Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa
File: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (raw, json)
Hash identifier: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=
Subject key identifier: 37:F0:8D:91:0E:31:80:29:7B:C6:81:39:50:0F:DA:FD:09:09:54:45
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01942444E150BE1CE35A922E174E6E1E197A
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29092
IP address blocks: 195.47.241.0/24 maxlen: 24
195.66.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e1:50:be:1c:e3:5a:92:2e:17:4e:6e:1e:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f08d910e3180297bc68139500fdafd09095445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:19:3c:8f:23:d5:66:1c:71:10:07:f1:05:
15:30:a3:79:11:50:95:c0:f7:45:d3:09:b1:a4:9b:
da:3f:9f:f7:b2:2f:d5:bc:58:71:e4:c7:6e:1b:d8:
01:59:50:95:e8:bd:ec:7b:4c:33:ab:07:0b:30:9f:
95:42:e7:bf:24:14:d6:99:e3:b0:a8:61:54:0c:91:
03:00:75:9b:85:bb:27:bc:5e:43:c2:6a:55:d1:74:
9b:d9:3d:29:d7:66:eb:c0:1f:7f:d4:cf:3e:7d:29:
98:bb:17:cf:8d:67:0d:d3:ce:25:ee:80:45:05:c3:
31:46:42:cc:46:22:95:0b:2e:69:b0:69:60:c3:82:
81:9a:fd:a6:ab:96:ef:02:f3:39:6c:51:a5:68:78:
b1:d2:fc:aa:f3:81:f1:dc:6c:b2:13:9f:0d:f0:b4:
c7:77:b5:1d:8d:3c:0e:37:93:6d:36:74:31:02:b9:
1d:c0:37:b4:d8:b2:42:bf:e3:96:e0:71:21:92:95:
33:cc:a8:cd:f0:cd:a3:6e:a7:62:34:42:1a:3d:c7:
5f:be:75:16:8c:d4:40:46:80:d8:97:c4:8b:ea:e5:
50:0c:ad:ab:58:3f:af:de:6f:26:bd:da:20:f7:19:
b9:e2:19:c8:0b:09:f9:3b:67:14:86:d0:52:3b:b9:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F0:8D:91:0E:31:80:29:7B:C6:81:39:50:0F:DA:FD:09:09:54:45
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.241.0/24
195.66.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4d:e5:a1:83:fd:fb:4e:aa:7d:25:fc:cd:f2:0e:2b:95:da:
36:47:3e:c7:61:a9:f6:80:a1:ce:74:8a:3b:74:c0:4e:6e:bd:
b4:a1:f0:34:fc:97:fc:b4:3f:ed:3b:63:e0:ec:f2:58:d6:88:
20:7e:93:dd:5b:fb:9e:08:8a:14:a6:e2:bf:96:9b:f4:da:b9:
89:1d:0a:d8:bf:ca:8b:95:d9:cb:e9:52:21:2b:9d:39:47:60:
db:fd:ef:64:6a:30:85:3b:fc:63:20:2b:e5:ef:49:6a:56:60:
ce:66:8e:e4:b3:75:15:85:ee:41:0f:a8:5e:c8:b5:73:7c:cc:
62:93:41:df:0e:79:3a:0e:9c:ef:e3:21:60:ac:75:3b:e1:59:
58:42:bd:5e:8c:5a:d6:17:77:4a:a0:ab:9f:7d:e1:a0:79:8f:
57:68:40:b1:0b:5f:15:9a:65:ce:a0:ff:8b:02:12:fe:fa:20:
a6:68:a1:a5:b9:cf:59:c7:5e:fd:d6:39:10:9a:c9:7f:6f:a9:
51:e7:6e:c7:81:1b:f9:f4:fd:6c:24:66:d9:d2:d9:81:5f:3c:
d0:a0:e4:92:d4:1b:64:94:62:fd:e6:53:f9:b9:57:74:1a:af:
a7:e9:26:3b:bb:48:01:fb:31:2e:e1:3d:3c:17:b2:ed:db:e0:
c7:f0:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:46:12 2025 by rpki-client