Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/nnciRjVheF08s398UKSonGItpsk.roa
File: nnciRjVheF08s398UKSonGItpsk.roa (raw, json)
Hash identifier: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=
Subject key identifier: 9E:77:22:46:35:61:78:5D:3C:B3:7F:7C:50:A4:A8:9C:62:2D:A6:C9
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01941F8C7AEC22B565211103A1F47637B313
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/nnciRjVheF08s398UKSonGItpsk.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210378
IP address blocks: 2a07:2902:9c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:ec:22:b5:65:21:11:03:a1:f4:76:37:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e7722463561785d3cb37f7c50a4a89c622da6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:46:3f:23:a5:59:3f:f9:f0:a7:26:ca:b3:
46:75:24:d4:d6:fb:9d:43:e6:e3:be:a5:fc:60:3f:
10:f4:3a:c8:4d:e7:b7:4c:90:a4:85:83:c6:a5:f5:
f1:d2:30:e7:f7:4d:08:af:ab:83:a2:22:d9:88:6f:
2b:98:57:83:07:a3:10:9e:9f:14:e2:e9:d2:80:09:
31:c7:64:ab:b1:a7:a5:9f:bf:52:8c:08:90:95:17:
c4:dd:9b:26:d2:dc:35:5a:d7:c1:2e:63:a5:8b:d6:
4c:01:9e:cf:27:56:12:53:8d:1d:aa:3b:27:6e:ae:
c4:77:6d:8b:cb:96:97:23:6f:d5:fa:de:97:98:66:
a0:56:7b:66:cb:85:c3:56:5f:0e:06:21:7a:c4:1e:
35:ee:a6:16:bc:94:27:35:25:41:f2:0c:64:02:06:
ee:76:c8:ca:d5:45:e8:79:47:70:be:84:f3:87:0f:
e1:12:37:a6:ce:c5:02:43:3d:f4:29:7c:e0:dd:1a:
90:0f:c9:93:e3:cf:2c:63:39:6e:ac:1d:62:93:1a:
89:a4:2c:d7:ec:df:6b:4f:f1:4f:d8:b9:b3:d0:07:
12:82:00:72:c2:6c:b4:cb:62:0c:5d:ff:87:6c:28:
74:bf:93:0a:4c:fc:67:69:1f:1b:59:16:dc:7f:40:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:77:22:46:35:61:78:5D:3C:B3:7F:7C:50:A4:A8:9C:62:2D:A6:C9
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/nnciRjVheF08s398UKSonGItpsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2902:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
6f:e8:c9:b9:0b:58:0a:60:f7:a6:68:91:51:91:eb:11:d2:1c:
c3:1c:0b:32:1f:77:5e:bf:87:94:f1:2a:53:b7:6b:d9:d0:cb:
70:35:23:b9:eb:60:0a:f1:2c:04:01:7d:e9:3a:e5:94:e5:27:
6d:6a:85:89:b9:08:05:cb:ce:69:77:85:84:e5:f2:06:c9:48:
0e:92:05:99:ea:61:4f:68:5d:6e:11:19:1f:d4:01:b3:5c:7d:
ba:4e:c3:6d:ce:23:2e:28:6e:7a:1e:df:26:b2:75:62:a1:1f:
e5:07:91:0e:c7:6c:c4:c6:ce:c0:ba:44:49:ee:db:2d:a0:f3:
3c:05:65:22:6e:33:d5:48:91:bc:fd:ff:81:80:55:7c:1a:fb:
a4:81:c9:42:b3:a8:e1:2b:f4:ed:1d:57:49:e9:9c:33:1d:f3:
8f:a1:55:19:a3:d5:90:8c:cb:93:ac:57:12:7f:f9:ac:05:a5:
b6:d2:98:be:a6:c8:95:4e:06:e2:72:6a:a4:98:da:f7:75:35:
71:18:01:40:11:4a:a4:1c:50:6f:28:a5:d2:45:c9:ab:92:96:
fe:51:93:36:b1:54:34:65:c6:ec:42:d8:6c:f5:a4:bc:ec:35:
d8:ef:84:b9:c7:82:d9:ba:d2:99:d7:91:a7:7f:3a:a0:c4:d5:
6f:65:60:48
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQfjHrsIrVlIREDofR2N7MTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw
OTliYjgwHhcNMjUwMTAxMDE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTc3MjI0NjM1NjE3ODVkM2NiMzdmN2M1MGE0YTg5YzYyMmRhNmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZdGPyOlWT/58KcmyrNGdSTU1vud
Q+bjvqX8YD8Q9DrITee3TJCkhYPGpfXx0jDn900Ir6uDoiLZiG8rmFeDB6MQnp8U
4unSgAkxx2Srsaeln79SjAiQlRfE3Zsm0tw1WtfBLmOli9ZMAZ7PJ1YSU40dqjsn
bq7Ed22Ly5aXI2/V+t6XmGagVntmy4XDVl8OBiF6xB417qYWvJQnNSVB8gxkAgbu
dsjK1UXoeUdwvoTzhw/hEjemzsUCQz30KXzg3RqQD8mT488sYzlurB1ikxqJpCzX
7N9rT/FP2Lmz0AcSggBywmy0y2IMXf+HbCh0v5MKTPxnaR8bWRbcf0D3lQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJ53IkY1YXhdPLN/fFCkqJxiLabJMB8GA1UdIwQY
MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt
ODhkMmRmMTBkMTViLzEvbm5jaVJqVmhlRjA4czM5OFVLU29uR0l0cHNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi
LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgcpApww
DQYJKoZIhvcNAQELBQADggEBAG/oybkLWApg96ZokVGR6xHSHMMcCzIfd16/h5Tx
KlO3a9nQy3A1I7nrYArxLAQBfek65ZTlJ21qhYm5CAXLzml3hYTl8gbJSA6SBZnq
YU9oXW4RGR/UAbNcfbpOw23OIy4obnoe3yaydWKhH+UHkQ7HbMTGzsC6REnu2y2g
8zwFZSJuM9VIkbz9/4GAVXwa+6SByUKzqOEr9O0dV0npnDMd84+hVRmj1ZCMy5Os
VxJ/+awFpbbSmL6myJVOBuJyaqSY2vd1NXEYAUARSqQcUG8opdJFyauSlv5Rkzax
VDRlxuxC2Gz1pLzsNdjvhLnHgtm60pnXkad/OqDE1W9lYEg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:35:26 2025 by rpki-client