bd:c6:88:98:50:27:11:e4:
a0:bd:75:29:a6:9c:34:a8:43:b1:78:d9:ed:ff:f4:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A7:1E:1A:72:E8:CC:55:8D:FD:04:EB:88:00:3D:7D:F4:F4:35:9A
X509v3 Authority Key Identifier:
keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/96ceGnLozFWN_QTriAA9ffT0NZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:38:2b:d2:18:a0:d0:80:59:84:ec:8f:93:ac:8d:25:38:8b:
3c:81:f2:b0:a5:28:1f:3d:86:af:f4:8f:84:c3:43:a5:ba:b3:
d8:ca:f7:69:43:a6:77:68:03:46:de:5b:19:7c:e0:80:72:c0:
23:5d:bb:1b:e5:13:61:91:2b:77:1c:e5:96:23:2f:19:e2:ff:
d2:8e:4c:71:3f:f0:7f:76:b4:30:fb:f8:97:53:33:3e:0a:91:
78:89:4e:e2:e9:2a:17:3c:28:82:cc:50:2c:c7:4e:76:b4:3f:
bf:40:93:97:bd:66:34:a8:64:65:30:71:a5:57:e7:0e:25:fb:
8c:41:14:07:d8:64:bd:32:fb:b6:8c:c6:6f:c1:3f:9b:14:90:
9e:97:fb:14:bc:04:2e:85:b9:7b:2d:48:ec:57:da:46:e3:a2:
ac:80:b3:0a:0f:d7:85:75:7d:90:25:29:b3:fe:dd:20:05:c0:
cc:a2:3c:29:99:18:63:5b:0a:52:36:fc:53:0c:9c:75:eb:6d:
4c:62:c1:38:e0:fa:2c:65:0b:70:c4:46:b6:02:de:65:88:0e:
1b:82:b1:1d:13:a3:94:90:35:b9:58:e6:da:6a:45:10:43:e0:
74:27:5d:91:24:9e:cb:cb:e1:9d:b3:be:8c:d6:69:09:89:18:
2c:20:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:54:40 2025 by rpki-client