Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nsBIGgNYu3k-W9wQL0KFFwr5nwo.roa
File: nsBIGgNYu3k-W9wQL0KFFwr5nwo.roa (raw, json)
Hash identifier: XMYTLHhxc3DTlrv3lDSLskrx5u/Ca8vN/GLDar9XR9I=
Subject key identifier: 9E:C0:48:1A:03:58:BB:79:3E:5B:DC:10:2F:42:85:17:0A:F9:9F:0A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019568538EA52C3B116A14C5B73FCD44E4E7
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nsBIGgNYu3k-W9wQL0KFFwr5nwo.roa
Signing time: Wed 05 Mar 2025 22:01:01 +0000
ROA not before: Wed 05 Mar 2025 22:01:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215081
IP address blocks: 82.115.9.0/24 maxlen: 24
178.173.240.0/24 maxlen: 24
188.253.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:68:53:8e:a5:2c:3b:11:6a:14:c5:b7:3f:cd:44:e4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 5 22:01:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ec0481a0358bb793e5bdc102f4285170af99f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:a0:f7:a1:6c:4e:a1:e2:f3:31:2b:2c:99:
ba:8e:72:b0:3f:26:b4:14:36:c9:e9:43:94:91:41:
5f:37:c9:46:ed:0d:df:ce:6a:02:07:39:30:bd:12:
75:7f:bd:c6:b0:54:17:7b:a3:23:89:60:67:05:41:
c9:a3:e4:c1:a6:b7:b1:00:b4:a6:1f:b9:43:66:73:
be:b6:9a:4d:d9:49:ad:bd:ed:48:f4:e5:b6:99:08:
91:0d:67:24:5b:dc:a7:a4:06:b9:09:73:9d:55:8e:
b2:e7:f6:66:b2:cd:69:9f:2a:b4:58:4b:78:88:4f:
44:fa:4f:eb:29:99:57:1f:b5:32:ab:e0:f8:44:85:
86:52:98:b0:31:c1:c4:6c:40:a3:8e:21:f3:86:11:
3e:b4:fb:cf:11:7f:e9:d9:5f:01:8c:17:41:10:f0:
b9:51:c6:8f:1f:94:09:ff:7c:19:48:12:54:f9:87:
1a:ea:a6:08:f9:a0:ff:51:28:26:38:dc:3f:c5:ce:
ad:ab:7a:11:fa:68:c1:64:33:f5:3d:c8:c2:2c:a7:
dd:5b:f4:50:a6:87:7d:18:fc:91:d1:c6:b6:f9:d6:
66:ae:44:3a:2a:f2:d7:8b:f2:e9:ae:e3:a3:c6:f3:
d7:c8:d5:a9:7f:21:31:32:f9:34:80:fe:c1:c4:44:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:48:1A:03:58:BB:79:3E:5B:DC:10:2F:42:85:17:0A:F9:9F:0A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nsBIGgNYu3k-W9wQL0KFFwr5nwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.9.0/24
178.173.240.0/24
188.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fc:eb:e6:a7:51:a3:57:f2:50:13:ef:57:2a:5f:9f:b9:ae:
97:dd:97:e5:7b:9a:bf:8f:16:8f:b2:d6:65:a8:cb:8f:46:17:
df:cc:7e:59:72:96:d6:15:17:c6:88:9f:3d:e9:86:4e:ca:83:
24:de:4b:c5:3a:00:d0:25:96:87:0e:61:15:1a:d0:92:53:7e:
e6:50:7e:48:81:d8:a1:dd:2b:75:ed:3d:62:4f:ff:8e:53:ff:
27:29:65:db:70:d2:98:f8:2a:44:c3:f3:b7:64:2f:cf:25:d1:
70:08:cd:1a:88:8b:7f:94:ed:db:fa:11:7f:d6:3b:29:13:44:
40:a5:6b:ca:ac:f2:8b:e3:db:ab:2b:b2:67:f8:ec:a1:33:f9:
42:df:2e:0f:6d:5f:07:df:19:5a:31:61:0d:26:14:51:bb:ca:
23:d1:8d:37:85:b9:5a:8c:8d:58:99:b7:0e:0c:f1:7d:f4:57:
fc:ef:8b:f9:71:92:cf:bd:5f:37:bf:b6:2e:1e:87:19:4a:31:
78:95:33:bc:c9:64:92:c8:27:ae:bd:96:c5:f6:5a:e1:9d:e4:
a2:fc:27:2d:59:e7:0d:04:1d:d4:d0:62:ee:d0:16:af:38:fb:
dc:32:69:5c:bd:34:48:f7:f5:9e:02:98:65:fd:ac:43:af:32:
5c:98:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:00 2025 by rpki-client