Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/n470nIW0UEzAzUbQX_uDCcgnwgk.roa
File: n470nIW0UEzAzUbQX_uDCcgnwgk.roa (raw, json)
Hash identifier: W7AyxS+F+SVs3o37ogcC/nlebDf0rSPTUMBtunKW4ds=
Subject key identifier: 9F:8E:F4:9C:85:B4:50:4C:C0:CD:46:D0:5F:FB:83:09:C8:27:C2:09
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D97FE30EBDFF8F56F7762887539379
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/n470nIW0UEzAzUbQX_uDCcgnwgk.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21641
IP address blocks: 194.147.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7f:e3:0e:bd:ff:8f:56:f7:76:28:87:53:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f8ef49c85b4504cc0cd46d05ffb8309c827c209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:41:5c:11:dd:af:d5:da:c0:f2:fa:43:ea:
20:a2:b5:1d:9c:1f:92:bb:63:af:d3:e7:cb:92:a2:
cd:96:4c:6f:c4:10:2e:60:ca:3e:d5:23:03:98:8d:
ba:8f:59:2a:6f:33:94:83:50:ef:5e:f4:9c:48:8c:
25:15:20:14:5b:c7:aa:fe:26:02:3c:dd:55:e9:bd:
fb:14:b2:bf:7f:60:f0:86:10:d7:16:bd:d0:87:18:
82:27:f6:9c:bd:ee:97:2f:1d:07:2e:3c:3c:7c:0f:
9c:1c:a2:9b:03:ed:85:c1:31:bc:3e:f0:33:87:04:
05:55:0d:e3:25:4f:31:49:c6:f4:4f:99:cd:8b:00:
ed:44:08:37:1f:81:d9:a5:bc:06:e4:d4:31:4e:d2:
81:f2:41:22:4d:f9:34:de:da:bf:14:0c:86:ba:77:
c1:7e:37:aa:26:25:03:26:73:94:de:a8:ce:2f:cd:
ce:71:f2:93:08:30:af:e4:08:05:65:f4:0d:49:e1:
09:52:fc:7f:52:e8:7d:3d:8a:82:20:8a:c5:a2:74:
46:b3:8c:c0:5b:2b:fc:17:c5:18:ca:95:f0:14:e1:
62:e3:f4:e2:87:c8:30:0f:e4:ea:7f:d1:1a:15:df:
62:07:51:3f:a4:3b:2c:95:65:bf:70:ba:fd:b3:e8:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:F4:9C:85:B4:50:4C:C0:CD:46:D0:5F:FB:83:09:C8:27:C2:09
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/n470nIW0UEzAzUbQX_uDCcgnwgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:72:2f:e2:c9:d8:65:ad:da:73:bb:fe:b7:31:41:66:86:d0:
76:6f:db:1a:9c:ac:69:a0:86:c8:fe:de:2a:a0:cb:1d:5c:df:
8c:d0:b9:31:11:ed:1c:c0:d0:03:c6:ef:2f:b7:b9:e2:17:d9:
0a:44:30:f0:22:59:5a:7a:74:fd:a3:b4:a3:7a:c7:2a:cc:3b:
9b:2a:d0:50:58:44:1a:73:47:de:9f:a5:ed:3c:0b:c9:bd:d5:
5f:99:80:e8:5f:48:4f:eb:4c:68:7d:24:50:d1:b4:ef:1e:3f:
31:40:b3:48:d4:aa:36:28:42:43:09:2a:3c:e1:02:40:7f:3f:
14:bb:fe:07:93:64:a4:30:da:f2:75:d4:27:a4:99:f6:4a:9c:
d5:bb:c6:ae:c9:8b:4a:c6:ea:99:46:bc:b4:39:f1:25:48:b6:
c0:15:94:ea:61:68:73:53:29:cd:a0:09:a7:0c:b4:75:0e:81:
d1:23:4c:18:e6:72:ad:3d:85:1e:4a:12:0c:03:22:62:d0:de:
5b:f9:53:26:46:7e:0e:e0:11:63:07:a1:66:42:6c:52:a3:c0:
35:51:09:94:fe:25:69:3a:1c:13:82:8e:ea:66:69:a1:92:1a:
e3:91:ed:1b:44:48:d6:96:85:96:68:c1:24:f2:e4:55:df:40:
3f:6d:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:57:02 2025 by rpki-client