Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa
File: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (raw, json)
Hash identifier: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=
Subject key identifier: 9E:64:A0:D3:E1:0A:E6:4C:7F:38:5C:59:FB:1D:AB:25:E8:9D:D4:D5
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019428265CA71B935CDCF5B27F73D756C174
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa
Signing time: Thu 02 Jan 2025 17:53:10 +0000
ROA not before: Thu 02 Jan 2025 17:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 193.53.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:5c:a7:1b:93:5c:dc:f5:b2:7f:73:d7:56:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jan 2 17:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e64a0d3e10ae64c7f385c59fb1dab25e89dd4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:20:cf:0e:b4:13:90:2a:ff:4c:9e:fc:de:60:
5f:68:ad:42:54:74:b2:84:13:4e:a5:ef:25:be:42:
64:e7:d5:ed:f1:ac:15:f7:7c:77:d8:41:6b:65:14:
42:ed:c0:d0:c7:f4:ab:39:b7:58:ea:c4:2a:23:fc:
67:e6:e5:f7:43:ac:ba:12:a8:dc:1d:5a:d7:17:87:
d6:89:01:94:9e:a4:c8:b4:f7:df:22:a2:fc:21:54:
b3:a0:ec:bd:5c:78:00:53:a9:02:4b:1c:3d:3d:68:
08:f6:19:e6:16:93:bd:b5:14:32:57:25:8f:4c:34:
56:9b:d3:84:c0:7d:5e:1e:6e:20:ff:eb:0d:89:b9:
92:12:49:87:ab:56:fe:22:b4:cc:0a:4b:15:5f:d7:
cb:86:be:4e:45:c8:07:9f:92:8f:b9:5b:16:e9:ee:
44:33:55:31:ce:d4:e9:fb:d5:8a:c6:d5:92:93:2a:
19:8c:53:0d:7e:1d:62:16:aa:2a:55:42:6b:89:97:
d2:67:58:0c:ce:7b:e7:17:da:4b:b1:4c:e3:45:c9:
13:1b:7d:00:7c:f9:da:ae:eb:b5:84:32:3d:a4:1c:
e7:8a:f6:c9:e6:d5:05:82:b2:61:72:3e:78:14:8a:
ec:7a:b1:cc:e6:84:70:71:12:03:22:50:d5:6b:2d:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:A0:D3:E1:0A:E6:4C:7F:38:5C:59:FB:1D:AB:25:E8:9D:D4:D5
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.81.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:29:4b:dd:50:c0:4a:08:5d:39:c7:09:51:d3:6b:96:3d:
b9:5d:ea:b6:31:a3:36:1e:ad:c9:f4:00:74:ac:de:a9:dd:99:
28:94:08:05:c3:12:8b:0c:bc:2d:8e:21:bb:a9:24:3c:77:23:
7d:3c:f9:ab:a7:6a:f2:65:59:60:31:45:0f:bd:e3:cc:8e:6f:
60:a6:00:07:4b:71:0d:7d:ae:09:d5:89:c0:b9:48:42:cc:69:
2a:be:95:2b:99:ba:ed:c3:0d:a2:25:e1:07:1e:be:97:12:bf:
a2:a2:12:a1:a6:61:06:1f:bd:71:43:f3:5e:16:9b:cf:d1:10:
7e:aa:4f:e6:14:fa:a4:81:5a:e4:a1:ea:ab:37:e6:ca:7b:8f:
32:5f:41:9a:c8:1b:e4:b8:aa:0e:e7:8b:7f:ec:df:e7:99:41:
28:b7:0a:df:70:39:55:0b:d6:e6:a5:c6:8f:1f:36:bd:e5:cf:
df:eb:b8:a1:03:1d:40:4f:26:06:15:43:06:2f:be:13:27:81:
0c:b6:13:85:94:88:a6:dd:a0:19:96:9d:bd:bf:60:d1:36:dc:
45:dd:44:cd:e1:96:48:98:0c:fe:b2:29:84:ae:8f:d1:16:a8:
12:ea:17:9e:91:d9:2c:10:7d:22:d7:e5:62:6c:8c:14:d1:8f:
c1:94:37:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJlynG5Nc3PWyf3PXVsF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh
NTkwMjUwHhcNMjUwMTAyMTc1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTY0YTBkM2UxMGFlNjRjN2YzODVjNTlmYjFkYWIyNWU4OWRkNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iDPDrQTkCr/TJ783mBfaK1CVHSy
hBNOpe8lvkJk59Xt8awV93x32EFrZRRC7cDQx/SrObdY6sQqI/xn5uX3Q6y6Eqjc
HVrXF4fWiQGUnqTItPffIqL8IVSzoOy9XHgAU6kCSxw9PWgI9hnmFpO9tRQyVyWP
TDRWm9OEwH1eHm4g/+sNibmSEkmHq1b+IrTMCksVX9fLhr5ORcgHn5KPuVsW6e5E
M1UxztTp+9WKxtWSkyoZjFMNfh1iFqoqVUJriZfSZ1gMznvnF9pLsUzjRckTG30A
fPnaruu1hDI9pBznivbJ5tUFgrJhcj54FIrserHM5oRwcRIDIlDVay06jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5koNPhCuZMfzhcWfsdqyXondTVMB8GA1UdIwQY
MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt
Y2NiYjZlOTBhMTliLzEvbm1TZzAtRUs1a3hfT0Z4Wi14MnJKZWlkMU5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli
LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTVRMA0G
CSqGSIb3DQEBCwUAA4IBAQBIFClL3VDASghdOccJUdNrlj25Xeq2MaM2Hq3J9AB0
rN6p3ZkolAgFwxKLDLwtjiG7qSQ8dyN9PPmrp2ryZVlgMUUPvePMjm9gpgAHS3EN
fa4J1YnAuUhCzGkqvpUrmbrtww2iJeEHHr6XEr+iohKhpmEGH71xQ/NeFpvP0RB+
qk/mFPqkgVrkoeqrN+bKe48yX0GayBvkuKoO54t/7N/nmUEotwrfcDlVC9bmpcaP
Hza95c/f67ihAx1ATyYGFUMGL74TJ4EMthOFlIim3aAZlp29v2DRNtxF3UTN4ZZI
mAz+simEro/RFqgS6heekdksEH0i1+VibIwU0Y/BlDeq
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:04 2025 by rpki-client