Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/nRXz0JWuVzTuqgJJowbVl480fPU.roa
File: nRXz0JWuVzTuqgJJowbVl480fPU.roa (raw, json)
Hash identifier: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=
Subject key identifier: 9D:15:F3:D0:95:AE:57:34:EE:AA:02:49:A3:06:D5:97:8F:34:7C:F5
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019425FDC8EA3CEAC63638B5F5498B4FDEB8
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/nRXz0JWuVzTuqgJJowbVl480fPU.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210975
IP address blocks: 91.211.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c8:ea:3c:ea:c6:36:38:b5:f5:49:8b:4f:de:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d15f3d095ae5734eeaa0249a306d5978f347cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:8b:6e:88:22:78:90:ce:f3:99:b0:4f:43:
b8:5c:43:7d:ac:62:7c:f8:ac:a4:d4:78:2f:da:9b:
5c:e5:73:7c:14:c4:a7:6e:79:f3:d3:b9:60:0f:6b:
ab:6f:9a:b5:ed:31:ab:a8:9e:81:a1:13:1c:af:6b:
24:58:31:47:17:ca:fb:de:5f:53:16:62:c7:f6:72:
6c:ce:86:6d:c4:f3:ca:df:b2:be:1a:cb:9b:7c:a3:
ba:a9:53:d9:90:5f:b6:15:0c:08:1e:c5:02:d1:3e:
b9:bc:2b:48:46:45:15:fc:28:86:9f:48:4f:d6:a3:
15:5a:3d:01:21:e8:15:4e:6d:03:58:39:d2:93:3f:
0d:2d:02:6d:75:5b:ac:da:62:4a:d0:11:31:e1:14:
c8:1c:dd:3f:bc:6b:92:5d:8b:f9:c2:44:1b:54:84:
fe:c7:ef:74:38:9f:0a:d2:97:9b:79:c4:3a:7c:1c:
7e:4d:0d:78:d4:54:49:57:15:3f:40:40:fe:09:2d:
b5:cf:95:b7:15:f9:86:8f:95:72:b8:6b:c8:9b:b8:
28:ed:e6:42:83:dd:a5:e8:4d:fc:01:7b:f6:f7:15:
32:62:29:3a:56:41:73:dd:a0:ad:12:dc:20:7f:5a:
f2:dd:00:14:20:4a:a2:69:f9:e3:f3:2b:2f:26:a5:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:15:F3:D0:95:AE:57:34:EE:AA:02:49:A3:06:D5:97:8F:34:7C:F5
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/nRXz0JWuVzTuqgJJowbVl480fPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:73:28:5f:cd:ac:87:51:8f:42:6c:86:ec:c7:15:4f:0e:0d:
5f:5f:8f:36:e8:22:2e:5b:6b:4b:3d:d0:1d:27:d7:9a:eb:a3:
7e:0b:56:d7:2f:3b:43:56:7a:d5:6c:15:7a:53:da:a4:25:cb:
66:cc:74:43:c2:27:15:37:6b:e6:9a:da:5e:f3:56:6e:32:a0:
45:ce:8e:fe:e5:72:e3:5b:43:3a:b9:ad:d3:33:d0:ad:4f:18:
ee:c4:bc:d2:db:35:e8:7b:06:1b:b5:4d:0c:77:29:1c:b7:d3:
9a:b4:66:7f:fb:e0:26:3b:e8:08:f1:d5:56:6d:38:10:f8:ee:
5a:69:e4:99:74:8e:86:cf:52:18:5d:8d:00:d0:22:e5:d6:83:
fc:8d:1d:a7:be:90:13:a8:53:59:b7:bb:7d:00:62:f1:20:f6:
7b:28:62:09:9b:3d:ca:65:6f:0a:07:af:49:59:5b:78:c0:cc:
bd:b7:0f:54:a9:3c:77:85:13:0f:50:4f:20:cd:a9:15:d2:1f:
ea:75:00:b7:eb:6b:6c:c6:b9:f9:20:e5:08:dc:53:35:22:cf:
c0:47:27:30:da:03:86:18:73:8a:09:81:cb:0a:ce:7f:90:f1:
8d:b5:29:51:0b:a4:28:65:d4:82:1c:06:e6:95:6c:88:5e:35:
2d:7f:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:40:36 2025 by rpki-client