Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa
File: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (raw, json)
Hash identifier: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=
Subject key identifier: 9C:C5:6E:52:18:50:2D:DF:E9:D8:C9:88:16:0D:2E:93:AA:0D:D0:30
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7DDC5EA6B309807E222203B9F3B93
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa
Signing time: Wed 01 Jan 2025 21:48:57 +0000
ROA not before: Wed 01 Jan 2025 21:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34901
IP address blocks: 212.22.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:dd:c5:ea:6b:30:98:07:e2:22:20:3b:9f:3b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc56e5218502ddfe9d8c988160d2e93aa0dd030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:61:40:8d:ec:0f:83:73:87:16:5b:a2:ce:80:
cc:9e:93:e4:db:a5:36:4a:f5:58:27:e5:8e:db:85:
ee:87:27:5e:c7:8d:8b:1a:3f:d9:e9:83:e0:6d:c7:
a8:73:51:dc:72:ba:23:ad:12:2b:ff:a1:92:9b:80:
47:af:c1:f8:03:c6:0b:50:bb:86:e1:f1:fd:95:17:
a2:a1:2a:f4:98:52:20:ad:4c:36:19:c4:4e:ab:b7:
0c:04:f5:28:73:84:58:4e:66:5c:15:fd:a1:5f:b3:
b3:57:e3:28:03:cf:d0:e1:11:47:3a:4d:b7:b5:be:
72:13:d5:de:52:5e:ec:e5:89:0c:a4:53:56:01:3e:
71:54:6e:70:17:ae:73:5e:6d:16:eb:bc:15:61:f0:
18:55:ba:ac:6b:7c:70:0c:35:98:c0:d2:78:d0:38:
7e:60:ed:2f:dd:69:af:a1:bf:e3:25:a8:4c:2f:75:
13:d0:f8:ee:9d:69:ca:25:df:38:8a:18:da:ae:73:
71:e7:14:51:fd:30:de:0b:7b:cd:22:f9:dd:01:dd:
35:68:40:3d:73:ca:d0:49:51:9f:f7:4b:eb:73:fa:
5f:32:44:39:5d:e8:f1:f7:a5:1d:cc:6b:93:11:3e:
98:c2:7f:7a:02:0b:5e:a3:d7:4c:cd:77:85:90:2b:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C5:6E:52:18:50:2D:DF:E9:D8:C9:88:16:0D:2E:93:AA:0D:D0:30
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.65.0/24
Signature Algorithm: sha256WithRSAEncryption
05:97:55:86:ac:23:5d:09:20:fa:54:8c:c7:35:fb:a9:1f:62:
34:23:cd:62:bf:57:aa:ab:18:9a:07:36:c7:01:b6:35:ed:e5:
24:96:1f:51:a6:f6:0c:0b:6e:2f:de:3c:58:1c:1a:16:e9:6c:
a4:99:91:a6:47:6b:af:41:8c:d0:da:2c:b6:94:57:4f:2d:2d:
9f:71:ed:ac:3d:a3:c6:05:8d:c1:0f:aa:1c:07:06:0b:a8:1f:
b7:3d:db:06:89:fc:31:cc:f6:71:3e:b6:68:f4:08:4b:f5:04:
3d:98:e9:63:ba:78:ad:30:0f:1b:23:1c:79:ee:28:12:88:d3:
6b:f8:5f:81:a6:dc:be:cb:41:af:5a:f8:0b:71:75:e2:1d:ba:
3d:31:df:0e:61:1a:10:ec:5d:85:df:5a:a4:79:33:3f:19:a6:
7e:56:1b:b5:1e:53:5b:60:45:26:f8:aa:02:b5:3f:f4:57:f1:
bc:3b:69:f4:57:fd:02:15:19:c7:49:70:2d:45:10:51:43:a9:
ab:24:f0:1e:2e:b0:45:56:9a:8d:ff:2f:68:8d:de:42:cf:3b:
e0:4b:18:e4:dd:bd:76:35:88:57:62:33:ed:81:1c:f3:01:50:
fc:ff:4d:e7:b2:4a:bc:e1:06:c4:7d:cc:ee:f7:21:4d:d0:3b:
e6:82:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:33:40 2025 by rpki-client