Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa
File: nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa (raw, json)
Hash identifier: 9j/+zG1+gdxJdHggAHxvXOVulCvMT9Y+f9TRZ3Vf7+E=
Subject key identifier: 9C:C7:DA:03:EF:29:4E:54:36:22:4D:35:5E:33:B3:69:7B:33:F1:2E
Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial: 01955C77F39ECCA8F61097D05F1A2045B899
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa
Signing time: Mon 03 Mar 2025 14:45:19 +0000
ROA not before: Mon 03 Mar 2025 14:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213096
IP address blocks: 93.177.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:77:f3:9e:cc:a8:f6:10:97:d0:5f:1a:20:45:b8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Validity
Not Before: Mar 3 14:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc7da03ef294e5436224d355e33b3697b33f12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:ae:5a:cc:d6:75:0f:e0:62:f2:a7:45:df:
65:52:31:1a:10:3e:f6:2b:eb:f2:f4:ca:99:6c:03:
e4:4a:10:86:70:15:da:c1:fc:68:ae:d2:f8:23:8f:
29:8b:76:85:4f:6f:52:39:1d:be:e7:e3:17:58:18:
78:f8:c6:c5:e9:c6:4d:fe:d9:0d:90:f9:e6:d1:1d:
1c:9b:06:9f:49:01:64:a1:c1:d2:a1:36:f4:e0:a6:
bd:2b:9c:01:20:5c:41:0d:77:a5:2e:fa:5b:3f:1a:
35:af:ca:0b:1a:0b:16:2e:0d:9f:89:60:9a:fb:2f:
a3:13:86:7d:44:9d:2a:81:70:b3:c3:ab:0f:0f:39:
87:5d:8b:39:fd:23:ef:fc:03:20:05:50:38:84:6d:
1b:d7:14:b4:fa:9a:9c:54:91:55:39:4f:dd:c0:e8:
c8:4f:16:c4:06:0e:af:c7:8a:59:94:8e:8c:9d:47:
ea:c1:a1:9d:b2:7f:ad:00:0a:0d:26:86:a9:bc:8e:
80:76:25:e8:68:3e:87:2b:f4:88:50:9b:2b:67:e0:
e3:00:d6:d2:fd:85:f7:56:64:6e:90:f7:7c:99:a2:
28:17:26:ea:de:0a:fd:3b:f9:f2:ec:0b:3c:15:97:
d9:12:d9:ab:77:5e:8c:54:3e:72:62:96:33:50:03:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:DA:03:EF:29:4E:54:36:22:4D:35:5E:33:B3:69:7B:33:F1:2E
X509v3 Authority Key Identifier:
keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
40:58:df:84:75:ba:18:53:2a:09:26:cf:06:a4:37:86:f3:39:
a2:fb:55:c8:21:4d:01:d3:cf:56:25:58:68:d0:9d:83:41:e0:
7d:74:88:50:64:9a:8d:c3:72:68:8d:1f:d4:81:f0:51:d2:2a:
11:0a:20:66:22:6c:65:4b:01:10:b0:96:a9:95:28:eb:0e:01:
63:9e:3d:ed:c6:7f:25:cc:92:fb:69:1d:7a:c4:2a:6d:53:d6:
f3:02:28:33:fe:93:e9:26:a1:b0:8c:1f:ff:a0:2d:a4:92:45:
55:c4:ba:71:43:d7:16:cd:5c:fb:54:f8:13:e8:06:e5:81:c2:
59:c2:48:fd:ce:e0:41:58:6b:96:63:4a:0a:10:4f:ea:e5:e8:
99:50:e5:86:59:b4:77:f5:90:b0:de:16:29:dc:19:ff:e1:39:
1b:45:d6:02:a0:94:bf:85:02:41:f6:e9:14:27:f6:fe:17:9b:
11:0b:91:ca:be:ab:c4:1d:80:8e:da:f3:57:c2:31:06:f9:77:
d7:64:1f:5c:96:e6:01:a9:e7:99:eb:e7:d1:44:9a:be:57:95:
9b:02:56:3b:b4:f9:37:12:30:b7:c9:53:28:2e:5e:15:6c:42:
b9:cb:69:33:66:96:fd:60:b1:e4:e0:0f:07:e5:50:ef:63:5a:
f4:bb:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:56 2025 by rpki-client