Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/Nt8U8Z3kL0IxgChONZlb9wxsuew.roa
File: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (raw, json)
Hash identifier: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=
Subject key identifier: 36:DF:14:F1:9D:E4:2F:42:31:80:28:4E:35:99:5B:F7:0C:6C:B9:EC
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019427B63DDAF4FE8DCF073811F1F5D492B6
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/Nt8U8Z3kL0IxgChONZlb9wxsuew.roa
Signing time: Thu 02 Jan 2025 15:50:42 +0000
ROA not before: Thu 02 Jan 2025 15:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209288
IP address blocks: 81.173.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3d:da:f4:fe:8d:cf:07:38:11:f1:f5:d4:92:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Jan 2 15:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36df14f19de42f423180284e35995bf70c6cb9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:42:46:ac:51:f7:ca:f3:bb:f6:c1:33:ab:
3c:d4:46:0b:c5:ca:e7:b1:17:4c:b7:ee:80:73:2d:
57:0a:3b:08:1b:1f:ea:b1:a8:e4:b2:9a:e7:ff:87:
1a:05:51:57:b6:d8:12:22:71:23:98:a4:c7:65:d9:
1c:ff:8a:21:d8:cc:7c:8c:4d:76:a7:11:3d:a9:17:
46:11:cd:2c:87:ce:14:0d:84:8c:fc:ac:8a:8c:5c:
3e:b7:ac:36:27:34:0f:00:eb:48:73:1f:55:bf:8d:
9f:a2:8f:d5:41:5d:39:7d:e1:5f:29:e2:99:b6:66:
a8:37:c2:20:3d:59:d6:36:01:37:32:64:d0:76:ff:
2d:8c:f6:09:bf:6b:6a:50:09:07:7e:76:94:26:35:
ea:5d:e5:d7:4e:4f:42:d7:00:bf:f4:da:38:4e:7b:
86:49:3c:b5:5e:12:5b:65:a2:6f:dd:ba:4a:15:dd:
66:58:34:7d:75:b8:92:6b:de:51:d2:7c:09:48:10:
f9:3d:21:5e:a9:a4:81:6c:93:2d:ab:a4:b6:17:92:
b0:f9:49:8e:6b:ba:b5:4e:fb:a1:5d:19:35:0a:d1:
54:3d:ff:7b:47:f6:7d:dd:71:f9:39:4d:bd:c3:13:
cd:49:99:9a:d0:f7:61:97:71:60:0e:a5:70:2a:5e:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DF:14:F1:9D:E4:2F:42:31:80:28:4E:35:99:5B:F7:0C:6C:B9:EC
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/Nt8U8Z3kL0IxgChONZlb9wxsuew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.47.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:97:3d:8e:0b:c9:e6:05:6b:26:1c:73:3e:10:db:72:fb:a1:
4d:46:5d:f1:ab:59:9f:d7:c4:b1:8d:7a:29:5b:c1:74:de:72:
3c:65:f6:fa:08:bc:c5:26:a9:67:b4:29:c4:dc:9b:58:7b:af:
f6:08:a3:c0:0c:c5:29:3c:f2:2f:62:cc:28:d3:df:9d:06:fc:
fe:96:79:92:3e:60:5a:50:ca:ca:0a:b2:7c:bc:43:aa:4d:79:
b4:39:12:c6:ac:3c:f3:0d:e8:bc:31:a0:68:e7:78:ea:5a:05:
01:e2:d3:fe:20:d7:19:5c:cf:87:ee:dc:6e:0d:44:fc:b2:5d:
4e:4c:8d:40:f5:34:0e:4f:a8:c3:b9:f1:12:cb:b5:37:5b:c5:
40:aa:4f:83:58:ed:f6:71:ae:a3:49:62:42:e8:fe:ed:e2:6d:
3b:06:e2:66:cd:0b:42:b1:65:d9:ae:6f:de:b8:6b:e2:69:7b:
92:aa:09:1e:bf:f0:a1:ea:c7:ba:ae:71:3d:51:74:97:92:41:
18:25:6f:e0:51:0a:e8:fd:0b:b8:b7:76:37:9f:50:38:1f:ed:
17:99:b7:5d:70:2b:e7:37:4a:47:5c:7d:96:08:57:8e:24:2f:
c6:6e:7c:8e:90:97:6d:f6:42:b5:76:5a:e4:1a:bc:09:43:7b:
9e:f7:2f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:16:20 2025 by rpki-client