Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/nkeXVKF6zzQCYL4BHAHTb24meB8.roa
File: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (raw, json)
Hash identifier: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=
Subject key identifier: 9E:47:97:54:A1:7A:CF:34:02:60:BE:01:1C:01:D3:6F:6E:26:78:1F
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019424B27B7D68A42EA50CFBE0D84569B6E6
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/nkeXVKF6zzQCYL4BHAHTb24meB8.roa
Signing time: Thu 02 Jan 2025 01:47:44 +0000
ROA not before: Thu 02 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400992
IP address blocks: 185.219.7.0/24 maxlen: 24
193.46.217.0/24 maxlen: 24
193.46.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7b:7d:68:a4:2e:a5:0c:fb:e0:d8:45:69:b6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e479754a17acf340260be011c01d36f6e26781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:fa:25:01:8e:9d:7a:79:8c:e8:18:1f:8d:
b8:e4:5e:71:83:ee:b5:95:1d:43:e9:1c:2d:d2:76:
b2:98:02:7b:3f:1b:bb:cf:2d:d1:04:96:a8:78:58:
d4:fb:7a:a9:4e:24:f5:f5:a5:06:1c:d8:e2:88:c6:
7b:74:27:19:87:c6:dd:07:92:39:8f:d9:6e:f0:a5:
0b:c1:5c:16:51:f7:5c:39:b0:94:ca:f1:be:85:7b:
b2:45:cf:c6:62:d1:85:45:e8:a9:94:04:c7:ab:26:
bb:b3:e4:14:1d:a1:41:e7:56:4a:cf:a1:0b:1f:62:
05:ff:99:94:ed:6a:a6:c4:e1:2d:b7:f4:82:d2:0f:
57:4c:71:26:b6:38:fd:cc:f9:7e:7b:d7:9b:f2:95:
2d:59:e8:81:e0:d0:6c:6b:df:4e:41:bb:61:45:39:
70:4c:e1:9a:8b:56:46:72:34:c1:1f:32:4b:b0:ba:
ac:87:3a:ae:9a:6c:50:7d:64:a2:fc:57:f0:d8:2d:
f1:11:1a:74:f1:e3:ab:57:14:ef:5a:17:ea:5f:3d:
93:f7:ed:0c:a8:98:34:eb:b1:bb:90:00:6c:dc:54:
ee:c2:9f:f2:0a:c4:b9:f4:ec:98:f6:95:48:c5:60:
4b:66:ed:a2:e4:3f:5c:bb:71:69:4f:70:8f:db:fd:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:97:54:A1:7A:CF:34:02:60:BE:01:1C:01:D3:6F:6E:26:78:1F
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/nkeXVKF6zzQCYL4BHAHTb24meB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.7.0/24
193.46.217.0-193.46.218.255
Signature Algorithm: sha256WithRSAEncryption
6f:40:a4:f7:9e:5b:33:a7:5a:48:6e:99:0c:9c:29:08:2d:96:
d4:fa:e5:bf:9a:5a:cb:c1:68:8e:d8:6a:77:ac:86:9f:d5:a2:
9e:48:89:a9:ad:88:98:4e:f3:8f:6b:83:c5:58:7d:25:89:3c:
df:7c:3c:98:f0:ce:df:68:da:9e:b0:d9:60:c4:61:6f:d3:d7:
53:b0:dc:2c:03:f8:c0:9d:31:fb:ae:1d:ca:e5:b4:1c:f1:43:
99:34:64:a0:d2:aa:cd:b0:27:e1:6a:af:fb:0a:44:3b:20:c7:
3a:63:05:11:03:7a:8e:2a:11:92:84:33:bc:2c:48:23:ec:82:
ff:d4:a3:9b:06:a1:db:e3:c8:6a:24:1a:09:f7:93:3a:ad:6d:
95:0c:78:8d:c6:5f:38:f5:9f:7e:f8:16:9e:5f:89:a4:f4:6d:
32:f7:3d:da:10:9c:44:32:db:97:9d:79:89:99:1f:ab:e8:65:
69:3e:89:33:66:12:c6:78:5d:0d:d0:a2:89:ea:1e:bc:03:0b:
86:94:df:e0:90:df:71:61:19:4a:b6:c8:15:83:cf:ca:df:24:
48:c4:e4:b2:0f:9a:12:37:27:97:dd:d6:7c:a9:32:d9:3b:a8:
aa:19:06:f3:b2:69:92:aa:0f:b6:fd:34:19:98:d5:44:e3:80:
f7:3e:2e:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:30:28 2025 by rpki-client