Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/nAsnIjj5rCl0iFKlAJNgspVxsYQ.roa
File: nAsnIjj5rCl0iFKlAJNgspVxsYQ.roa (raw, json)
Hash identifier: Q51rr1exYVr/GU1moILBFVkRHLwlf/7xFidpZNfmzjQ=
Subject key identifier: 9C:0B:27:22:38:F9:AC:29:74:88:52:A5:00:93:60:B2:95:71:B1:84
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236990846821BA471685ECFAD53F8423
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/nAsnIjj5rCl0iFKlAJNgspVxsYQ.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39383
IP address blocks: 93.114.82.0/24 maxlen: 24
188.212.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:90:84:68:21:ba:47:16:85:ec:fa:d5:3f:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c0b272238f9ac29748852a5009360b29571b184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:d5:90:bb:58:28:c9:57:38:11:60:65:49:
65:c1:21:93:76:21:1b:18:17:1b:15:75:12:f1:79:
3f:4a:f2:43:14:cd:a7:11:0d:82:a7:dc:c0:e2:b1:
fc:8d:ba:d2:48:36:8c:b6:fd:d7:7a:8a:e8:00:a5:
33:26:1b:1a:2b:29:d7:b7:0a:23:ff:ec:7d:81:67:
1a:1e:d4:c5:4b:4c:6a:8d:20:0d:c7:c5:99:21:9b:
7e:1a:9a:83:2d:f0:47:1a:31:dc:8c:88:df:3b:c1:
58:0e:06:ae:6d:8a:a3:29:5d:c1:89:a4:64:96:f7:
30:ef:c5:e5:e4:14:81:08:61:18:4c:22:1e:d7:7d:
f2:ad:cd:cf:f6:7f:87:5d:18:89:90:1b:29:23:e2:
fc:30:99:46:95:5f:05:81:99:20:0e:fe:ba:92:92:
68:01:66:d2:0c:1a:80:ee:d5:d4:a6:15:5b:be:f0:
ac:47:d0:43:73:e0:9e:12:59:5d:d0:b8:e9:69:88:
6d:f7:86:1f:6d:c8:b5:bf:d0:88:9a:dc:53:f2:e4:
f1:95:00:17:89:7b:43:10:32:64:49:0b:f6:2b:b4:
57:6f:f6:bd:56:35:52:c5:38:5a:c2:1c:97:d8:e1:
77:4d:62:89:10:c9:9a:c4:1c:0d:9e:72:90:a5:a9:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0B:27:22:38:F9:AC:29:74:88:52:A5:00:93:60:B2:95:71:B1:84
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/nAsnIjj5rCl0iFKlAJNgspVxsYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.82.0/24
188.212.100.0/22
Signature Algorithm: sha256WithRSAEncryption
87:52:56:60:68:79:a7:31:64:72:f9:0c:d1:78:c4:47:70:da:
59:58:4f:c3:b5:cf:3a:c0:89:7c:97:4c:ea:a5:df:c0:77:8f:
d8:67:84:ac:2b:39:d3:24:95:82:d3:f7:37:02:98:e2:e5:f6:
26:71:25:b4:e9:0a:01:eb:6c:bb:82:4a:99:82:c9:95:bb:46:
c8:69:c5:e9:f6:e0:e4:b1:a9:1e:84:12:96:10:5d:e2:ed:bf:
78:88:fb:60:f9:62:0e:b7:15:80:bc:9c:4c:19:fd:36:fd:06:
07:fc:98:6c:18:d6:c6:e9:ad:13:01:7c:d1:9f:09:bf:54:9b:
b6:ff:d6:68:dd:06:6a:9f:b0:b3:36:98:1c:a8:6b:13:74:f2:
4b:6f:d2:9d:31:aa:44:8f:b2:18:d0:88:cc:ea:00:47:0a:b0:
dd:2c:6e:2c:56:71:b5:23:36:0d:6e:31:2f:5b:c9:2e:14:35:
ee:ab:a6:38:41:ae:d5:cd:d1:e9:42:45:72:5b:c6:7e:86:79:
8a:d0:2d:36:3e:29:74:80:a0:af:06:58:46:81:48:a6:ca:06:
eb:4b:a5:76:47:fb:79:f7:13:ae:39:92:8a:4a:e6:67:e7:16:
e7:78:61:3e:a0:e4:0f:36:e9:b2:b7:65:84:d7:b0:ef:11:c6:
18:e8:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:16 2025 by rpki-client