Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/nHAl3SgY4EfLu7utGVmeJZcr1_s.roa
File: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (raw, json)
Hash identifier: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=
Subject key identifier: 9C:70:25:DD:28:18:E0:47:CB:BB:BB:AD:19:59:9E:25:97:2B:D7:FB
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 0194221F95FE3F0A93CBE4A02ED7BFF8DC28
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/nHAl3SgY4EfLu7utGVmeJZcr1_s.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 192.82.241.0/24 maxlen: 24
193.24.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:95:fe:3f:0a:93:cb:e4:a0:2e:d7:bf:f8:dc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c7025dd2818e047cbbbbbad19599e25972bd7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:36:ab:fe:87:44:4f:75:69:a1:40:eb:5c:
82:71:5c:0c:5c:ca:bd:2e:19:39:02:75:f6:23:da:
f4:71:36:3a:d4:a9:2d:c0:67:65:fe:62:dd:2c:7d:
3b:25:7b:16:3d:79:3f:c0:5b:11:a8:50:7f:18:18:
0e:61:de:1b:a9:f3:25:d5:c6:54:76:d1:10:56:95:
73:6e:86:87:26:1e:97:d6:06:00:c4:21:de:f5:a5:
d6:dd:a6:aa:67:ee:11:40:37:e1:32:a2:aa:89:86:
52:9e:8f:35:62:e4:57:37:22:fc:18:9e:94:a5:f7:
53:7a:6d:d8:b0:c8:3e:e5:91:74:e1:97:c9:7b:9a:
77:a7:3b:07:ef:7e:26:0d:75:c2:6b:85:06:9b:35:
97:be:20:69:8f:d6:05:dc:ca:85:27:10:d4:c5:db:
6b:9f:72:b5:11:df:a3:d8:b5:5b:90:99:d4:9f:72:
55:f0:41:e9:a4:93:db:23:25:e0:e0:c6:bd:3c:6b:
ea:ff:02:6b:86:d4:6d:39:77:26:8f:2b:f7:ff:24:
90:0d:37:e7:82:46:0f:b8:5d:6e:cc:b1:f9:af:41:
21:93:65:55:70:4d:34:c1:35:5a:e3:08:9e:2d:f4:
29:7f:80:9e:ba:3b:c6:67:92:c6:5e:9e:92:f0:ce:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:25:DD:28:18:E0:47:CB:BB:BB:AD:19:59:9E:25:97:2B:D7:FB
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/nHAl3SgY4EfLu7utGVmeJZcr1_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.82.241.0/24
193.24.80.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:33:bc:89:24:e9:b1:fd:9b:89:dd:3a:2c:ac:fe:ba:69:34:
a7:dc:e4:54:9d:fb:e7:46:dd:1e:ea:34:04:d0:de:4d:98:8a:
e7:ab:11:ec:29:9f:3d:67:95:96:2f:cd:50:54:a7:a2:d3:44:
7f:2c:e9:a2:9a:26:58:bb:93:91:c2:4a:b1:47:db:39:54:e3:
e5:4d:4b:5f:5b:da:6b:e1:4d:b4:5d:67:4e:38:c0:92:99:f5:
79:ab:71:a8:a0:68:7a:ce:c1:a2:93:97:43:c1:0a:2b:16:d3:
77:4b:8e:54:37:e0:3e:53:9e:26:70:3e:08:08:a6:1a:30:0a:
28:a2:7f:b7:b0:e8:33:42:29:f6:50:83:94:8f:c6:2f:86:4d:
1e:93:ff:7f:28:99:c2:46:3e:59:83:03:e4:57:79:0c:15:fa:
e3:cf:45:b4:be:35:32:06:20:36:b8:e6:a6:8f:54:93:bd:d4:
66:95:e8:98:8e:12:17:a8:6a:45:79:26:58:e7:2e:94:eb:d3:
a5:50:96:bf:11:09:e2:13:55:87:e2:81:fe:ae:05:99:e0:ae:
24:2a:df:d7:25:7b:43:0f:e8:9b:62:0d:38:f0:1b:24:a6:78:
a2:d9:f3:70:53:61:6c:37:59:06:1b:6b:b3:2e:95:32:de:17:
44:a3:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:17:25 2025 by rpki-client