Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa
File: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (raw, json)
Hash identifier: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=
Subject key identifier: 9E:1E:EC:7C:03:18:D9:37:1C:6F:5F:1C:7B:67:E9:C6:7A:ED:C7:C4
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 0194266B21F2DCF29BEEF4E8AA08317EFAB7
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa
Signing time: Thu 02 Jan 2025 09:49:02 +0000
ROA not before: Thu 02 Jan 2025 09:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197731
IP address blocks: 185.233.172.0/22 maxlen: 24
2a0c:eb00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:21:f2:dc:f2:9b:ee:f4:e8:aa:08:31:7e:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Jan 2 09:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e1eec7c0318d9371c6f5f1c7b67e9c67aedc7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:f9:a1:27:73:d4:f6:48:88:ea:69:86:a5:
14:fc:0f:5a:bf:74:54:4f:19:45:82:a3:7b:9e:2e:
11:b7:8d:eb:f9:23:e0:28:37:06:2b:5c:43:51:d5:
6b:e4:1e:cc:8e:14:67:f9:48:ef:98:36:c8:8e:0c:
49:1b:b4:e3:b7:f7:1d:b0:d4:b2:b7:89:12:72:b9:
ff:15:89:36:57:75:b3:72:16:31:e3:d9:f8:78:c9:
68:4e:9e:18:66:d3:6f:91:da:0b:c1:8f:f1:a9:9b:
55:ea:95:a5:94:06:69:45:4b:3d:93:55:38:e0:0b:
d1:a0:33:72:f0:c5:ca:f2:7c:bc:b0:65:27:d2:b4:
a8:0f:a3:c1:5f:52:53:1d:02:8f:e5:05:c5:3a:fe:
e8:9c:45:03:01:77:ff:19:aa:d8:c0:c6:19:30:6a:
e4:f8:81:93:e7:49:c2:d4:ca:64:ef:0c:e2:14:4e:
22:96:1e:dd:7f:af:4b:76:2b:28:fd:19:22:da:1d:
ca:be:29:f4:f2:88:03:8a:fc:3b:8b:1e:bf:35:53:
5f:bc:7e:82:0b:43:30:50:a7:d8:b3:b3:9a:83:89:
31:6b:d0:63:23:0f:6d:1b:f4:cc:b7:78:48:14:2e:
d1:9a:96:be:68:f1:90:6a:72:45:65:6e:99:a3:27:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1E:EC:7C:03:18:D9:37:1C:6F:5F:1C:7B:67:E9:C6:7A:ED:C7:C4
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.172.0/22
IPv6:
2a0c:eb00::/32
Signature Algorithm: sha256WithRSAEncryption
65:d6:99:94:52:d4:b7:19:8a:0c:e5:b5:f4:31:c5:0b:b6:74:
d9:21:78:12:10:1d:23:5e:53:9f:12:a0:a9:f5:69:a0:ac:2e:
88:1a:db:f3:a4:39:3d:39:d5:8d:64:27:4b:1d:70:4b:d2:e5:
b2:6c:17:43:08:0c:c3:15:c2:f8:57:ff:02:48:08:5e:2a:bd:
e8:d1:94:79:df:2b:b3:3a:0c:dd:4e:50:22:d9:75:a1:7e:fa:
e1:57:f9:74:5a:ce:6b:d9:79:ca:d2:1f:e2:35:d3:02:0e:8e:
3b:e5:8d:c1:0b:74:42:7a:d1:b7:2f:e3:6e:e5:ee:59:6b:f5:
4d:2b:4e:f5:d9:62:0e:5d:9e:92:59:5c:78:96:84:68:37:ce:
d6:af:e3:d1:fc:36:cb:ac:2b:99:4c:8f:6b:8e:1a:cd:4a:f9:
ad:b7:65:a6:18:ea:b4:df:30:fe:78:71:23:3c:59:01:ae:33:
aa:78:ca:8a:34:0d:5b:e1:94:23:4e:5d:bb:b3:31:49:2f:ee:
af:6a:66:78:22:68:45:90:3e:1a:1a:eb:ac:49:c9:88:6e:3c:
71:cc:7a:b1:c3:38:a4:49:02:13:01:3f:18:f7:a0:e2:b0:aa:
d9:bd:cb:1f:ab:43:c3:42:51:da:85:62:90:f3:07:35:fc:c3:
1e:b2:9e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:32 2025 by rpki-client