Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/NxiHrRFmOKs6DxSydD2sJuXQJK8.roa
File: NxiHrRFmOKs6DxSydD2sJuXQJK8.roa (raw, json)
Hash identifier: iNvcUhlJ9Yd5axlJbt+P6uyRKrZKBuBqEJ75zpPuiMk=
Subject key identifier: 37:18:87:AD:11:66:38:AB:3A:0F:14:B2:74:3D:AC:26:E5:D0:24:AF
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 019428258FC75E83E3765B22E183303B8754
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/NxiHrRFmOKs6DxSydD2sJuXQJK8.roa
Signing time: Thu 02 Jan 2025 17:52:17 +0000
ROA not before: Thu 02 Jan 2025 17:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41828
IP address blocks: 91.185.192.0/19 maxlen: 19
195.47.228.0/24 maxlen: 24
2a02:840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:8f:c7:5e:83:e3:76:5b:22:e1:83:30:3b:87:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Jan 2 17:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=371887ad116638ab3a0f14b2743dac26e5d024af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:45:8f:12:c5:59:f8:2d:14:70:b5:9f:de:
d6:68:9a:3e:d3:ab:a8:8e:9c:2a:95:82:56:8b:b5:
5d:8c:56:cf:a4:dc:9e:7c:89:04:1c:bf:6b:71:67:
8c:9c:1a:33:c7:eb:62:74:a2:b8:a9:26:c8:67:5e:
64:5b:cf:0d:60:b5:7a:e2:26:89:75:84:6d:aa:a1:
38:55:3a:48:4f:b1:be:05:cb:70:ae:1c:80:68:b2:
2c:97:0f:09:18:bd:8d:a0:a2:46:2a:fb:5b:af:77:
ec:94:56:97:a8:21:f0:82:b9:12:4d:c0:39:26:7c:
c0:c8:66:1e:8c:ba:fd:3a:8a:aa:2e:39:23:60:c0:
49:bb:dc:3e:8b:4c:78:12:5b:aa:2e:fe:96:44:9c:
d5:f7:b8:60:ca:ee:7a:95:d5:88:c5:b1:f6:09:c2:
37:52:f3:b8:7e:30:6d:17:0d:66:d0:a1:f7:2e:23:
4e:47:58:a5:f6:ac:d6:7e:9f:3e:23:1c:fb:4c:92:
e9:69:69:8b:b9:88:29:71:a3:cb:51:43:25:91:fa:
fd:b2:2b:31:67:1b:4f:6a:3f:f3:54:f5:d5:39:44:
74:1e:11:3f:ba:47:d1:82:44:d8:a6:ce:71:41:dd:
c2:7f:86:90:51:71:a4:6a:bf:4d:14:13:71:e6:b0:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:87:AD:11:66:38:AB:3A:0F:14:B2:74:3D:AC:26:E5:D0:24:AF
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/NxiHrRFmOKs6DxSydD2sJuXQJK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.185.192.0/19
195.47.228.0/24
IPv6:
2a02:840::/32
Signature Algorithm: sha256WithRSAEncryption
10:1d:74:a0:cd:d1:32:f1:9d:6b:b0:e8:f8:17:e8:4d:43:3e:
2a:13:6a:55:ec:80:6e:2a:eb:50:45:d1:97:cc:1e:4c:7c:fc:
1d:6d:6e:4a:46:11:b5:79:2a:57:09:5f:56:1c:a5:1f:55:8f:
d4:49:0d:87:21:92:2f:ec:33:ab:a2:84:ea:8e:cd:fc:2f:ea:
98:98:d1:f6:fb:56:45:37:c1:94:2b:cd:be:5e:af:34:53:89:
b4:a1:9d:7f:a1:50:4f:44:20:0d:57:c4:dd:ba:2b:5b:4d:18:
b4:e9:df:a5:bd:81:28:92:c3:66:6d:bf:52:4a:b3:7b:f8:6e:
9d:45:98:aa:fe:96:bd:c8:ec:cf:88:2c:b7:1a:61:2c:07:37:
56:99:e6:ac:a6:30:4b:d4:73:e9:1b:83:ed:a8:c5:4e:3a:a9:
01:b9:f8:0b:5c:ac:96:fc:b1:6d:0e:ae:f1:7b:1b:04:df:91:
7a:09:a2:42:84:45:58:5a:69:0d:0e:69:37:97:15:11:4e:a5:
7f:93:74:5b:c3:80:6f:68:c2:7c:7a:b2:52:d2:d9:18:1d:28:
71:23:94:03:5f:9d:33:69:96:b0:5f:c2:de:cf:1e:70:15:17:
a7:0c:9a:13:42:38:a4:17:60:8e:03:10:51:8c:32:21:38:9f:
0c:32:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:13 2025 by rpki-client