Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/nEGj30N7Wbasb6AnvF-74ldwKOw.roa
File: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (raw, json)
Hash identifier: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=
Subject key identifier: 9C:41:A3:DF:43:7B:59:B6:AC:6F:A0:27:BC:5F:BB:E2:57:70:28:EC
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 019427486ADBC873BA7530DB58E46C31F0F3
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/nEGj30N7Wbasb6AnvF-74ldwKOw.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 193.26.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6a:db:c8:73:ba:75:30:db:58:e4:6c:31:f0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c41a3df437b59b6ac6fa027bc5fbbe2577028ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:63:55:55:7a:df:52:4c:9e:d4:b6:e6:58:f6:
0a:1e:39:7a:99:85:28:b7:90:79:52:9c:4f:1a:5f:
3e:59:0b:06:1c:e1:3c:98:09:d2:e5:08:ae:28:0d:
f1:8f:c4:bf:a6:95:1f:96:bd:db:91:29:9d:2d:9c:
c7:03:d7:1c:9a:cb:32:29:a4:8d:7c:c5:6b:93:bd:
42:e6:8e:2d:dd:1c:29:4c:3d:0e:ef:88:09:b7:31:
8d:39:85:24:3e:d5:67:46:4f:df:b3:bb:5d:30:68:
60:90:56:39:2c:4a:1d:f2:1b:7c:f2:e4:9a:09:50:
a3:cb:13:8c:2d:4a:2c:86:65:f6:cb:b3:dd:b2:52:
3d:fb:1e:43:ad:f5:00:20:ff:8c:b7:33:e6:ee:fc:
ac:21:17:17:eb:a2:1b:38:ef:75:1a:87:89:3f:5e:
68:73:1e:17:fc:6d:9f:ca:d7:ae:56:8c:86:5b:7d:
ce:3f:a5:ca:de:0b:2d:f1:a8:51:46:fa:41:e7:2e:
b8:00:e7:0c:2e:d3:64:65:45:78:3b:ef:54:09:7d:
72:33:d5:69:79:97:3b:93:7e:48:57:8a:c0:a4:ed:
ff:53:6b:d5:57:d1:3e:a7:62:6b:ac:82:47:fc:a0:
9a:bd:76:24:59:52:3b:15:3c:ea:4c:a5:d5:e7:78:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:A3:DF:43:7B:59:B6:AC:6F:A0:27:BC:5F:BB:E2:57:70:28:EC
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/nEGj30N7Wbasb6AnvF-74ldwKOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a8:0a:a7:1a:9a:32:82:5f:b9:1a:29:20:4c:bf:10:41:18:
e8:68:12:1a:01:16:fb:0e:19:4c:86:9f:7b:f9:88:92:96:c1:
e9:02:a9:a6:2e:95:b3:19:9a:aa:92:c3:e5:ec:70:c8:80:c8:
6b:ed:3d:97:f1:62:66:dd:b4:a9:37:4c:35:85:e2:38:ad:ef:
0a:e6:31:e8:28:d5:68:7d:79:f4:fc:5b:8c:9a:60:ca:bd:6a:
e0:2c:87:0f:5c:48:7d:a9:12:0b:36:64:13:ed:89:63:57:93:
b6:a2:ae:f8:0a:2c:34:10:99:65:73:6c:11:64:a8:d4:55:fc:
56:ed:ff:42:0c:70:80:6b:2e:29:8f:12:a9:76:2f:39:b7:95:
10:c7:88:2b:22:ce:ff:51:66:ce:15:a3:46:1f:c5:98:9f:ce:
f6:e2:cd:52:dd:11:d9:c6:ea:95:81:eb:91:5a:8d:65:e4:65:
bd:68:db:8d:56:d2:3c:8f:41:ed:26:35:d7:c8:c2:53:bc:6f:
04:ed:e9:aa:17:f3:78:5e:bf:89:9a:2b:1c:86:f3:91:bb:a9:
52:cd:64:c5:c7:0b:fa:f7:53:0c:09:98:ca:2d:87:07:36:0b:
b8:b0:21:77:d9:94:92:14:fe:13:02:2d:ec:0d:cc:d7:cc:d2:
28:17:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:37:52 2025 by rpki-client