Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/N16JeWvOmOgFnFHegC3uE95HfCM.roa
File: N16JeWvOmOgFnFHegC3uE95HfCM.roa (raw, json)
Hash identifier: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=
Subject key identifier: 37:5E:89:79:6B:CE:98:E8:05:9C:51:DE:80:2D:EE:13:DE:47:7C:23
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 019425214DCC00520A0D44A75A8C55B2A8F1
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/N16JeWvOmOgFnFHegC3uE95HfCM.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198347
IP address blocks: 37.18.192.0/19 maxlen: 24
185.140.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4d:cc:00:52:0a:0d:44:a7:5a:8c:55:b2:a8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=375e89796bce98e8059c51de802dee13de477c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:39:b0:17:1b:a3:a4:aa:37:24:c6:33:e8:
b4:9d:7f:da:d7:78:b8:db:c3:c1:4e:8d:91:2d:d1:
c9:69:49:14:0d:ae:7a:b3:56:d2:f6:f6:20:89:05:
91:2e:98:9d:fa:49:88:ca:0b:05:8f:09:9a:17:a6:
7b:62:9b:95:9a:12:d7:34:dd:9f:27:c5:05:db:93:
43:38:26:4c:0d:64:27:83:24:26:77:13:d5:cc:64:
25:88:42:fd:08:c3:b9:ec:0e:0f:5b:6b:30:08:8f:
bb:3f:2b:3a:7f:38:d1:38:cb:e3:57:d4:3f:80:8f:
3a:f0:a0:3d:a1:d4:23:62:31:0b:7b:44:69:bc:5c:
6f:5f:8a:01:04:98:6c:5d:8e:1c:57:df:19:e2:d8:
e9:da:99:0e:54:a1:c2:1e:3a:21:0b:e6:2d:04:df:
64:ef:38:bc:71:e3:54:98:69:79:0b:50:85:4f:96:
30:d1:4c:d4:07:9b:11:ce:f5:0d:5d:bc:1f:f1:f3:
eb:11:0d:73:63:b4:53:b0:2a:b7:1d:0f:f4:17:8f:
c2:b5:7e:10:22:28:3a:64:58:11:d0:45:84:fe:95:
2f:e2:9d:ad:b9:d6:41:c1:1c:bb:24:78:0f:44:d0:
56:5a:c4:71:6c:9a:38:80:00:2a:45:2f:36:29:e5:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5E:89:79:6B:CE:98:E8:05:9C:51:DE:80:2D:EE:13:DE:47:7C:23
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/N16JeWvOmOgFnFHegC3uE95HfCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.192.0/19
185.140.36.0/22
Signature Algorithm: sha256WithRSAEncryption
58:1b:df:b7:39:09:b5:c4:89:75:31:45:ad:78:5b:9c:26:45:
77:12:ff:cf:d3:67:ab:c0:5a:3e:bc:e8:09:b1:ac:7f:7a:28:
e5:2b:03:be:32:67:9c:0c:86:74:dd:48:d6:00:89:55:56:8b:
b3:4d:33:00:a7:66:ec:b3:d7:2e:53:46:4f:2a:fb:af:c2:8c:
d7:05:18:46:bb:60:d1:11:58:28:12:e7:3e:07:78:dd:d8:68:
77:ce:a9:7f:c3:22:ba:fc:d8:06:83:ac:51:4c:d2:d8:0a:ec:
14:dd:d1:e0:fe:31:25:85:ba:7d:c9:ed:eb:72:22:9b:51:dc:
59:c6:00:7b:53:a8:6a:5b:77:ed:f2:8c:79:66:55:48:2d:89:
93:62:ca:77:bf:76:2a:1d:ae:c5:c5:72:fb:08:e1:2a:1b:5a:
76:b1:f6:1b:61:9b:97:07:c4:1f:1c:11:80:66:57:b5:e5:a9:
aa:20:95:65:72:9a:62:c4:7d:72:57:50:5a:85:9e:d2:8e:0e:
56:8b:09:99:e2:68:d0:11:a0:c7:20:1b:b1:84:af:83:a4:1d:
c3:97:ee:98:9e:4d:c6:94:4d:64:4d:30:ec:98:72:37:9d:93:
0e:13:38:9a:2f:12:40:76:8e:c0:6a:fd:de:ed:ef:6d:9d:3c:
d2:0c:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:48 2025 by rpki-client