Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nUQCcqzPVYeX5LQfJqlHwxqJKkU.roa
File: nUQCcqzPVYeX5LQfJqlHwxqJKkU.roa (raw, json)
Hash identifier: 9ZGC18lfC6HCUkeNESODTdW9p1jpT8Z4/90OT8vjPz8=
Subject key identifier: 9D:44:02:72:AC:CF:55:87:97:E4:B4:1F:26:A9:47:C3:1A:89:2A:45
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195606D72235E958B96C97E54C71822FA47
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nUQCcqzPVYeX5LQfJqlHwxqJKkU.roa
Signing time: Tue 04 Mar 2025 09:12:20 +0000
ROA not before: Tue 04 Mar 2025 09:12:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10103
IP address blocks: 213.218.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:6d:72:23:5e:95:8b:96:c9:7e:54:c7:18:22:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 09:12:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d440272accf558797e4b41f26a947c31a892a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:63:eb:26:95:e7:6c:5e:3d:b0:59:f6:89:
f5:d6:b5:4c:e5:62:1b:75:3b:3d:2a:e1:7d:cb:bb:
aa:e4:15:f3:7f:e2:33:e7:0a:18:b6:ef:db:ce:e7:
e4:04:b8:ad:77:7f:40:04:eb:ed:a8:56:23:c3:d3:
d5:73:7c:f5:90:8b:76:cf:4d:4b:d3:3b:7b:19:8e:
fd:ac:66:46:47:58:e9:43:c4:56:ab:1a:d1:ac:3a:
40:49:ff:93:ec:b2:60:c3:e7:2a:b3:5f:7e:d5:2a:
86:54:da:6c:9f:6b:25:07:26:c4:f9:15:2f:33:8c:
b0:60:37:80:2e:1e:1a:46:93:4d:25:88:39:4e:56:
48:f2:ad:8a:6e:81:e9:8c:50:a7:d7:8e:5a:ac:b6:
c9:c8:4b:8a:03:e1:a2:9c:49:25:c6:de:ef:92:60:
f9:7e:06:c3:d9:fc:b8:fa:2c:5a:38:e7:eb:8c:f3:
4d:40:56:e1:c2:67:42:3f:52:46:71:ac:52:27:a1:
b8:45:4b:e6:3c:9b:33:ab:56:27:58:4c:12:8a:03:
96:3f:5a:ce:43:74:63:3f:67:3f:e5:5a:71:b0:57:
c7:0a:b2:88:2b:9a:4a:f5:80:9b:b5:55:2f:ec:f6:
88:f5:e0:26:71:fe:3f:40:2d:be:36:c3:94:4f:ec:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:44:02:72:AC:CF:55:87:97:E4:B4:1F:26:A9:47:C3:1A:89:2A:45
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nUQCcqzPVYeX5LQfJqlHwxqJKkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e7:a3:0b:f3:6d:98:41:e6:a4:55:bb:4c:e5:c9:12:ca:9c:
65:06:a1:30:2d:35:81:2a:7e:0b:56:77:81:11:97:10:e2:ff:
b2:e2:de:57:13:37:49:93:04:a9:d6:6b:af:9b:e1:21:d0:6b:
06:30:b1:d6:ad:61:45:dc:2e:b4:3e:1a:e0:90:ef:d5:4c:17:
89:6a:fc:c1:a5:89:56:70:90:99:8f:2e:33:b6:d3:72:cc:c2:
52:a3:af:02:18:b4:09:d6:80:c3:7f:f8:a9:17:28:45:30:3f:
fb:88:d9:d4:aa:1b:97:32:7b:e5:41:17:61:59:f9:a3:7e:83:
5d:9d:d1:5f:de:7d:3e:c5:22:51:3c:c2:27:26:03:2f:fa:73:
bd:f4:f6:17:e4:90:70:82:6d:a7:be:2c:80:1c:d7:93:0d:d0:
8b:7b:b7:27:1e:de:be:5e:4e:af:32:92:33:f8:46:1d:64:90:
c5:6d:7f:a9:23:ca:a3:88:c4:a6:b0:a4:77:53:57:b5:eb:0f:
05:73:6a:d9:63:58:cb:09:d2:79:df:d7:5a:3e:50:32:ab:7c:
a8:97:8f:a4:01:de:0d:60:1f:ec:1b:59:71:d6:77:c9:d6:15:
02:4e:c2:bf:de:7a:16:da:c7:83:33:dd:e1:43:d9:1e:b8:6c:
80:43:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:32:20 2025 by rpki-client