Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/nq9QkGdX68nm-XUKViIxXutv5p0.roa
File: nq9QkGdX68nm-XUKViIxXutv5p0.roa (raw, json)
Hash identifier: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=
Subject key identifier: 9E:AF:50:90:67:57:EB:C9:E6:F9:75:0A:56:22:31:5E:EB:6F:E6:9D
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 019424457B5BA34B34E3F0869472658D1A3A
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/nq9QkGdX68nm-XUKViIxXutv5p0.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 45.94.220.0/22 maxlen: 24
146.19.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7b:5b:a3:4b:34:e3:f0:86:94:72:65:8d:1a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9eaf50906757ebc9e6f9750a5622315eeb6fe69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:3e:ed:42:e7:6c:1e:4f:d5:19:fe:4a:c1:
97:42:1b:0c:d7:21:09:6c:33:22:fc:38:ad:7b:cc:
d6:7b:5e:ab:e7:36:e4:16:2d:1a:71:5e:49:39:0f:
46:0e:94:f1:f3:b5:84:ad:57:84:23:fb:a0:22:ca:
b6:9d:d4:40:3a:09:d2:4b:48:f6:9f:cf:31:4d:2a:
77:bb:87:ab:e1:14:df:aa:4f:c7:df:9a:98:fd:98:
56:b0:48:7a:7a:aa:4a:c5:96:09:58:a2:df:f9:d9:
24:20:3b:4d:b2:df:b9:d6:78:13:0e:be:1f:e0:34:
d4:c2:dc:0b:c3:87:e2:7d:4e:df:32:e3:c1:8e:69:
23:6a:c3:68:b8:00:cf:70:17:de:07:df:9a:39:4c:
38:20:5f:c4:0b:55:98:5a:9b:6b:a1:91:c2:6a:09:
85:ee:f4:d9:76:da:2b:58:e1:33:d1:d2:79:fc:86:
ce:43:51:f8:d2:9a:18:77:ff:34:c8:30:59:d6:0e:
5b:d6:60:8f:57:ea:db:b9:21:32:d8:94:27:24:21:
de:c4:d8:5f:d3:68:47:ee:e1:0b:81:c8:2a:28:8e:
fc:ba:00:f8:cc:92:40:aa:9b:1b:b5:f3:da:7c:f2:
26:e1:28:06:e8:ad:05:19:ff:35:e7:6a:62:ce:db:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:50:90:67:57:EB:C9:E6:F9:75:0A:56:22:31:5E:EB:6F:E6:9D
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/nq9QkGdX68nm-XUKViIxXutv5p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.220.0/22
146.19.162.0/24
Signature Algorithm: sha256WithRSAEncryption
83:89:c6:9e:c7:b4:c3:ff:38:0e:89:68:0d:4a:6f:9e:9d:65:
2f:83:20:dd:fe:1d:2f:3a:16:0d:f0:33:cd:f2:be:50:a8:13:
6d:53:5a:46:28:6d:b9:1e:b0:09:e8:28:a8:46:f0:f0:c9:6f:
a4:d8:fd:48:3b:40:e7:73:bd:5f:ee:ea:68:d4:2a:85:7d:07:
c5:ab:f6:88:87:21:b9:41:d5:38:64:ec:fa:23:d4:69:68:18:
27:d9:18:d6:ff:e4:db:86:b1:59:00:60:fd:3d:82:b9:a5:aa:
36:26:b3:1e:80:25:95:e5:87:d5:eb:a7:a7:bc:71:a9:61:e7:
36:db:f8:7e:00:80:e8:97:dc:72:2c:e2:64:39:9c:44:1e:ff:
15:b0:77:76:c3:41:b7:af:15:d3:f6:bd:8f:dd:20:83:39:78:
14:52:cb:dd:24:28:24:df:d7:6b:be:2c:9e:61:41:b5:30:c8:
b5:50:42:42:61:77:e3:cf:47:22:37:e8:e4:63:b4:8e:4c:37:
f4:dd:6d:e1:86:08:62:ff:a8:2f:55:b3:5c:28:01:32:a7:e2:
40:a9:af:36:ee:34:30:59:0a:5f:75:9c:77:26:39:8f:0d:e2:
e5:7b:d4:95:cf:85:e1:b6:00:62:b0:36:da:ce:5c:1f:74:15:
8f:06:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:31:53 2025 by rpki-client