Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/Nh4smUq7Nayhm_h4hcJhFSXbd98.roa
File: Nh4smUq7Nayhm_h4hcJhFSXbd98.roa (raw, json)
Hash identifier: 0tOyxit0JfWpS02swEQXMIpCvZrxbPbACrr2wxwWLsM=
Subject key identifier: 36:1E:2C:99:4A:BB:35:AC:A1:9B:F8:78:85:C2:61:15:25:DB:77:DF
Certificate issuer: /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial: 01942747C4453CA9FC088778987ACE87C1D1
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/Nh4smUq7Nayhm_h4hcJhFSXbd98.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39036
IP address blocks: 193.151.226.0/24 maxlen: 24
2001:67c:2bf4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c4:45:3c:a9:fc:08:87:78:98:7a:ce:87:c1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=361e2c994abb35aca19bf87885c2611525db77df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:88:9b:22:bd:40:55:ce:ea:e3:ec:39:12:
71:df:a7:d3:81:dc:86:84:a2:ed:fe:d8:50:27:07:
c4:16:c4:c3:bf:85:fc:97:aa:1f:6e:44:e6:58:ff:
bb:61:74:86:90:d7:fa:ed:39:57:b3:6e:36:36:e4:
99:14:7f:21:57:cb:91:30:13:6d:72:d3:cc:d7:18:
0f:2e:b2:bb:cf:a8:f4:f8:4d:f3:65:d5:08:a9:25:
c9:8a:2f:60:a7:e0:6a:3f:47:27:4b:16:de:a2:47:
98:9e:81:2a:a3:52:59:9a:04:93:89:d2:32:8a:46:
1c:c3:4c:2b:65:a7:fc:5b:57:06:34:f3:30:eb:e4:
bf:f5:81:b8:7f:4a:87:b9:36:5c:3e:d4:8a:a3:cd:
4d:ac:8e:40:e2:48:62:1d:9e:76:b6:9e:2b:69:62:
db:ca:fa:3e:98:a6:d3:a2:fd:fb:44:26:f1:61:59:
1c:9e:74:ae:5a:7b:67:ea:b1:76:fe:cc:ea:2d:86:
db:5f:d0:6b:eb:85:5d:94:2d:29:6e:04:b2:90:e8:
1a:90:87:62:cb:fd:3e:da:09:69:80:a8:8b:ea:44:
9c:f8:f6:fe:3f:87:15:88:1f:f1:90:9d:82:68:f8:
3e:d6:f8:6e:ad:72:c0:c4:0e:8d:06:77:c9:63:28:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:2C:99:4A:BB:35:AC:A1:9B:F8:78:85:C2:61:15:25:DB:77:DF
X509v3 Authority Key Identifier:
keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/Nh4smUq7Nayhm_h4hcJhFSXbd98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.226.0/24
IPv6:
2001:67c:2bf4::/48
Signature Algorithm: sha256WithRSAEncryption
02:79:f8:9f:7b:06:95:34:43:d5:f8:2b:d1:b1:36:67:a3:ba:
53:d0:3a:d9:e5:07:16:3c:1f:a7:03:36:a0:61:8d:29:8c:ba:
f2:27:5e:42:35:15:0a:7d:aa:5f:ca:30:01:08:1c:51:da:1d:
47:7e:b1:f6:69:cb:ac:95:b6:d9:59:69:cc:ec:e7:d6:aa:ea:
15:5e:b6:57:4e:4d:4e:4f:eb:19:4c:54:51:51:1b:6d:08:5f:
df:03:3a:7b:84:5b:f9:55:27:bc:2f:ee:fa:6f:cb:0e:b4:08:
36:37:4b:2b:96:df:63:39:92:f1:4f:3e:56:f4:15:82:a1:8a:
3a:8b:f4:4f:89:3a:b5:1b:22:72:21:68:10:34:00:f3:f8:2b:
81:87:d2:8b:7f:ea:a6:9e:4d:64:87:b1:7a:c7:74:5b:ee:80:
f6:df:4c:96:65:92:70:a5:0f:76:ea:7a:d5:0d:c2:6e:a9:1e:
fb:1a:5a:c1:15:6f:be:d5:a1:b1:16:ae:e6:d0:6e:43:04:b9:
ad:6b:b4:f9:35:c0:ba:64:a5:c2:9f:b9:61:c1:35:7a:b5:68:
4a:79:30:22:90:e9:bc:0c:72:20:d1:c1:40:61:0f:64:21:c2:
04:c8:30:87:d5:22:47:e2:5b:c7:ce:f0:25:7f:19:74:df:cb:
8b:d9:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:23:39 2025 by rpki-client